<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="24914">
<package pkgid="df487e39bbf7444e2a600ec4c4522d1da1ecd0ca2c1208bd35e0dfa2489aad73" name="389-ds" arch="src">
  <version epoch="0" ver="1.4.2.12~git0.b11942c36" rel="lp151.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1515931200">- add tw.patch to fix potential buffer overflow</changelog>
  <changelog author="hguo@suse.com" date="1516881600">- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove
  a faulty rm statement from makefile.</changelog>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075200">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
</package>
<package pkgid="e52d32425030b3381e32338c3f97d5df485a851fd7a09e5e769cab172c89d554" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.4.2.12~git0.b11942c36" rel="lp151.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1515931200">- add tw.patch to fix potential buffer overflow</changelog>
  <changelog author="hguo@suse.com" date="1516881600">- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove
  a faulty rm statement from makefile.</changelog>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075200">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
</package>
<package pkgid="371e64c51d734a30b41c6a5c72c84ca066c52cd8a9592e51864ad3a658fe176e" name="389-ds" arch="src">
  <version epoch="0" ver="1.4.2.14~git0.5ac5b02ce" rel="lp151.5.9.1"/>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075200">- Patch rollup as described in bsc#1169364
- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075201">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1591012800">- Resolve TLS 1.0 recognition issue bsc#1171749
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement</changelog>
</package>
<package pkgid="a156f29108f569e710e1e1bb68ebf775d1346d2a4d17bdf0e7c2550e80ef1f56" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.4.2.14~git0.5ac5b02ce" rel="lp151.5.9.1"/>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075200">- Patch rollup as described in bsc#1169364
- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075201">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1591012800">- Resolve TLS 1.0 recognition issue bsc#1171749
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement</changelog>
</package>
<package pkgid="d683ffc02a18a3ffdf95a04e0ff3478adfabbd0fb10d0daa4ebd1c65ca7ebbde" name="389-ds" arch="src">
  <version epoch="0" ver="1.4.2.16~git0.92afa2ea7" rel="lp151.5.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075200">- Patch rollup as described in bsc#1169364
- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075201">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1591012800">- Resolve TLS 1.0 recognition issue bsc#1171749
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Resolve bsc#1174057 upstream stability and fix rollup.
- Add upstream patch to resolve OSC build warning re 64 bit types
  0001-Issue-50984-Fix-disk_mon_check_diskspace-types.patch
- Update to version 1.4.2.16~git0.92afa2ea7:
  * Bump version to 1.4.2.16
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Bump version to 1.4.2.15
  * Issue 51072 - Set the default minimum worker threads
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1597060800">- Resolve maint-coord issue with svrcore version requirements in spec</changelog>
</package>
<package pkgid="1464bdb29737f56aba6f3d03cca9071e0b536564e45647259fe95b4559fcdef7" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.4.2.16~git0.92afa2ea7" rel="lp151.5.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075200">- Patch rollup as described in bsc#1169364
- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075201">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1591012800">- Resolve TLS 1.0 recognition issue bsc#1171749
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Resolve bsc#1174057 upstream stability and fix rollup.
- Add upstream patch to resolve OSC build warning re 64 bit types
  0001-Issue-50984-Fix-disk_mon_check_diskspace-types.patch
- Update to version 1.4.2.16~git0.92afa2ea7:
  * Bump version to 1.4.2.16
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Bump version to 1.4.2.15
  * Issue 51072 - Set the default minimum worker threads
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1597060800">- Resolve maint-coord issue with svrcore version requirements in spec</changelog>
</package>
<package pkgid="ba2678ef1d289c15c5fd56e31db4f3f45d61c375612cdaf735961753bb415cbe" name="389-ds" arch="src">
  <version epoch="0" ver="1.4.2.6~git0.e84bbce3f" rel="lp151.5.3.1"/>
  <changelog author="mrueckert@suse.de" date="1511179200">- added simplify-lib389-setup-py.patch
  seems the python3 setuptools on leap 42.3 do not like this fancy
  syntax. kill it and always use the python 3 way.</changelog>
  <changelog author="rbrown@suse.com" date="1512475200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mrueckert@suse.de" date="1515931200">- add tw.patch to fix potential buffer overflow</changelog>
  <changelog author="hguo@suse.com" date="1516881600">- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove
  a faulty rm statement from makefile.</changelog>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
</package>
<package pkgid="d636f31bdfcaf7fa2312cdb29141fd5ed5465e4c3741031c5532444db966a799" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.4.2.6~git0.e84bbce3f" rel="lp151.5.3.1"/>
  <changelog author="mrueckert@suse.de" date="1511179200">- added simplify-lib389-setup-py.patch
  seems the python3 setuptools on leap 42.3 do not like this fancy
  syntax. kill it and always use the python 3 way.</changelog>
  <changelog author="rbrown@suse.com" date="1512475200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mrueckert@suse.de" date="1515931200">- add tw.patch to fix potential buffer overflow</changelog>
  <changelog author="hguo@suse.com" date="1516881600">- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove
  a faulty rm statement from makefile.</changelog>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
</package>
<package pkgid="064d428a74632e83e75eee54321f6d79b42ca6fd6b0b4accdcff675e833accc7" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.4.2.12~git0.b11942c36" rel="lp151.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1515931200">- add tw.patch to fix potential buffer overflow</changelog>
  <changelog author="hguo@suse.com" date="1516881600">- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove
  a faulty rm statement from makefile.</changelog>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075200">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
</package>
<package pkgid="74a744657a3a403711f37d448f69b1595774734c669997f06cdd3b01f300e5d6" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.4.2.14~git0.5ac5b02ce" rel="lp151.5.9.1"/>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075200">- Patch rollup as described in bsc#1169364
- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075201">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1591012800">- Resolve TLS 1.0 recognition issue bsc#1171749
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement</changelog>
</package>
<package pkgid="12926c85accc230beeb47fa4a69fc2be1a3774a2b96ce40f8ebf4f7b01e26fbe" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.4.2.16~git0.92afa2ea7" rel="lp151.5.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075200">- Patch rollup as described in bsc#1169364
- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075201">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1591012800">- Resolve TLS 1.0 recognition issue bsc#1171749
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Resolve bsc#1174057 upstream stability and fix rollup.
- Add upstream patch to resolve OSC build warning re 64 bit types
  0001-Issue-50984-Fix-disk_mon_check_diskspace-types.patch
- Update to version 1.4.2.16~git0.92afa2ea7:
  * Bump version to 1.4.2.16
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Bump version to 1.4.2.15
  * Issue 51072 - Set the default minimum worker threads
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1597060800">- Resolve maint-coord issue with svrcore version requirements in spec</changelog>
</package>
<package pkgid="9e0ee2f0fa5829ef2d74b1f65be9e017b298f60172e391c4ff4898f4354e3147" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.4.2.6~git0.e84bbce3f" rel="lp151.5.3.1"/>
  <changelog author="mrueckert@suse.de" date="1511179200">- added simplify-lib389-setup-py.patch
  seems the python3 setuptools on leap 42.3 do not like this fancy
  syntax. kill it and always use the python 3 way.</changelog>
  <changelog author="rbrown@suse.com" date="1512475200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mrueckert@suse.de" date="1515931200">- add tw.patch to fix potential buffer overflow</changelog>
  <changelog author="hguo@suse.com" date="1516881600">- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove
  a faulty rm statement from makefile.</changelog>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
</package>
<package pkgid="98cdaec55394604ac61ca9618c3288334c50a2669439dff35d41e35163a58dc5" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.2.12~git0.b11942c36" rel="lp151.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1515931200">- add tw.patch to fix potential buffer overflow</changelog>
  <changelog author="hguo@suse.com" date="1516881600">- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove
  a faulty rm statement from makefile.</changelog>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075200">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
</package>
<package pkgid="3987222c889d216497d904b965d5ac86cbd2cd865e0ee2fd33154399ca3cc88b" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.2.14~git0.5ac5b02ce" rel="lp151.5.9.1"/>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075200">- Patch rollup as described in bsc#1169364
- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075201">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1591012800">- Resolve TLS 1.0 recognition issue bsc#1171749
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement</changelog>
</package>
<package pkgid="522e5bab8baf50f6252bf88677e27b3f8ae6fe93f6c308c4848622ac336a05c0" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.2.16~git0.92afa2ea7" rel="lp151.5.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075200">- Patch rollup as described in bsc#1169364
- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1588075201">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as part it is part of 1.4.2.12
- Update to version 1.4.2.12~git0.b11942c36:
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1591012800">- Resolve TLS 1.0 recognition issue bsc#1171749
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Resolve bsc#1174057 upstream stability and fix rollup.
- Add upstream patch to resolve OSC build warning re 64 bit types
  0001-Issue-50984-Fix-disk_mon_check_diskspace-types.patch
- Update to version 1.4.2.16~git0.92afa2ea7:
  * Bump version to 1.4.2.16
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Bump version to 1.4.2.15
  * Issue 51072 - Set the default minimum worker threads
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1597060800">- Resolve maint-coord issue with svrcore version requirements in spec</changelog>
</package>
<package pkgid="191d9cea57a922cbb0d641cab46a04ba30bc64774b4718f10cb01c04747472b8" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.2.6~git0.e84bbce3f" rel="lp151.5.3.1"/>
  <changelog author="mrueckert@suse.de" date="1511179200">- added simplify-lib389-setup-py.patch
  seems the python3 setuptools on leap 42.3 do not like this fancy
  syntax. kill it and always use the python 3 way.</changelog>
  <changelog author="rbrown@suse.com" date="1512475200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mrueckert@suse.de" date="1515931200">- add tw.patch to fix potential buffer overflow</changelog>
  <changelog author="hguo@suse.com" date="1516881600">- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove
  a faulty rm statement from makefile.</changelog>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1569499200">- * Change a version check macro to determine which SLE release we are
  * Include patch so that the service can start when environment files
    are missing from newer versions (bsc#1152393):
  * 0001-Remove-envfile-from-sysconfig-as-SUSE-does-not-ship-.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
</package>
<package pkgid="6d1ded6f63b11778d30937b7d458c56245817bcc9f96151ce891350285f851de" name="DisplayCAL" arch="src">
  <version epoch="0" ver="3.5.3.0" rel="lp151.3.3.1"/>
  <changelog author="cfarrell@suse.com" date="1335960000">- license update: GPL-3.0+
  Use SPDX syntax and always specify the version of the GPL that applies
  Thu Apr  5 17:19:55 UTC 2012 - dispcalGUI_at_hoech.net
- added .changes file</changelog>
  <changelog author="coolo@suse.com" date="1336651200">- ran format_spec_file service to give the spec file a valid
  license (it already had a copyright)</changelog>
  <changelog author="kkaempf@suse.com" date="1457524800">- Add provides/obsoletes for the rename dispcalGUI -&gt; DisplayCAL
  at version 3.1.0.0
  Mon Feb 29 16:43:24 UTC 2016 - florian_at_displaycal.net
- update to 3.1.1.0: see README.html#changelog-3.1.1
  Sun Jan 31 23:47:53 UTC 2016 - florian_at_displaycal.net
- update to 3.1.0.0:
  * renamed dispcalGUI to DisplayCAL
  * see README.html#changelog-3.1
  Mon Jan 11 10:34:55 UTC 2016 - dispcalGUI_at_hoech.net
- update to 3.0.6.3: see README.html#changelog-3.0.6.3
  Mon Dec 21 20:22:55 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.6.0: see README.html#changelog-3.0.6
  Thu Nov 26 22:06:42 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.5.0: see README.html#changelog-3.0.5
  Fri Sep 25 20:32:07 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.4.3: see README.html#changelog-3.0.4.3
  Mon Sep 07 13:06:27 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.4.2: see README.html#changelog-3.0.4.2
  Tue Sep 01 11:02:08 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.4.1: see README.html#changelog-3.0.4.1
  Sun Aug 09 23:23:27 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.4.0: see README.html#changelog-3.0.4
  Thu Jul 09 13:02:03 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.3.1: see README.html#changelog-3.0.3.1
  Mon Jul 06 21:01:35 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.3.0: see README.html#changelog-3.0.3
  Sun Jun 07 22:30:09 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.2.0: see README.html#changelog-3.0.2
  Sun May 31 18:43:10 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.1.0: see README.html#changelog-3.0.1
  Sat May 02 21:33:48 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.0.0: see README.html#changelog-3.0
  Sat Nov 15 19:47:26 UTC 2014 - dispcalGUI_at_hoech.net
- update to 2.6.0.0: see README.html#changelog-2.6
  Sat Sep 06 12:40:31 UTC 2014 - dispcalGUI_at_hoech.net
- update to 2.5.0.0: see README.html#changelog-2.5
  Sun May 11 17:06:37 UTC 2014 - dispcalGUI_at_hoech.net
- update to 2.1.0.0: see README.html#changelog-2.1
  Wed Apr 23 02:32:45 UTC 2014 - dispcalGUI_at_hoech.net
- update to 2.0.0.0: see README.html#changelog-2.0
  Sun Feb 09 22:34:19 UTC 2014 - dispcalGUI_at_hoech.net
- update to 1.7.5.7: see README.html#changelog-1.7.5.7
  Sun Jan 19 09:09:16 UTC 2014 - dispcalGUI_at_hoech.net
- update to 1.7.1.6: see README.html#changelog-1.7.1.6
  Wed Oct 23 20:09:44 UTC 2013 - dispcalGUI_at_hoech.net
- update to 1.5.3.1: see README.html#changelog-1.5.3.1
  Tue Oct 22 14:32:41 UTC 2013 - dispcalGUI_at_hoech.net
- update to 1.5.2.5: see README.html#changelog-1.5.2.5
  Sun Mar 03 19:22:01 UTC 2013 - dispcalGUI_at_oech.net
- update to 1.2.7.0: see README.html#changelog-1.2.7.0
  Fri Mar 01 16:47:49 UTC 2013 - dispcalGUI_at_hoech.net
- update to 1.2.6.6: see README.html#changelog-1.2.6.6
  Mon Jan 07 22:45:00 UTC 2013 - dispcalGUI_at_hoech.net
- Fix typo
  Mon Jan 07 21:49:00 UTC 2013 - dispcalGUI_at_hoech.net
- Fix missing man pages and made scripts executable
  Mon Jan 07 18:42:03 UTC 2013 - dispcalGUI_at_hoech.net
- update to 1.1.8.3: see README.html#changelog-1.1.8.3
  Sat Jan 05 12:40:52 UTC 2013 - dispcalGUI_at_hoech.net
- update to 1.1.7.0: see README.html#changelog-1.1.7.0
  Mon Nov 05 19:40:46 UTC 2012 - dispcalGUI_at_hoech.net
- update to 1.1.2.9: see README.html#changelog-1.1.2.9
  Fri Oct 05 17:05:00 UTC 2012 - dispcalGUI_at_hoech.net
- update to 1.1.2.1: see README.html#changelog-1.1.2.1
  Sat Sep 15 13:54:02 UTC 2012 - dispcalGUI_at_hoech.net
- update to 1.1.0.0: see README.html#changelog-1.1.0.0
  Wed Aug 01 09:08:34 UTC 2012 - dispcalGUI_at_hoech.net
- update to 1.0.9.0: see README.html#changelog-1.0.9.0
  Thu Jun 28 20:14:14 UTC 2012 - dispcalGUI_at_hoech.net
- update to 1.0.7.7: see README.html#changelog-1.0.7.7
  Fri Jun 22 22:26:46 UTC 2012 - dispcalGUI_at_hoech.net
- update to 1.0.7.6: see README.html#changelog-1.0.7.6
  Mon Jun 18 19:13:00 UTC 2012 - dispcalGUI_at_hoech.net
- define RPM group per-distro as before format_spec_file
  Sat Jun  9 12:47:00 UTC 2012 - dispcalGUI_at_hoech.net
- removed all udev stuff as it should already be handled by the
  Argyll dependency</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Fix nonsensical 3.3 changelog entry.
  Revert description back to using 3rd singular form.
  Sun Jun 04 16:10:37 UTC 2017 - florian_at_displaycal.net
- Update to 3.3.1.0:
  * Fix unhandled exception when using CIECAM02 with alternate
    forward profiler
  * See README.html#changelog-3.3.1
  Thu Jun 01 16:11:48 UTC 2017 - florian_at_displaycal.net
- Update to 3.3.0.0:
  * Better multi CPU/multi core support. Generating high
    resolution PCS-to-device tables is now taking more advantage
    of multiple (physical or logical) processors (typical 2x
    speedup on a i7-6700K CPU).
  * Generating a simple high resolution perceptual table is now
    done by copying the colorimetric table and only generating
    new input curves. This markedly reduces the processing time
    needed to create the perceptual table (6x speedup on a
    i7-6700K CPU).
  * See README.html#changelog-3.3
  Sun Feb 19 16:46:26 UTC 2017 - florian_at_displaycal.net
- Update to 3.2.4.0:
  * Maintenance/bugfix release
  * See README.html#changelog-3.2.4
  Wed Jan 04 14:12:01 UTC 2017 - florian_at_displaycal.net
- Update to 3.2.3.0:
  * Maintenance/bugfix release
  * See README.html#changelog-3.2.3
  Tue Dec 13 22:29:24 UTC 2016 - florian_at_displaycal.net
- Update to 3.2.2.0:
  * Maintenance/bugfix release
  * See README.html#changelog-3.2.2
  Fri Nov 25 14:05:19 UTC 2016 - florian_at_displaycal.net
- update to 3.2.1.0: see README.html#changelog-3.2.1
  Sat Nov 19 11:04:10 UTC 2016 - florian_at_displaycal.net
- update to 3.2.0.0: see README.html#changelog-3.2
  Mon Oct 24 10:29:45 UTC 2016 - florian_at_displaycal.net
- update to 3.1.7.3: see README.html#changelog-3.1.7.3
  Tue Oct 04 20:50:59 UTC 2016 - florian_at_displaycal.net
- update to 3.1.7.0: see README.html#changelog-3.1.7
  Wed Aug 24 21:06:27 UTC 2016 - florian_at_displaycal.net
- update to 3.1.6.0: see README.html#changelog-3.1.6
  Tue Aug 02 21:20:48 UTC 2016 - florian_at_displaycal.net
- update to 3.1.5.0: see README.html#changelog-3.1.5
  Sun Jul 10 21:51:48 UTC 2016 - florian_at_displaycal.net
- update to 3.1.4.0: see README.html#changelog-3.1.4
  Mon Apr 11 08:53:40 UTC 2016 - florian_at_displaycal.net
- update to 3.1.3.1: see README.html#changelog-3.1.3.1
  Sat Apr 09 10:20:55 UTC 2016 - florian_at_displaycal.net
- update to 3.1.3.0: see README.html#changelog-3.1.3</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1512475200">- Replace xorg-x11-devel build requires by the needed individual
  libraries.
  Wed Oct 18 17:36:43 UTC 2017 - florian_at_displaycal.net
- Update to 3.3.5.0:
  * Maintenance/bugfixes
  * Minor enhancements
  * Updated french localization
  * See README.html#changelog-3.3.5
  Wed Sep 13 12:10:59 UTC 2017 - florian_at_displaycal.net
- Update to 3.3.4.1:
  * Fix XRandR fallback not returning device ID in some cases
  * Fix visual whitepoint editor madTPG_Net interface
  * See README.html#changelog-3.3.4.1</changelog>
  <changelog author="obs@hoech.net" date="1514635200">- Update to 3.4.0.0:
  * Critical: Prevent bad clipping in case of non-monotonic device
    response
  * Fix consistency of device to profile mapping accross external
    APIs (this fix is required to match how ArgyllCMS 2.0
    enumerates displays)
  * HDR improvements
  * Added simplified chinese translation
  * See README.html#changelog-3.4</changelog>
  <changelog author="obs@hoech.net" date="1518955200">- Update to 3.5.0.0:
  * Maintenance/bugfixes
  * New application icons and slightly refreshed theme
  * See README.html#changelog-3.5</changelog>
  <changelog author="mrueckert@suse.de" date="1521806400">- Update to 3.5.1.0:
  - Added in this release:
  - FEATURE Rudimentary support for WCS Color Device Model
    profiles (only description, author, white- &amp; blackpoint,
    gamma, parametric curve, and matrix tags are recognized and
    mapped to appropriate ICCv2 types).
  - Changed in this release:
  - UI Updated traditional chinese localization (thanks to
    ???).
  - ENHANCEMENT Update bundled vendor PNP ID database.
  - ENHANCEMENT Linux: Use SDL (Simple DirectMedia Layer)
    directly.
  - Fixed in this release:
  - MINOR Work around Python issue #738361 (shell pattern
    compilation fails raising an unhandled exception if a path
    contains certain combinations of meta characters).
  - MINOR Measurement report: Deal with quantization when
    creating the report (fixes error when using video output
    levels in combination with some display profiles).
  - MINOR Profile loader (Windows): Display a proper error
    message when associating an invalid profile.
  - MINOR Profile loader (Windows): In case of an invalid profile
    (e.g. damaged file), fall back to linear gamma ramps instead
    of using the previously cached ramps and change the tray icon
    to reflect this.
  - MINOR Profile loader (Windows): Ignore potential stray
    WM_COMMAND messages caused by 3rd party application
    interference.
  - MINOR Bump minimum required wxPython version to 3.0 (fixes a
    compatibility problem under Linux if wxPython 2.8 was
    installed).
  - COSMETIC Refresh output levels control when loading settings.</changelog>
  <changelog author="mrueckert@suse.de" date="1522584000">- Update to 3.5.2.0:
  - TRIVIAL Prevent potential ?service/proto not found? error due
    to unreliable system APIs when attempting to automatically
    download updates or vendor files.
  - TRIVIAL Linux: Restore missing icons in the window switcher and
    panel under XFCE.
  - TRIVIAL Linux: Add missing i1 Studio entry to bundled
    instrument configuration files (ArgyllCMS &gt;= 2.0).
  - TRIVIAL Windows: Use bundled certificate authority (CA)
    certificates to circumvent potentially outdated system
    certificates under older versions of Windows.</changelog>
  <changelog author="obs-packaging@displaycal.net" date="1524657600">- Update to 3.5.3:
  * [Feature] Rudimentary ICCv4 profile autoconversion support
    (only matrix profile types)
  * [Enhancement] Lookup table based test profiles for evaluating
    display color management
  * [Enhancement] Profile information: Ability to plot CMYK profile
    tone response curves
  * [Enhancement] HDR SMPTE 2084 roll-off 3D LUT: Improved tone
    mapping
  * [Enhancement] Slightly improved accuracy of XYZ LUT profile
    CIECAM02 gamut mapping
  * Temporarily restored compatibility with wxPython 2.8.11/12
  * [Minor] Restored ability to create profiles from non RGB device
    measurement files
  * [Minor] Profile information: Deal with potential NULL values in
    meta tags of 3rd party ICC profiles
  * [Trivial] Profile information: Correctly parse non-default
    device media type attributes
  * [Trivial] Profile information: Keep original tag order of 3rd
    party profiles when checking ID
  * [Trivial] Fix AppData XML</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578916800">- Added dependency on python-xml. Without it, DisplayCAL won't
  start (fixed in factory already).</changelog>
</package>
<package pkgid="9d096e2c6613511242216495bbad9510c9a35450de52a62e202c9fa61af95270" name="DisplayCAL" arch="x86_64">
  <version epoch="0" ver="3.5.3.0" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1336651200">- ran format_spec_file service to give the spec file a valid
  license (it already had a copyright)</changelog>
  <changelog author="kkaempf@suse.com" date="1457524800">- Add provides/obsoletes for the rename dispcalGUI -&gt; DisplayCAL
  at version 3.1.0.0
  Mon Feb 29 16:43:24 UTC 2016 - florian_at_displaycal.net
- update to 3.1.1.0: see README.html#changelog-3.1.1
  Sun Jan 31 23:47:53 UTC 2016 - florian_at_displaycal.net
- update to 3.1.0.0:
  * renamed dispcalGUI to DisplayCAL
  * see README.html#changelog-3.1
  Mon Jan 11 10:34:55 UTC 2016 - dispcalGUI_at_hoech.net
- update to 3.0.6.3: see README.html#changelog-3.0.6.3
  Mon Dec 21 20:22:55 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.6.0: see README.html#changelog-3.0.6
  Thu Nov 26 22:06:42 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.5.0: see README.html#changelog-3.0.5
  Fri Sep 25 20:32:07 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.4.3: see README.html#changelog-3.0.4.3
  Mon Sep 07 13:06:27 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.4.2: see README.html#changelog-3.0.4.2
  Tue Sep 01 11:02:08 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.4.1: see README.html#changelog-3.0.4.1
  Sun Aug 09 23:23:27 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.4.0: see README.html#changelog-3.0.4
  Thu Jul 09 13:02:03 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.3.1: see README.html#changelog-3.0.3.1
  Mon Jul 06 21:01:35 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.3.0: see README.html#changelog-3.0.3
  Sun Jun 07 22:30:09 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.2.0: see README.html#changelog-3.0.2
  Sun May 31 18:43:10 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.1.0: see README.html#changelog-3.0.1
  Sat May 02 21:33:48 UTC 2015 - dispcalGUI_at_hoech.net
- update to 3.0.0.0: see README.html#changelog-3.0
  Sat Nov 15 19:47:26 UTC 2014 - dispcalGUI_at_hoech.net
- update to 2.6.0.0: see README.html#changelog-2.6
  Sat Sep 06 12:40:31 UTC 2014 - dispcalGUI_at_hoech.net
- update to 2.5.0.0: see README.html#changelog-2.5
  Sun May 11 17:06:37 UTC 2014 - dispcalGUI_at_hoech.net
- update to 2.1.0.0: see README.html#changelog-2.1
  Wed Apr 23 02:32:45 UTC 2014 - dispcalGUI_at_hoech.net
- update to 2.0.0.0: see README.html#changelog-2.0
  Sun Feb 09 22:34:19 UTC 2014 - dispcalGUI_at_hoech.net
- update to 1.7.5.7: see README.html#changelog-1.7.5.7
  Sun Jan 19 09:09:16 UTC 2014 - dispcalGUI_at_hoech.net
- update to 1.7.1.6: see README.html#changelog-1.7.1.6
  Wed Oct 23 20:09:44 UTC 2013 - dispcalGUI_at_hoech.net
- update to 1.5.3.1: see README.html#changelog-1.5.3.1
  Tue Oct 22 14:32:41 UTC 2013 - dispcalGUI_at_hoech.net
- update to 1.5.2.5: see README.html#changelog-1.5.2.5
  Sun Mar 03 19:22:01 UTC 2013 - dispcalGUI_at_oech.net
- update to 1.2.7.0: see README.html#changelog-1.2.7.0
  Fri Mar 01 16:47:49 UTC 2013 - dispcalGUI_at_hoech.net
- update to 1.2.6.6: see README.html#changelog-1.2.6.6
  Mon Jan 07 22:45:00 UTC 2013 - dispcalGUI_at_hoech.net
- Fix typo
  Mon Jan 07 21:49:00 UTC 2013 - dispcalGUI_at_hoech.net
- Fix missing man pages and made scripts executable
  Mon Jan 07 18:42:03 UTC 2013 - dispcalGUI_at_hoech.net
- update to 1.1.8.3: see README.html#changelog-1.1.8.3
  Sat Jan 05 12:40:52 UTC 2013 - dispcalGUI_at_hoech.net
- update to 1.1.7.0: see README.html#changelog-1.1.7.0
  Mon Nov 05 19:40:46 UTC 2012 - dispcalGUI_at_hoech.net
- update to 1.1.2.9: see README.html#changelog-1.1.2.9
  Fri Oct 05 17:05:00 UTC 2012 - dispcalGUI_at_hoech.net
- update to 1.1.2.1: see README.html#changelog-1.1.2.1
  Sat Sep 15 13:54:02 UTC 2012 - dispcalGUI_at_hoech.net
- update to 1.1.0.0: see README.html#changelog-1.1.0.0
  Wed Aug 01 09:08:34 UTC 2012 - dispcalGUI_at_hoech.net
- update to 1.0.9.0: see README.html#changelog-1.0.9.0
  Thu Jun 28 20:14:14 UTC 2012 - dispcalGUI_at_hoech.net
- update to 1.0.7.7: see README.html#changelog-1.0.7.7
  Fri Jun 22 22:26:46 UTC 2012 - dispcalGUI_at_hoech.net
- update to 1.0.7.6: see README.html#changelog-1.0.7.6
  Mon Jun 18 19:13:00 UTC 2012 - dispcalGUI_at_hoech.net
- define RPM group per-distro as before format_spec_file
  Sat Jun  9 12:47:00 UTC 2012 - dispcalGUI_at_hoech.net
- removed all udev stuff as it should already be handled by the
  Argyll dependency</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Fix nonsensical 3.3 changelog entry.
  Revert description back to using 3rd singular form.
  Sun Jun 04 16:10:37 UTC 2017 - florian_at_displaycal.net
- Update to 3.3.1.0:
  * Fix unhandled exception when using CIECAM02 with alternate
    forward profiler
  * See README.html#changelog-3.3.1
  Thu Jun 01 16:11:48 UTC 2017 - florian_at_displaycal.net
- Update to 3.3.0.0:
  * Better multi CPU/multi core support. Generating high
    resolution PCS-to-device tables is now taking more advantage
    of multiple (physical or logical) processors (typical 2x
    speedup on a i7-6700K CPU).
  * Generating a simple high resolution perceptual table is now
    done by copying the colorimetric table and only generating
    new input curves. This markedly reduces the processing time
    needed to create the perceptual table (6x speedup on a
    i7-6700K CPU).
  * See README.html#changelog-3.3
  Sun Feb 19 16:46:26 UTC 2017 - florian_at_displaycal.net
- Update to 3.2.4.0:
  * Maintenance/bugfix release
  * See README.html#changelog-3.2.4
  Wed Jan 04 14:12:01 UTC 2017 - florian_at_displaycal.net
- Update to 3.2.3.0:
  * Maintenance/bugfix release
  * See README.html#changelog-3.2.3
  Tue Dec 13 22:29:24 UTC 2016 - florian_at_displaycal.net
- Update to 3.2.2.0:
  * Maintenance/bugfix release
  * See README.html#changelog-3.2.2
  Fri Nov 25 14:05:19 UTC 2016 - florian_at_displaycal.net
- update to 3.2.1.0: see README.html#changelog-3.2.1
  Sat Nov 19 11:04:10 UTC 2016 - florian_at_displaycal.net
- update to 3.2.0.0: see README.html#changelog-3.2
  Mon Oct 24 10:29:45 UTC 2016 - florian_at_displaycal.net
- update to 3.1.7.3: see README.html#changelog-3.1.7.3
  Tue Oct 04 20:50:59 UTC 2016 - florian_at_displaycal.net
- update to 3.1.7.0: see README.html#changelog-3.1.7
  Wed Aug 24 21:06:27 UTC 2016 - florian_at_displaycal.net
- update to 3.1.6.0: see README.html#changelog-3.1.6
  Tue Aug 02 21:20:48 UTC 2016 - florian_at_displaycal.net
- update to 3.1.5.0: see README.html#changelog-3.1.5
  Sun Jul 10 21:51:48 UTC 2016 - florian_at_displaycal.net
- update to 3.1.4.0: see README.html#changelog-3.1.4
  Mon Apr 11 08:53:40 UTC 2016 - florian_at_displaycal.net
- update to 3.1.3.1: see README.html#changelog-3.1.3.1
  Sat Apr 09 10:20:55 UTC 2016 - florian_at_displaycal.net
- update to 3.1.3.0: see README.html#changelog-3.1.3</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1512475200">- Replace xorg-x11-devel build requires by the needed individual
  libraries.
  Wed Oct 18 17:36:43 UTC 2017 - florian_at_displaycal.net
- Update to 3.3.5.0:
  * Maintenance/bugfixes
  * Minor enhancements
  * Updated french localization
  * See README.html#changelog-3.3.5
  Wed Sep 13 12:10:59 UTC 2017 - florian_at_displaycal.net
- Update to 3.3.4.1:
  * Fix XRandR fallback not returning device ID in some cases
  * Fix visual whitepoint editor madTPG_Net interface
  * See README.html#changelog-3.3.4.1</changelog>
  <changelog author="obs@hoech.net" date="1514635200">- Update to 3.4.0.0:
  * Critical: Prevent bad clipping in case of non-monotonic device
    response
  * Fix consistency of device to profile mapping accross external
    APIs (this fix is required to match how ArgyllCMS 2.0
    enumerates displays)
  * HDR improvements
  * Added simplified chinese translation
  * See README.html#changelog-3.4</changelog>
  <changelog author="obs@hoech.net" date="1518955200">- Update to 3.5.0.0:
  * Maintenance/bugfixes
  * New application icons and slightly refreshed theme
  * See README.html#changelog-3.5</changelog>
  <changelog author="mrueckert@suse.de" date="1521806400">- Update to 3.5.1.0:
  - Added in this release:
  - FEATURE Rudimentary support for WCS Color Device Model
    profiles (only description, author, white- &amp; blackpoint,
    gamma, parametric curve, and matrix tags are recognized and
    mapped to appropriate ICCv2 types).
  - Changed in this release:
  - UI Updated traditional chinese localization (thanks to
    ???).
  - ENHANCEMENT Update bundled vendor PNP ID database.
  - ENHANCEMENT Linux: Use SDL (Simple DirectMedia Layer)
    directly.
  - Fixed in this release:
  - MINOR Work around Python issue #738361 (shell pattern
    compilation fails raising an unhandled exception if a path
    contains certain combinations of meta characters).
  - MINOR Measurement report: Deal with quantization when
    creating the report (fixes error when using video output
    levels in combination with some display profiles).
  - MINOR Profile loader (Windows): Display a proper error
    message when associating an invalid profile.
  - MINOR Profile loader (Windows): In case of an invalid profile
    (e.g. damaged file), fall back to linear gamma ramps instead
    of using the previously cached ramps and change the tray icon
    to reflect this.
  - MINOR Profile loader (Windows): Ignore potential stray
    WM_COMMAND messages caused by 3rd party application
    interference.
  - MINOR Bump minimum required wxPython version to 3.0 (fixes a
    compatibility problem under Linux if wxPython 2.8 was
    installed).
  - COSMETIC Refresh output levels control when loading settings.</changelog>
  <changelog author="mrueckert@suse.de" date="1522584000">- Update to 3.5.2.0:
  - TRIVIAL Prevent potential ?service/proto not found? error due
    to unreliable system APIs when attempting to automatically
    download updates or vendor files.
  - TRIVIAL Linux: Restore missing icons in the window switcher and
    panel under XFCE.
  - TRIVIAL Linux: Add missing i1 Studio entry to bundled
    instrument configuration files (ArgyllCMS &gt;= 2.0).
  - TRIVIAL Windows: Use bundled certificate authority (CA)
    certificates to circumvent potentially outdated system
    certificates under older versions of Windows.</changelog>
  <changelog author="obs-packaging@displaycal.net" date="1524657600">- Update to 3.5.3:
  * [Feature] Rudimentary ICCv4 profile autoconversion support
    (only matrix profile types)
  * [Enhancement] Lookup table based test profiles for evaluating
    display color management
  * [Enhancement] Profile information: Ability to plot CMYK profile
    tone response curves
  * [Enhancement] HDR SMPTE 2084 roll-off 3D LUT: Improved tone
    mapping
  * [Enhancement] Slightly improved accuracy of XYZ LUT profile
    CIECAM02 gamut mapping
  * Temporarily restored compatibility with wxPython 2.8.11/12
  * [Minor] Restored ability to create profiles from non RGB device
    measurement files
  * [Minor] Profile information: Deal with potential NULL values in
    meta tags of 3rd party ICC profiles
  * [Trivial] Profile information: Correctly parse non-default
    device media type attributes
  * [Trivial] Profile information: Keep original tag order of 3rd
    party profiles when checking ID
  * [Trivial] Fix AppData XML</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578916800">- Added dependency on python-xml. Without it, DisplayCAL won't
  start (fixed in factory already).</changelog>
</package>
<package pkgid="e98d7b9ef81980300867aed6a5128145815a9a98e390f43e04d9b347f2c0f46b" name="FAudio" arch="src">
  <version epoch="0" ver="20.05" rel="lp151.3.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1551528000">- initial import of the FAudio library used by Wine
- Verson 19.03
- We build only the lib/FAudio part of this package.
- faudio-older-sdl2.patch: build against a bit older SDL2 on Leap 42.3.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1551614400">- Avoid name repetition in summaries.
- Update RPM groups.
- Ensure directories are owned.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1584532800">- Update to 20.03. No changelog
- Update faudio-older-sdl2.patch.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1588766400">- Update to version 20.05:
  * No changelog available</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1589803200">- Rebase faudio-older-sdl2.patch to fix build error in Leap.</changelog>
</package>
<package pkgid="d204e288fff828422818361c41cf95bf01d1642472edd5441c27558d1ecc89a2" name="FAudio-devel" arch="x86_64">
  <version epoch="0" ver="20.05" rel="lp151.3.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1551528000">- initial import of the FAudio library used by Wine
- Verson 19.03
- We build only the lib/FAudio part of this package.
- faudio-older-sdl2.patch: build against a bit older SDL2 on Leap 42.3.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1551614400">- Avoid name repetition in summaries.
- Update RPM groups.
- Ensure directories are owned.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1584532800">- Update to 20.03. No changelog
- Update faudio-older-sdl2.patch.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1588766400">- Update to version 20.05:
  * No changelog available</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1589803200">- Rebase faudio-older-sdl2.patch to fix build error in Leap.</changelog>
</package>
<package pkgid="355a2bf12a164fcc2ece7fc0041f46a1ba3afff22c5ac64c18689d16af47033f" name="GeoIP" arch="i586">
  <version epoch="0" ver="1.6.12" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Disable checks, they fail with currently provided data file.
- Update to 1.6.4:
  + Update Fips code
  + Several issues with the MinGW build were fixed.
  + Use a constructor in pread.c to ensure the critical section is
    always initialized.
  + Added missing include of io.h on Windows
  + Fixed configure warning that 'missing' script is too old or
    missing.
  + Previously nmake /f Makefile.vc clean would fail on Windows. This was fixed.
  + Obsolete win32 and NetWare make files were removed.
  + Numerous documentation updates.
- Changes from 1.6.3:
  + Added a GEOIP_SILENCE flag. Include this flag when calling
    GeoIP_open to prevent any messages from being written to stderr.
  + Mitigate a possible race condition when running nuder threads
    in the GeoIP_cleanup function.
  + Added some recommendations to the docs on using this library
    in a threaded application.
  + Fixed some bugs discovered by coverity, including failure to
    check some system call return values and making sure all
    strings are null-terminated
- Changes from 1.6.2:
  + Two files required for building on Win32 were missing from the
    1.6.1 release. These files were added. There are no changes
    affecting other platforms.
- Changes from 1.6.1:
  + Improve Win32 support.
  + Update FIPS codes.
- Changes from 1.6.0:
  + The GeoIP Update program was move to its own repo and source
    distribution.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Update to 1.6.5
  * A segmentation fault in geoiplookup was fixed when the utility
    was passed an invalid database. (Reported in Red Hat
    bug #1180874.)
  * Additional validation was added for validation of the size used
    in the creation of the index cache. (Based on discussion in
    Red Hat bug #832913.)
  * Changed the code to only look up country codes by using
    functions which ensure that we do not try to look past the end
    of an array. (Reported by Ivan Sorokin. GitHub #53)</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1425988800">* Updated LICENSE, using the upstream version.
  * The GPL license has been removed:test-driver is licensed under the GPL but
  is not packaged, libGeoIPUpdate is no longer part of the package.
  * Changed handling of ghost files.
  * Moved data into a seperate package.</changelog>
  <changelog author="astieger@suse.com" date="1426161600">- Remove unused zlib build requirement
- fix pubpackage arch build error, for SLE 11 SP3</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.6.6
  * Replaced usage of deprecated fileno, read, and lseek on Visual
    Studio 2005+ with their ISO C++ conformant replacements.
  * A warning about using a double as a float was fixed.
  * Fixed segfault when doing a lookup on an empty database.
  * Fixed a memcheck error from valgrind in the _check_mtime
    function.
  * Fixed _check_mtime to check the return value of gettimeofday
    rather than just assuming it worked.</changelog>
  <changelog author="mrueckert@suse.de" date="1447675200">- Update to 1.6.7
  * Fixed a MSVC parser stack overflow when parsing regionName.c
    and timeZone.c. Fix by elliotlo. GitHub #64.
  * Updated region codes and timezones.
    When using GEOIP_MEMORY_CACHE with an invalid database file,
    the search tree traversal could attempt to read memory outside
    of the memory allocated for the memory cache, resulting in a
    segmentation fault. A check was added to ensure that the
    traversal code does not try to read beyond the end of the file,
    whether in memory, memory mapped, or on disk.
  * Previously the return values from file reads were ignored. We now
    check these values to ensure that there were no errors.
- copy the tools from the debian package to work with the database
  files. new BR gcc-c++. Files are installed into the same path as
  on debian /usr/lib/geoip/. new binaries:
  /usr/lib/geoip/geoip-generator
  /usr/lib/geoip/geoip-generator-asn
  /usr/lib/geoip/v4-to-v6-layout.pl</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to 1.6.9
  * Fix a regression introduced in version 1.6.8, which caused
    GeoIP_database_info to erroneously return NULL.
- Changes for 1.6.8
  * Allow compilation on older systems by relaxing the autoconf
    and automake minimum versions. Thank you, Jose Rubio!
  * Avoid potential problems in multi-threaded environments by
    consistently using pread() rather than read().
  * Fix various small issues reported by clang's static analyser.</changelog>
  <changelog author="martin.liska@suse.com" date="1466078400">- Fix compilation errors seen by GCC6.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 1.6.11:
  * Fix use of a NULL pointer when opening a corrupt database with
    GeoIP_open
  * GeoIP_database_info now returns the full version string rather
    than incorrectly truncating it.</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Rectify RPM groups.
  Remove pointless --with-pic since there are no static libs.</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Update to version 1.6.12:
  * Populate metro and area code when performing lookups in IPv6
    City databases. Previously this was only done when using IPv4
    City databases.
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="lnussel@suse.de" date="1533124800">- can't package database in /var/lib/GeoIP anymore as it breaks with
  transactional updates (boo#1093352). Ideally one would put the
  static version in /usr/share with the files in /var overriding
  that. Since GeoIP is considered deprecated in favor of
  libmaxminddb anyways, we'll just ship GeoIP-data as empty shell to
  own the files for uninstall.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585224000">- Update README.SUSE with a description how to get the latest Geo IP
  data after the distribution changes
  (jsc#SLE-11184, bsc#1156194, jsc#ECO-1405)
- geoip-fetch is now obsolete and just points to the README</changelog>
</package>
<package pkgid="0b54c7b49a41bf10a9a6a0bbad83b89b99ac2ecc42f85f1060974c4cbb2214c8" name="GeoIP" arch="src">
  <version epoch="0" ver="1.6.12" rel="lp151.2.3.1"/>
  <changelog author="poeml@cmdline.net" date="1332504000">- update to 1.4.8
  * Fix GEOIP_DOMAIN_EDITION_V6
  * Add new Datatypes GEOIP_NETSPEED_EDITION_REV1_V6 and
    GEOIP_NETSPEED_EDITION_REV1
  * Fix possible directory traversal weakness in geoipupdate-pureperl.pl with
    malicious update server
  * Fix GEOIP_ORG_EDITION_V6 and GEOIP_ISP_EDITION_V6</changelog>
  <changelog author="poeml@cmdline.net" date="1332590400">- run libtoolize -f, or make will fail
- fix filelist, which had a hardcoded version number</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1334145600">- add build requirement libtool</changelog>
  <changelog author="jengelh@inai.de" date="1338292800">- Regenerate autotools files manually to resolve build failure
  stemming from automatic mode</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="cfarrell@suse.com" date="1360152000">- license update: GPL-2.0+ and LGPL-2.1+
  Clean up</changelog>
  <changelog author="dimstar@opensuse.org" date="1375272000">- Update to version 1.5.1:
  + Update time_zone for Ontario, Canada.
  + geoiplookup and geoiplookup6 exit code is 0 when user asked for
    help.
  + Added -h option to geoiplookup6.
  + Do not load the database file if nodes and file size do not
    make sense.
  + Keep README and man pages in pure ascii.
  + It doesn't make sense to use GEOIP_INDEX_MODE with small
    databases like GEOIP_COUNTRY_EDITION. Instead of undefined
    behaviour we handle it silently as GEOIP_MEMORY_MODE.
  + Update FIPS codes for Greece.
- Changes from version 1.5.0:
  + Rename custom_directory to GeoIP_custom_directory.
  + Make sure the database match the requested type. This is
    helpful for Databases with the same default name and the
    general geoiplookup form (geoiplookup without a specific
    database).
  + apps/geoiplookup6.c use the ipnum instead of the hostname
    for lookups.
  + Use configure.ac instead of configure.in.
  + Region lookup is a bit faster.
  + Add pkg-config file.
  + Updates required to build a Windows DLL under MinGW.
  + Make API thread safe.
  + geoiplookup's default charset is UTF8 -l change the charset
    back to iso8859-1.
  + geoipupdate skips \r otherwise it might be part of the last
    product_id.
  + Update time zones.
  + Update Region codes.
  + Remove the unused CITYCONFIDENCE* database types.
  + bootstrap rebuilds ltmain.sh.
  + Update README.OSX for Lion.
  + Change Macedonia to Macedonia, The Former Yugoslav Republic of.
  + Add region_name to geoiplookup GEOIP_CITY_EDITION_REV1.
  + Add region_name to geoiplookup GEOIP_CITY_EDITION_REV0.
  + Add a --disable-data-files option.
  + Add GEOIP_ACCURACYRADIUS_EDITION and
    GEOIP_ACCURACYRADIUS_EDITION_V6.
  + Add more database types GEOIP_COUNTRYCONF_EDITION,
    GEOIP_CITYCONF_EDITION, GEOIP_REGIONCONF_EDITION and
    GEOIP_POSTALCONF_EDITION.
  + Fix default filenames for GEOIP_NETSPEED_EDITION_REV1 and
    GEOIP_NETSPEED_EDITION_REV1_V6.
- Add pkg-config BuildRequires: needed in order for the pkgconfig()
  provides to be automatically provided.
- Drop libtool BuildRequires and call to autoreconf: the tarball is
  in good condition now.</changelog>
  <changelog author="mpluskal@suse.com" date="1424520000">- Disable checks, they fail with currently provided data file.
- Update to 1.6.4:
  + Update Fips code
  + Several issues with the MinGW build were fixed.
  + Use a constructor in pread.c to ensure the critical section is
    always initialized.
  + Added missing include of io.h on Windows
  + Fixed configure warning that 'missing' script is too old or
    missing.
  + Previously nmake /f Makefile.vc clean would fail on Windows. This was fixed.
  + Obsolete win32 and NetWare make files were removed.
  + Numerous documentation updates.
- Changes from 1.6.3:
  + Added a GEOIP_SILENCE flag. Include this flag when calling
    GeoIP_open to prevent any messages from being written to stderr.
  + Mitigate a possible race condition when running nuder threads
    in the GeoIP_cleanup function.
  + Added some recommendations to the docs on using this library
    in a threaded application.
  + Fixed some bugs discovered by coverity, including failure to
    check some system call return values and making sure all
    strings are null-terminated
- Changes from 1.6.2:
  + Two files required for building on Win32 were missing from the
    1.6.1 release. These files were added. There are no changes
    affecting other platforms.
- Changes from 1.6.1:
  + Improve Win32 support.
  + Update FIPS codes.
- Changes from 1.6.0:
  + The GeoIP Update program was move to its own repo and source
    distribution.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Update to 1.6.5
  * A segmentation fault in geoiplookup was fixed when the utility
    was passed an invalid database. (Reported in Red Hat
    bug #1180874.)
  * Additional validation was added for validation of the size used
    in the creation of the index cache. (Based on discussion in
    Red Hat bug #832913.)
  * Changed the code to only look up country codes by using
    functions which ensure that we do not try to look past the end
    of an array. (Reported by Ivan Sorokin. GitHub #53)</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1425988800">* Updated LICENSE, using the upstream version.
  * The GPL license has been removed:test-driver is licensed under the GPL but
  is not packaged, libGeoIPUpdate is no longer part of the package.
  * Changed handling of ghost files.
  * Moved data into a seperate package.</changelog>
  <changelog author="astieger@suse.com" date="1426161600">- Remove unused zlib build requirement
- fix pubpackage arch build error, for SLE 11 SP3</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.6.6
  * Replaced usage of deprecated fileno, read, and lseek on Visual
    Studio 2005+ with their ISO C++ conformant replacements.
  * A warning about using a double as a float was fixed.
  * Fixed segfault when doing a lookup on an empty database.
  * Fixed a memcheck error from valgrind in the _check_mtime
    function.
  * Fixed _check_mtime to check the return value of gettimeofday
    rather than just assuming it worked.</changelog>
  <changelog author="mrueckert@suse.de" date="1447675200">- Update to 1.6.7
  * Fixed a MSVC parser stack overflow when parsing regionName.c
    and timeZone.c. Fix by elliotlo. GitHub #64.
  * Updated region codes and timezones.
    When using GEOIP_MEMORY_CACHE with an invalid database file,
    the search tree traversal could attempt to read memory outside
    of the memory allocated for the memory cache, resulting in a
    segmentation fault. A check was added to ensure that the
    traversal code does not try to read beyond the end of the file,
    whether in memory, memory mapped, or on disk.
  * Previously the return values from file reads were ignored. We now
    check these values to ensure that there were no errors.
- copy the tools from the debian package to work with the database
  files. new BR gcc-c++. Files are installed into the same path as
  on debian /usr/lib/geoip/. new binaries:
  /usr/lib/geoip/geoip-generator
  /usr/lib/geoip/geoip-generator-asn
  /usr/lib/geoip/v4-to-v6-layout.pl</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to 1.6.9
  * Fix a regression introduced in version 1.6.8, which caused
    GeoIP_database_info to erroneously return NULL.
- Changes for 1.6.8
  * Allow compilation on older systems by relaxing the autoconf
    and automake minimum versions. Thank you, Jose Rubio!
  * Avoid potential problems in multi-threaded environments by
    consistently using pread() rather than read().
  * Fix various small issues reported by clang's static analyser.</changelog>
  <changelog author="martin.liska@suse.com" date="1466078400">- Fix compilation errors seen by GCC6.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 1.6.11:
  * Fix use of a NULL pointer when opening a corrupt database with
    GeoIP_open
  * GeoIP_database_info now returns the full version string rather
    than incorrectly truncating it.</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Rectify RPM groups.
  Remove pointless --with-pic since there are no static libs.</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Update to version 1.6.12:
  * Populate metro and area code when performing lookups in IPv6
    City databases. Previously this was only done when using IPv4
    City databases.
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="lnussel@suse.de" date="1533124800">- can't package database in /var/lib/GeoIP anymore as it breaks with
  transactional updates (boo#1093352). Ideally one would put the
  static version in /usr/share with the files in /var overriding
  that. Since GeoIP is considered deprecated in favor of
  libmaxminddb anyways, we'll just ship GeoIP-data as empty shell to
  own the files for uninstall.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585224000">- Update README.SUSE with a description how to get the latest Geo IP
  data after the distribution changes
  (jsc#SLE-11184, bsc#1156194, jsc#ECO-1405)
- geoip-fetch is now obsolete and just points to the README</changelog>
</package>
<package pkgid="4c26d71f0c081a5857192fdfe745365b1bdc14ef702c51f37396f91ddc9d9cc9" name="GeoIP" arch="x86_64">
  <version epoch="0" ver="1.6.12" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Disable checks, they fail with currently provided data file.
- Update to 1.6.4:
  + Update Fips code
  + Several issues with the MinGW build were fixed.
  + Use a constructor in pread.c to ensure the critical section is
    always initialized.
  + Added missing include of io.h on Windows
  + Fixed configure warning that 'missing' script is too old or
    missing.
  + Previously nmake /f Makefile.vc clean would fail on Windows. This was fixed.
  + Obsolete win32 and NetWare make files were removed.
  + Numerous documentation updates.
- Changes from 1.6.3:
  + Added a GEOIP_SILENCE flag. Include this flag when calling
    GeoIP_open to prevent any messages from being written to stderr.
  + Mitigate a possible race condition when running nuder threads
    in the GeoIP_cleanup function.
  + Added some recommendations to the docs on using this library
    in a threaded application.
  + Fixed some bugs discovered by coverity, including failure to
    check some system call return values and making sure all
    strings are null-terminated
- Changes from 1.6.2:
  + Two files required for building on Win32 were missing from the
    1.6.1 release. These files were added. There are no changes
    affecting other platforms.
- Changes from 1.6.1:
  + Improve Win32 support.
  + Update FIPS codes.
- Changes from 1.6.0:
  + The GeoIP Update program was move to its own repo and source
    distribution.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Update to 1.6.5
  * A segmentation fault in geoiplookup was fixed when the utility
    was passed an invalid database. (Reported in Red Hat
    bug #1180874.)
  * Additional validation was added for validation of the size used
    in the creation of the index cache. (Based on discussion in
    Red Hat bug #832913.)
  * Changed the code to only look up country codes by using
    functions which ensure that we do not try to look past the end
    of an array. (Reported by Ivan Sorokin. GitHub #53)</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1425988800">* Updated LICENSE, using the upstream version.
  * The GPL license has been removed:test-driver is licensed under the GPL but
  is not packaged, libGeoIPUpdate is no longer part of the package.
  * Changed handling of ghost files.
  * Moved data into a seperate package.</changelog>
  <changelog author="astieger@suse.com" date="1426161600">- Remove unused zlib build requirement
- fix pubpackage arch build error, for SLE 11 SP3</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.6.6
  * Replaced usage of deprecated fileno, read, and lseek on Visual
    Studio 2005+ with their ISO C++ conformant replacements.
  * A warning about using a double as a float was fixed.
  * Fixed segfault when doing a lookup on an empty database.
  * Fixed a memcheck error from valgrind in the _check_mtime
    function.
  * Fixed _check_mtime to check the return value of gettimeofday
    rather than just assuming it worked.</changelog>
  <changelog author="mrueckert@suse.de" date="1447675200">- Update to 1.6.7
  * Fixed a MSVC parser stack overflow when parsing regionName.c
    and timeZone.c. Fix by elliotlo. GitHub #64.
  * Updated region codes and timezones.
    When using GEOIP_MEMORY_CACHE with an invalid database file,
    the search tree traversal could attempt to read memory outside
    of the memory allocated for the memory cache, resulting in a
    segmentation fault. A check was added to ensure that the
    traversal code does not try to read beyond the end of the file,
    whether in memory, memory mapped, or on disk.
  * Previously the return values from file reads were ignored. We now
    check these values to ensure that there were no errors.
- copy the tools from the debian package to work with the database
  files. new BR gcc-c++. Files are installed into the same path as
  on debian /usr/lib/geoip/. new binaries:
  /usr/lib/geoip/geoip-generator
  /usr/lib/geoip/geoip-generator-asn
  /usr/lib/geoip/v4-to-v6-layout.pl</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to 1.6.9
  * Fix a regression introduced in version 1.6.8, which caused
    GeoIP_database_info to erroneously return NULL.
- Changes for 1.6.8
  * Allow compilation on older systems by relaxing the autoconf
    and automake minimum versions. Thank you, Jose Rubio!
  * Avoid potential problems in multi-threaded environments by
    consistently using pread() rather than read().
  * Fix various small issues reported by clang's static analyser.</changelog>
  <changelog author="martin.liska@suse.com" date="1466078400">- Fix compilation errors seen by GCC6.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 1.6.11:
  * Fix use of a NULL pointer when opening a corrupt database with
    GeoIP_open
  * GeoIP_database_info now returns the full version string rather
    than incorrectly truncating it.</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Rectify RPM groups.
  Remove pointless --with-pic since there are no static libs.</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Update to version 1.6.12:
  * Populate metro and area code when performing lookups in IPv6
    City databases. Previously this was only done when using IPv4
    City databases.
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="lnussel@suse.de" date="1533124800">- can't package database in /var/lib/GeoIP anymore as it breaks with
  transactional updates (boo#1093352). Ideally one would put the
  static version in /usr/share with the files in /var overriding
  that. Since GeoIP is considered deprecated in favor of
  libmaxminddb anyways, we'll just ship GeoIP-data as empty shell to
  own the files for uninstall.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585224000">- Update README.SUSE with a description how to get the latest Geo IP
  data after the distribution changes
  (jsc#SLE-11184, bsc#1156194, jsc#ECO-1405)
- geoip-fetch is now obsolete and just points to the README</changelog>
</package>
<package pkgid="fc68ce6aee6a237aa7e7abf431f3875cf905c0800c406f73b9a682b3d4835cca" name="GeoIP-data" arch="noarch">
  <version epoch="0" ver="1.6.12" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Disable checks, they fail with currently provided data file.
- Update to 1.6.4:
  + Update Fips code
  + Several issues with the MinGW build were fixed.
  + Use a constructor in pread.c to ensure the critical section is
    always initialized.
  + Added missing include of io.h on Windows
  + Fixed configure warning that 'missing' script is too old or
    missing.
  + Previously nmake /f Makefile.vc clean would fail on Windows. This was fixed.
  + Obsolete win32 and NetWare make files were removed.
  + Numerous documentation updates.
- Changes from 1.6.3:
  + Added a GEOIP_SILENCE flag. Include this flag when calling
    GeoIP_open to prevent any messages from being written to stderr.
  + Mitigate a possible race condition when running nuder threads
    in the GeoIP_cleanup function.
  + Added some recommendations to the docs on using this library
    in a threaded application.
  + Fixed some bugs discovered by coverity, including failure to
    check some system call return values and making sure all
    strings are null-terminated
- Changes from 1.6.2:
  + Two files required for building on Win32 were missing from the
    1.6.1 release. These files were added. There are no changes
    affecting other platforms.
- Changes from 1.6.1:
  + Improve Win32 support.
  + Update FIPS codes.
- Changes from 1.6.0:
  + The GeoIP Update program was move to its own repo and source
    distribution.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Update to 1.6.5
  * A segmentation fault in geoiplookup was fixed when the utility
    was passed an invalid database. (Reported in Red Hat
    bug #1180874.)
  * Additional validation was added for validation of the size used
    in the creation of the index cache. (Based on discussion in
    Red Hat bug #832913.)
  * Changed the code to only look up country codes by using
    functions which ensure that we do not try to look past the end
    of an array. (Reported by Ivan Sorokin. GitHub #53)</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1425988800">* Updated LICENSE, using the upstream version.
  * The GPL license has been removed:test-driver is licensed under the GPL but
  is not packaged, libGeoIPUpdate is no longer part of the package.
  * Changed handling of ghost files.
  * Moved data into a seperate package.</changelog>
  <changelog author="astieger@suse.com" date="1426161600">- Remove unused zlib build requirement
- fix pubpackage arch build error, for SLE 11 SP3</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.6.6
  * Replaced usage of deprecated fileno, read, and lseek on Visual
    Studio 2005+ with their ISO C++ conformant replacements.
  * A warning about using a double as a float was fixed.
  * Fixed segfault when doing a lookup on an empty database.
  * Fixed a memcheck error from valgrind in the _check_mtime
    function.
  * Fixed _check_mtime to check the return value of gettimeofday
    rather than just assuming it worked.</changelog>
  <changelog author="mrueckert@suse.de" date="1447675200">- Update to 1.6.7
  * Fixed a MSVC parser stack overflow when parsing regionName.c
    and timeZone.c. Fix by elliotlo. GitHub #64.
  * Updated region codes and timezones.
    When using GEOIP_MEMORY_CACHE with an invalid database file,
    the search tree traversal could attempt to read memory outside
    of the memory allocated for the memory cache, resulting in a
    segmentation fault. A check was added to ensure that the
    traversal code does not try to read beyond the end of the file,
    whether in memory, memory mapped, or on disk.
  * Previously the return values from file reads were ignored. We now
    check these values to ensure that there were no errors.
- copy the tools from the debian package to work with the database
  files. new BR gcc-c++. Files are installed into the same path as
  on debian /usr/lib/geoip/. new binaries:
  /usr/lib/geoip/geoip-generator
  /usr/lib/geoip/geoip-generator-asn
  /usr/lib/geoip/v4-to-v6-layout.pl</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to 1.6.9
  * Fix a regression introduced in version 1.6.8, which caused
    GeoIP_database_info to erroneously return NULL.
- Changes for 1.6.8
  * Allow compilation on older systems by relaxing the autoconf
    and automake minimum versions. Thank you, Jose Rubio!
  * Avoid potential problems in multi-threaded environments by
    consistently using pread() rather than read().
  * Fix various small issues reported by clang's static analyser.</changelog>
  <changelog author="martin.liska@suse.com" date="1466078400">- Fix compilation errors seen by GCC6.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 1.6.11:
  * Fix use of a NULL pointer when opening a corrupt database with
    GeoIP_open
  * GeoIP_database_info now returns the full version string rather
    than incorrectly truncating it.</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Rectify RPM groups.
  Remove pointless --with-pic since there are no static libs.</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Update to version 1.6.12:
  * Populate metro and area code when performing lookups in IPv6
    City databases. Previously this was only done when using IPv4
    City databases.
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="lnussel@suse.de" date="1533124800">- can't package database in /var/lib/GeoIP anymore as it breaks with
  transactional updates (boo#1093352). Ideally one would put the
  static version in /usr/share with the files in /var overriding
  that. Since GeoIP is considered deprecated in favor of
  libmaxminddb anyways, we'll just ship GeoIP-data as empty shell to
  own the files for uninstall.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585224000">- Update README.SUSE with a description how to get the latest Geo IP
  data after the distribution changes
  (jsc#SLE-11184, bsc#1156194, jsc#ECO-1405)
- geoip-fetch is now obsolete and just points to the README</changelog>
</package>
<package pkgid="7a617b2eddfd78f9f0032754d3656644567d154d5dd45b68d22bd1490f781da3" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp151.4.14.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19950 [bsc#1159852]
  + GraphicsMagick-CVE-2019-19950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19951 [bsc#1160321]
  + GraphicsMagick-CVE-2019-19951.patch
  CVE-2019-19953 [bsc#1160364]
  + GraphicsMagick-CVE-2019-19953.patch</changelog>
</package>
<package pkgid="cad28ed3966be6bc23a5d2a8687d190fb2044872d187c0e40daf0afbf49e3353" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.14.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19950 [bsc#1159852]
  + GraphicsMagick-CVE-2019-19950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19951 [bsc#1160321]
  + GraphicsMagick-CVE-2019-19951.patch
  CVE-2019-19953 [bsc#1160364]
  + GraphicsMagick-CVE-2019-19953.patch</changelog>
</package>
<package pkgid="b2616794d9679b1175f0fdc713a24eb494dcbfcf35c1e5b1bfe75124457dbeff" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp151.4.17.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads (CVE-2019-12921) [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19950 [bsc#1159852]
  + GraphicsMagick-CVE-2019-19950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19951 [bsc#1160321]
  + GraphicsMagick-CVE-2019-19951.patch
  CVE-2019-19953 [bsc#1160364]
  + GraphicsMagick-CVE-2019-19953.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1585137600">- security update
- added patches
  fix CVE-2019-12921 [bsc#1167208], the text filename component potentially allows to read arbitrary files via TranslateTextEx for SVG
  + GraphicsMagick-CVE-2019-12921.patch
  fix CVE-2020-10938 [bsc#1167623], integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c
  + GraphicsMagick-CVE-2020-10938.patch</changelog>
</package>
<package pkgid="71f73adabd3f8837be292ec886beaac94d5fa1f60d3636fdbffd9de215e57d2e" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.17.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads (CVE-2019-12921) [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19950 [bsc#1159852]
  + GraphicsMagick-CVE-2019-19950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19951 [bsc#1160321]
  + GraphicsMagick-CVE-2019-19951.patch
  CVE-2019-19953 [bsc#1160364]
  + GraphicsMagick-CVE-2019-19953.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1585137600">- security update
- added patches
  fix CVE-2019-12921 [bsc#1167208], the text filename component potentially allows to read arbitrary files via TranslateTextEx for SVG
  + GraphicsMagick-CVE-2019-12921.patch
  fix CVE-2020-10938 [bsc#1167623], integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c
  + GraphicsMagick-CVE-2020-10938.patch</changelog>
</package>
<package pkgid="ad5e2724b0aadd8fa010ebe3d0efe0a29e146a744fbe0684029430ff7cbb4a87" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp151.4.20.1"/>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads (CVE-2019-12921) [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19950 [bsc#1159852]
  + GraphicsMagick-CVE-2019-19950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19951 [bsc#1160321]
  + GraphicsMagick-CVE-2019-19951.patch
  CVE-2019-19953 [bsc#1160364]
  + GraphicsMagick-CVE-2019-19953.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1585137600">- security update
- added patches
  fix CVE-2019-12921 [bsc#1167208], the text filename component potentially allows to read arbitrary files via TranslateTextEx for SVG
  + GraphicsMagick-CVE-2019-12921.patch
  fix CVE-2020-10938 [bsc#1167623], integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c
  + GraphicsMagick-CVE-2020-10938.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591099200">- security update
- added patches
  fix CVE-2020-12672 [bsc#1171271], heap-based buffer overflow in ReadMNGImage in coders/png.c.
  + GraphicsMagick-CVE-2020-12672.patch</changelog>
</package>
<package pkgid="0aa4a70fbd2d51cc09435d0027060449485d1e1c6f88a3e71b25e4104fcbf9c3" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.20.1"/>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads (CVE-2019-12921) [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19950 [bsc#1159852]
  + GraphicsMagick-CVE-2019-19950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19951 [bsc#1160321]
  + GraphicsMagick-CVE-2019-19951.patch
  CVE-2019-19953 [bsc#1160364]
  + GraphicsMagick-CVE-2019-19953.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1585137600">- security update
- added patches
  fix CVE-2019-12921 [bsc#1167208], the text filename component potentially allows to read arbitrary files via TranslateTextEx for SVG
  + GraphicsMagick-CVE-2019-12921.patch
  fix CVE-2020-10938 [bsc#1167623], integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c
  + GraphicsMagick-CVE-2020-10938.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591099200">- security update
- added patches
  fix CVE-2020-12672 [bsc#1171271], heap-based buffer overflow in ReadMNGImage in coders/png.c.
  + GraphicsMagick-CVE-2020-12672.patch</changelog>
</package>
<package pkgid="0cc2a6e5853333fbd04a8550ef9ae8c6ecb836309b90b4026a2191ad670bb877" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="155633dc41e1170da1205fdeb74507b18c323c079d64eb2244b27d9e0811a9f1" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="87c48c0cedf57751457d2a0f1d95e1344468db2a2af4d7473bb22b2707307a50" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="da683275759267372cf1523164799c185280cc85aa87a1302ad009eec8075d12" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="fc0ef8ff955b6eb4ba09676e96548d422d6082efc9660538d29e7ae9c2e0c0d5" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp151.4.9.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="c73751daf45c35dd2f5f2627568e9c98413432cdd1a1d6d6d5b2312030224ebf" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.9.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="ab0ab4b6cea93a3ddb3307c6a51af2230d0192a9eedd93e38a4ced55a555cd72" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.14.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19950 [bsc#1159852]
  + GraphicsMagick-CVE-2019-19950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19951 [bsc#1160321]
  + GraphicsMagick-CVE-2019-19951.patch
  CVE-2019-19953 [bsc#1160364]
  + GraphicsMagick-CVE-2019-19953.patch</changelog>
</package>
<package pkgid="3cad8e9918f031f2d4a29d832aa44d6c2db9ef1f527d515c7cd17d853fdcc06d" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.17.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads (CVE-2019-12921) [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19950 [bsc#1159852]
  + GraphicsMagick-CVE-2019-19950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19951 [bsc#1160321]
  + GraphicsMagick-CVE-2019-19951.patch
  CVE-2019-19953 [bsc#1160364]
  + GraphicsMagick-CVE-2019-19953.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1585137600">- security update
- added patches
  fix CVE-2019-12921 [bsc#1167208], the text filename component potentially allows to read arbitrary files via TranslateTextEx for SVG
  + GraphicsMagick-CVE-2019-12921.patch
  fix CVE-2020-10938 [bsc#1167623], integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c
  + GraphicsMagick-CVE-2020-10938.patch</changelog>
</package>
<package pkgid="53bb774ce4955ff1815bdec3d242e453de95cb11cb3ed0a34b691dec96f495e7" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.20.1"/>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads (CVE-2019-12921) [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19950 [bsc#1159852]
  + GraphicsMagick-CVE-2019-19950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19951 [bsc#1160321]
  + GraphicsMagick-CVE-2019-19951.patch
  CVE-2019-19953 [bsc#1160364]
  + GraphicsMagick-CVE-2019-19953.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1585137600">- security update
- added patches
  fix CVE-2019-12921 [bsc#1167208], the text filename component potentially allows to read arbitrary files via TranslateTextEx for SVG
  + GraphicsMagick-CVE-2019-12921.patch
  fix CVE-2020-10938 [bsc#1167623], integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c
  + GraphicsMagick-CVE-2020-10938.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591099200">- security update
- added patches
  fix CVE-2020-12672 [bsc#1171271], heap-based buffer overflow in ReadMNGImage in coders/png.c.
  + GraphicsMagick-CVE-2020-12672.patch</changelog>
</package>
<package pkgid="2af5a9cd5e2365fa26a0e813d413de7d17e33f4a9b6d612542e7c264df81152a" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="eae951a3ffbfa4d6478d28b429439f79bf8a3bb41ba22349490fa97b864b2c03" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="9c2d6181de6fb890cbcde8fbb571d3eafcbd79c700b0532077f19cd231526d9e" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.9.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="6706bb1569ebe367aab3b1f4860c46eca33c84dfc50d61f8bf3b51e429152ad8" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="45598653b9cdfbe35736eb8206069f7e5ac0810539b1f268a0ca537b164eb37a" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="4d20ffbf33c7870eff64fc398493ddefcb800e8e97313252cefbcd3229278c44" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="8825fdff844856c87a7758a8b73f7e4514a84c012acac60021e416aeab700614" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="6cbd28ca0f296adcf66132cfeda70560499cbdb6479cd09d3c01dfa2b455014e" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="eaa44f421d251ecd5c778168a6b99c0f2a6d945293e5c0c6ffd9c4ca9f747ad9" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="7bad71affbeb34714c0af8668d8f12ae0d6c5d1e342e7132798a1995066c9482" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="e543d675c12f2fc28cedee2b9c047a6531d1aa268d3513e214ffbca23bcecf6d" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="1bd0c3e0883710686da9a9958945e3e87a2d4177a8672d779277ba638112fef6" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="fbe98b22ffb46c0debdd568e614265821673d1b0dc81da8213a00039c4ac9443" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="de2e6797f0d4105e06e44be1156747b13a32267983b6a9e11dc47341098fc31e" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="5e1ddd756393a7bece06506f3847df036c84b8b26d60c0686b9a02568ddc9dcb" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="ea651745254202d7b4645aed1bdb9aa5a63a052bd5fb5ecc3e89b15e61f1aba7" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="e861788635d2cfac9dbe6ab20cad8b482a9a0bd3f59480302df59738271b57e3" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="2f409a818f0f113ca5756d5c3c172a1ccedde910b0f7e2c9b2262b2a5d8c78da" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="9bee2aee8fbc9b0fe5798bb33ad1057bccdd1fa54d972d07a0b29bd7907d9fa7" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="6a0cedaee830bb7b503e8f9c68b7f4a8f90f7f9fe4549850184b2a12a27d4b39" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="3817d4511123198ed0b7a57d805d53413a98d679d1a30fca544db0175a5482c9" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="8970d31f2eeffd966821e2295c87f90165fe66a5d3a21791b84ef6319fba98f4" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="594762c37a235300d32aaaf22f9268f5de22c592da17df8044920583b2f45dd5" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="c347dd352b9753e21aeff56eacc91bbc3c15027e3f515008ac0042d6d36a7acb" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="3044f497dcc293d22c72b25f026e4c7dc82cd76c18291383436f58d34a928806" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="fd83d2e362e1d02931251c6ee0735c5bf2539900a7d190eb462f42463509b05b" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="91a2274243b367a053fc2fb2ac8f4789eb0befc2540208ce822e1ae823f2170a" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="7a2f15019c611a506f1bd3cbb5c8d587adc3c2f4ceb420a82a9e0faf3761f5c3" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="555d6290971279b96c4cc78ba35f9c7dea478fafa926f5c2c681d472aaf211c7" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="7f9a339d9b4a6b50f6b6d1202f568c5b5101a385cb415b143158ea98aa8fcef4" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="297aef1612d4735744eb7aadf9d76422eb687b01df52a8a2e72fe1adfa5dd600" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="59cc795ed502c4d36d7c5e3696c64aba12694b657e40ebfd4477e0f689a9a9c8" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="1d5023d400ae8145f0d8d431aa7c26718b8d0e677ecdff22b8aa7f0c254826ba" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="12b52df107de3bfc23857a14f32323bfc0c97acc00c4a74e1a441719604b10e2" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="0690ba86efcfe2e5df79e74c0a6f6a98a17ca60a6cfb123d9a2cf25d0e946827" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="a09e51cec388ce4dcd9d345ff57474043461b4469370d427c64609c80e9aca52" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="2bb44b369ed0d9483237f280a560a1cfb87db0dd281c5e15881d1ce3f627cae0" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="e6c2844e5e4e7e1b80bb946536dcf61e6b8274ccebe36dc06637e25fbdeffce8" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="fffcf04d445803496558e7351002804a95f47ca05f6116ab814ad38ed9d3c56c" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="f65ab747fa7a5e1e2de3b645316172afbcde06b01ec7ef5293f554473af67ad5" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="049d03aac8dea57e5e744b230428880eb349c44d7c2fedc83079f3383f3835fc" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="1bd5c73915f7c19d549e451c95911d0c570b997d7d34058ce4d6b78ab478a3bc" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="eb54d0d66bd78ec80eeba502d29d0f13313d8f620ca48ac56392a620b1e4c61f" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="f8f8aa3362878ac0d38ea87d2d5b160168309c531422c6b97789c5b3a0a31be3" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="a38cbabda8bf57cb354d7ca10345eb7753a25c78add9ae390988abbd1afada84" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="02d03e02a87718caa3942d3ffba4236c75e423c256947bbfc02deb4d63e82413" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="225670e5ed028011f08debed852183f1b01dd891c41304f847485f67294ce894" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="78855252c5c79ea057c3bf1e900c1cad9f5b6e96b11731aa1708387914ce8d6b" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="381623c41c63c2680716199f4ce745bc95c8f2d5077c960fa458303361f89583" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="ab1b11f2d417071df1cb009a1a64b84d2f24431e70d200c845f0e5b4fd4c3f48" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="8d0efe4cf2f4f3cab633eecb0dff04385912c9d7d590edf91cefa533ef8bc4af" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="f62421514866a8268a06d54bf1ba1d74762001bf1146a579ba3a2447f57b5e9c" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="ad484b13125091f588912d9062988b355330712a07d80a4fa7d926585dd0461d" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="b95af20e392b3c2a795e24e1ab6f5438c914f1f9b61ba84f4255565cf3b99943" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="2b034f23ca441267e53fa4ea7a620445b916e315477f1819af47fa7942a8fe31" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="07eb74dc4081af5720fe056c783d52c39d2e8d1684e46a103ef82939e4399fc7" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="b14c18b8dac509523c8ad3acd3762242d93d0288e54c756fd837d6a63bf25e9a" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="dcdd94c7e5c85f66fe50f34e976cc61e70ed85355da7022a3b075add806126e7" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="86332df79154aacb7a7edd1f7cbd4083b9c4b99d29ee3fe66943d856d2bb5b18" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="412d6d3a2214dfe5599dde913b1c43fd608149f5aa9d52ef564a8aa41f4f9aee" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="abd52e72d835370d9193782df83c8ad5c78cf04bec28b7c37a36bf41a755b02f" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="2fb9392324038c4b9273f9cb089e6f8db93e611a90e1be1a2f5b1e4dcf7a062b" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="130f3dbeaefb2fc01dcef5c6d8387bd1487e100d42de70fa1193dbddf4afbad1" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="0c3dd457893e3c596544885d0119075ed4a41f3d59031325ee29484b84dc1c68" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="272ce4837fa455e1b47ff98c6b9c2db22ee19338e2a4bc7b7b89548cee1593cc" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="dc23850a843efd1a28ad29dbe767dd93f5f75379687ef09dcd70700211ab098f" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="c04109cc5b38a70f0aceb1982c268cb690f9bc2f9de02cfd27b792a82127c770" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="3dd617a023c2b320f0c8ded658aebcca76f6e097e7b645bfcca06d96d8e2ad60" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="41a3fce1e1983b9c07b12b6ebbd6bb3c293933280146e1973301cfcf59dbe06f" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="45df44d49eeec3b2724553f0b7bd3ca09902d9bd4e51dafe01672a405226af48" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="a50ab1cccb98a48682d50a127b35bebb51ee7427bef4abaf4536f5f6f8b54bb0" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="e8edf9779b4061147964cae6d9a546cde205d13d178a359265ac55006a0555fc" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="17a84fb5684c424e84be38ad360578c6c718ba8c518425abc5f3d181d56fe45b" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="2b537f59ba49449cb42011260919a5a7eaa0bf11996399b5208863f9be216aa4" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="f338cff299a5aaf46cbc7a8caaf2b3cc960d1a535be328f70d8cc37521b5a9e0" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="254794d2d23cd5b8408f167c4b041ef624a8ec3d31a51a9443ccb08d41bca7bf" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="f4ebe31a154308b70330cfea6d79d28434106c6bba56e40ba6a92ca2fa7e588a" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="92c137b87015c533b23ca400c4f1d655511db73e155f50292e18f6819fed393b" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="3f3501c0734b5d41ead36a567ad11c45df17fffb87e3c95eaeb3da2cfc1f053c" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="db489147014d3c4905436abc27bee966dcc00e0c93f6286d4742b6847be1930c" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="9e72e7f1626bda30d6df06279e8b4d622b0d5f6e6eb7f8f9e45f6daeab977246" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="3acf3d21607b13a137e48102549693dc2aa1884ad9ad838c20385995f612ab81" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="276115a1af08915027209d3217db2df08f2e1ddd7ba6d212d9b4e955b7db48bf" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="1e1072ab306795a3c1ea1f5c67111c79bf27cafd67eaacc18aaeedb01d50c211" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.15.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
</package>
<package pkgid="ffdea76114284b92a7a96c219f05067a376a0333a1069ced77bdb38fa38628d9" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="87d14679f92d88e574d36f48ea04a70446cd6795c863f7acaf3b350b15476331" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.18.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="35e85a89d67668f8bb5fd869dc16c332d0c2e777b4932f08d15492baf7cfc79d" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="3361bee2cdafa2871b0b5f2e92ce58b435e595e4ed0d62ab973c235139d6c248" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.22.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="63ac707cc0189b0013fac5cd53cc9ccea336c148a2a07c22b68a242a22176c33" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="f3ffff50386eefda00f36e47ddb692873660389eb7abfb7826b967c726430e5b" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="b1da410e2bef35b5ff9cb650caf8bde025c7e1fb4931b8aac5986cecb9edbd3b" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="c81de5033382a1baef8d556bbf0d7e94a54b3a94e557085d063b2b2f72be5206" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="557c1569bc31ee198b026df80f3046c9b63f27114102c6f1a03af58194016f18" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="d3e2f9ec93186308400181fc98b240a86beaede9a71df71921809e2ef45a0508" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="c4226c9d3d4d9908abf0d71d450dd2456b2417be5f7aa61d2a53afe1d7d4e802" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.10" rel="lp151.7.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS
  + LibVNCServer-CVE-2020-25708.patch</changelog>
</package>
<package pkgid="5395e1931622bebf451d4b6e364a414038149d42b7f2c627fbc34d09ad14b4fc" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.10" rel="lp151.7.3.1"/>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
</package>
<package pkgid="5282525564ceb5c0a704249cdc79919fd59701c8c08eccfd3f3fd5405f73d097" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.10" rel="lp151.7.6.1"/>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update (bsc#1173477)
- added patches
  https://github.com/LibVNC/libvncserver/commit/aac95a9dcf4bbba87b76c72706c3221a842ca433
  + LibVNCServer-CVE-2017-18922.patch</changelog>
</package>
<package pkgid="7793c6bf33900eb310426197d2473b852f742c8b4f88d000f0047caf0f9b84d8" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.10" rel="lp151.7.9.1"/>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
</package>
<package pkgid="a559ad6df03d1599683bd6cbb6cdf9c1000c807874d3d13952716e3897ca3639" name="LibVNCServer-devel" arch="i586">
  <version epoch="0" ver="0.9.10" rel="lp151.7.12.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS
  + LibVNCServer-CVE-2020-25708.patch</changelog>
</package>
<package pkgid="f28fe92861b3b269479db4ea59466d2c796b767acf3a74e5091b715243a1baa8" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp151.7.12.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS
  + LibVNCServer-CVE-2020-25708.patch</changelog>
</package>
<package pkgid="601e264102f605c60821832332fc5d792bf153e90796d60b248291b01a606e89" name="LibVNCServer-devel" arch="i586">
  <version epoch="0" ver="0.9.10" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
</package>
<package pkgid="3db3201f838785dada02bcec536d6848670c67ebdcbbcf6cb04f0166d0c2d6e0" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
</package>
<package pkgid="6b346efe7957f0fae8304a38d30d1f587f4e3215ba508ba5d6eea956a6c22e4d" name="LibVNCServer-devel" arch="i586">
  <version epoch="0" ver="0.9.10" rel="lp151.7.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update (bsc#1173477)
- added patches
  https://github.com/LibVNC/libvncserver/commit/aac95a9dcf4bbba87b76c72706c3221a842ca433
  + LibVNCServer-CVE-2017-18922.patch</changelog>
</package>
<package pkgid="755919d3533710afe82fbf366d5b79b54d7321f234319b8ae928ed14b37688c5" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp151.7.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update (bsc#1173477)
- added patches
  https://github.com/LibVNC/libvncserver/commit/aac95a9dcf4bbba87b76c72706c3221a842ca433
  + LibVNCServer-CVE-2017-18922.patch</changelog>
</package>
<package pkgid="f088cebe6a1159c094255317ebed1edd0a2f85fbcc3d9d315d9c5d1221c729d3" name="LibVNCServer-devel" arch="i586">
  <version epoch="0" ver="0.9.10" rel="lp151.7.9.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
</package>
<package pkgid="e49b32cf2336b6d67bf57f7d52d011fc8006c58081bcc45d2a431526650e7c8d" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp151.7.9.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
</package>
<package pkgid="0c96e6aed46f977fe06c86319a773cf400fbabafb0923a9debd5b64238408993" name="Mesa" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="a7e567afd6075da7de73cdd4907a7327365861c3e30f9f5a4eadef84d04005d5" name="Mesa" arch="src">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="a45ea60257f86a990a163e9066072d7ff00ab8f356f6f8684475627cbb1cd675" name="Mesa" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="ac85f701350462e76c02b965d9f2ac06a407db7362a1c45c6a495535875f1420" name="Mesa" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="97d130e490bbf69437c0622b190019b4a3dedb4d621a87d2edfa188f2def04fb" name="Mesa" arch="src">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="6d5f1c481c902075f1e6bf9183fe0cbaf275decb919a75951997f9d948aaf954" name="Mesa" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="83a9e26afad8016d2d2cfd792bf445aa79c5f15758147cd7fbc02f328794e106" name="Mesa" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="0c8f168a43b01137805205585004166f5629df4f2b85258fedd551f526d32ee8" name="Mesa" arch="src">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="29fdf605a002f169fb6ac933b4d74a35cac935673062fc7072ca09d81d3d62bb" name="Mesa" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="4ffd81f4d6fe5eda135cb074850afcb687e905515d193575ebc94bf511bc050c" name="Mesa" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="921db5a900ba08adbecc1c5da2889ae61c0d772bfbba605cdd35fd259d0992c9" name="Mesa" arch="src">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="68f880fc36b11545086271a68580fe8be24219ddf95fa8041d4a03716ebe4596" name="Mesa" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="9c2eef22c055d1167f400029b3b5e166043ba5dce6a94df6126edb9fd2950529" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="1b1931807c3ad386083f64d571d948b83d5de52f34c82f7c6983a516655a5c67" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1b2501928338492c84372ed33787be46c50dbbb0341274914481bc656ed95cf2" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="51f0dedb973670344dc87d5c0beca4478cd7aef458ba7a23126630c7c18f0702" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="192ceffd42f110b32c40c7709b23d70e46847f16d2a20a0048fb66872a376c3d" name="Mesa-KHR-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="687cc08288667839eee5546d21e21dc82069de7776c0465478df302ab8645cd9" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="e121188045e6ffbba2aec4ef71011cf9c2ade2af62d1dcca7c99bd4b3fa1bbdf" name="Mesa-KHR-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="e8b554b06569290e17db88b1eb25e41804f3bf383e92c0b84a0303e82a7029cb" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="45daca9862a0025bfe1628489eec7b1c8a9545def3e3c4ed234115ea81c97caa" name="Mesa-KHR-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="1390d9c81b58745e3c67c5a549f3b9439c005dd99886d563c81176af2eb02d07" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="dffcfa8b6bb01c27ecccc6b8148c373d46c9862db719d7a35637f6533d694717" name="Mesa-KHR-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="9473a5682e42166bf047e5f7a402e5a597ed4a8c1f952539fb8f0eda294e7f0c" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="2b6786e03388828be9c04d75079b2abdeec9b3f378a56194b684532b42350648" name="Mesa-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="cd96c230e06202e8b27f3d993a5c454e917521a92c6bbd2112b8f8e27f313c03" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="60b7870fac90c6515f894382aaf9ab05023eee06e3d344368b0776b0940eccd9" name="Mesa-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="def23a0a8acef2da1dfda8316d95f776fdb326c728506652638a758da643dd22" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1e7ec92927faaea5f39aa1e2323c9be91a3911186f946e8c2a5df6cd119c4073" name="Mesa-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="91813deb2483c0198fa6d9b549a41913ad8c5acec4a9213a493b85d023976157" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="77443e1774e949149c8b6b5c1797c0e3b1e378b1d58ef65cc897930dcf68cd73" name="Mesa-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="ca0ee7e78cc91c8cd9f2ed8f8b30388312fd7c28856f89125ba5f49f55f09036" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="914684a07a611c83c4eba5729d06bb9b23efaa1e0aeb29325d96482899d43e68" name="Mesa-dri" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="c5ee1e07b345afc8f2a942d4d3b2e4ad199b649f72ee6191d7a3e065488276b4" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="31b9ac643b603d702b3972ef4d08f88cd9d3c8f9a43f2de5c9bb1a217b278b83" name="Mesa-dri" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1da31fb09e2b9794a9660cd2d3d8e54b0db8fee51dc6868de5ae85e326bc3bc9" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1f1abd62dcc88d721321f24d7a062913261da5954cef91356b59c316d7cd4f18" name="Mesa-dri" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="08507be97c1541228769c9e85b629233b16c1fa65f19e0ddb6a4c80ef0a65432" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="ef107799e3616e04a8cd142ba6aa1104610f0e17060f64ce0ba6f925d6bcc19b" name="Mesa-dri" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="e1bd7dd135c8e26d6b12b0de17375d609852f87570a3f51ec498fe685e132a56" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="177c2470d8928458ba493c663d060988818777bbdc8342facb68d7680c4aa011" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="02ff498196d161d3efff8a7123301f66f35683078951d46860c28876b422e788" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="eaf5ba58a520f9812e51e7f27b8669e8163e5fb6d94dfaa562473bd5d751e74b" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="80136cc9319832de42da383f89705c337fa87baa129bb341a17ad061bb1e134f" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="919b53bf2637b4bed122a45f42261ab765bbf7c4478e3ae740f4fda87749534a" name="Mesa-dri-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="000ed0c89387f49ed77bead31f2771aef07e5c477751044e0e04194346d5204c" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="1f7e1eda8105a37242b183ac596dcf03c98c9dbd33b2fb65ae78c9f0cb955b64" name="Mesa-dri-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="686fcb34b736ddd9edba21e0bee7358d7d56f07a5f382ad83754d218eac00fd8" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1bd03a1ae8f32f0582bfb39e6825683f2aef7c363c461dfb8af3fd46b3d77b27" name="Mesa-dri-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2a5624fa28df580a375ff7ea960514b6a4238c53347918f4514c8ec112a1765c" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="1b193cdd626bedc9486ba95237a627836356f557957a7590d9f910a11e5b4053" name="Mesa-dri-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="447fbcc97270e64a88684b1ac7131f453d55b689a57fd9041efb2a208700bb65" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="1f2a72154b23a8b73d7340cbde8afaa71f5bbe63a41cb499b941c57fabdab77a" name="Mesa-dri-nouveau" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="b0df383d1c3703d15528583dd26496a6c0fbe67a5e646f8b5be448643b85c6fa" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="dcba7cfc07b5f8b5ebb7ffbff54df233e69ac4958c859f64c35148808ce8f3dd" name="Mesa-dri-nouveau" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="3ff1153e8a63cae14852cf96deaf4a648881a2a84a4e2cb090be5a5b7d9be453" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="ac5e8607dcb88c6aaab73bfa436548cbe534b10305a02c523667a6ba3aa96e1e" name="Mesa-dri-nouveau" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2b073eda193a846b9d200a736fafdd0ac3fd936824394247f1af717cb606a3aa" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="684ef1477e3f3b7df0aee617204f46cc6f2bb5c8ef4ea8042cf814e880e19306" name="Mesa-dri-nouveau" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="efd3c8527018ff8cf71f578fc34579573af66b0f82af4fcccf409ddc1a921189" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="5b60e316f7cb33dc1e4f352e9c41c1d39d29eb27ae2e0bd4a2014f8f19f6abc3" name="Mesa-dri-nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="87c6df56ef8df58c8eb28ad101c96ebecc76f4b67116b3ec359f96785d0f0d26" name="Mesa-dri-nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="d4ed811e4894be0dcc0d2558e6a5c1c9e31e3bf45e6eec1418fa80e437c92b39" name="Mesa-dri-nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="a601427c871097d019b365dbf312f7b398df6cf348cf7fc9770540d3612c206a" name="Mesa-dri-nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="99a2e44f449ad75834fc14a4b9750a326683bda76fef9ae955a1d4a08ae97e94" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="290cbd4e17398a8e2f5b7e0c4de34a8cb76a8a1a6de7dba1f3a7c46152004cc4" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="864f59e8efb1b42f4c31a1e5ff2115cca8bee4e5e4e5e54a796fd8ef78759852" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="75329472b7c060095bef3a64a621439766320e74425d2cba1f0765269b4f6ff7" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="d8853b515eb90d834268c668f299e12aa323e53b288d4495c34bb935f519a404" name="Mesa-gallium" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="652df5aa7056e361e4d8921383547e4ea9d2adef0f084238a605cedefadbc7e9" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="a9294aba533ad24d4c3372e202d5e18930bd7f8b1e9aed72d882af4ec54200e1" name="Mesa-gallium" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="3e94462c87c12e59d005ed5341f7ac39c1ec6eba2ebd9ec412b8b22b5307c2c1" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="c9a6cd5bea2dfbb5ab0dba26747d6d2809065bcf87e7f366dd71b35b6110b966" name="Mesa-gallium" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2b1adfacfb7cf0f471212fb2bc67addcae2207ed419bc4e8717d6c58ee63aaae" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="907f3eb1f5b221961c8864ee6c9fc2d33023457b51af31cc17d6b03ab6b84050" name="Mesa-gallium" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="85f1ff5a086b311e1fa0df4eabca15a09a525ebe0dd233b2ad4669c9e4baf691" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="fbe43ac4a9c0eb1b8d0a300dd858c597373c04a4e966046bcaf9fcc7ab2922de" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="aeef0e6a6b64e1ec61a63f5d3448c384ba8446a46940427ce6c8cc43bb717cc0" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="a9d90d41a14fa37f72b00dd32df9287d331cfe89fe028976dac02262a68e0939" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="8f5578fb877cab3ad94ac8788a5b77cb83e7ef2bbeda18521ec28a8b60bc6696" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="3a4bc935922bb397cdd715a8e8025015641bce892cb380cc7066b791203badd4" name="Mesa-libEGL-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="254caff7056d4678789aa29d0f25e5ca9983bf805af6781db2e0b0d15b6525cf" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="b596d3a84679c2b3b994345c6f042a44a8058b5111daf8d554677daa53c5b546" name="Mesa-libEGL-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="d52610bf63abf965c263d3af29a0917ba266662a84846d4ca9465ec1c6c2163e" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="58acc85079053942df906699fdd01c3cba31266bc916a44f55dbbb81381bffde" name="Mesa-libEGL-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="3f97241429b11bd108f68d181b7ceaab2aac8dc3f845fa5abb3e4f704bcfd3d3" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="7e46714c7379f7831bfbaf531c663625b8028c88cdb026767f4cce729b3c4b9d" name="Mesa-libEGL-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="6cf5c03dc3cefa79dd560e695e5350dbc21087fae20f26ba8879e2a705593192" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="cdc1243d82fbed360040ba890d7fe41e49a8829444e5719de9b794e85ac393a2" name="Mesa-libEGL1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="096b74a4070cb0250d8904c3c762623dbb4f1679739cea448c9cb3b5076be569" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="4ee5eef5edf0f4bf7eab000136a4558384f57f9f09c973c266828c462f5b9cc5" name="Mesa-libEGL1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="40be9aa82e104e32e0426df9009cfa54d23824a0a9feafbeb390a52ded916e4b" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="6f0839d9ab5f7312b0324ee04b4bef70f750a21e99eb9c14c160fe2ac20afb99" name="Mesa-libEGL1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="8934929d27e343b6c9ab8b24e9ed9072b5dc5e54843eeef06bb474e394b36bf4" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="8c7560baefd42692fd07961fb77bc1195c186307ae75b7c8cce72a7c48dd8b4e" name="Mesa-libEGL1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="20df7dbd69988fa0fbe7fac2778fe5a1b8dcfdc61e40f3a6509e3b690a9e9f00" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="6912781da02bb9253460beb6e0a851581339afd6f17b1c2272c830713369c030" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="332eda8d90fc8c8931733c3d0449b51228a95633cefe10c7bbb134ee03405444" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="89e84592b76d0d6257bf5fba26ac07221fe82a22f9ab6c39488cc486af6cd7d9" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="9ce10680b500519469864ad9a3709260e521416ee6490ffcec9939018d5ee57a" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="71157793a0c00da9149149759ae28efbe81d79247bc9652ac1274cce67aee77c" name="Mesa-libGL-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="fa49e74dae15f9bb555c6ee503e30ce2435ead689ce21d16580e059c7171b75d" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="f5ef5753e3f9409d5179ac3d60a8daa7e1a01aae6b2a75f660d5ae0cab5f19ef" name="Mesa-libGL-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="98b86154bdd4c69390bba8e3f5319ff2acd80f23754debeb91d8b43518c50c1e" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="9a3c21d3c35daafdfe861ca1303fcfb7ae5398edc73e5ff5b1faa9de769890a9" name="Mesa-libGL-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="8c807f5889170131e432b059f93b7993beddc3d45f41fbfeacd9e326d4a168ad" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="8d11362d5f1a1185337416842e702eff3e8384712d1cc59e6cf85c33220f42ca" name="Mesa-libGL-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="941d6eccd481ef4238dd7975ea7ab6bd4eccfe6f0eea1bd5d3c450c08875a2b4" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="f2d5c2a7e7bc8c6ee22154f885842d6d8034d0084737b70f7d3217c1a32f7f8c" name="Mesa-libGL1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="f126a9aa0df6578114f9628e7bec36ab515760ea7830af460c1f838065d3ab3d" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="283bcf12c95e275a5e6a3125420941dae803cf64146458f6fcf6acd2b72bec6a" name="Mesa-libGL1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="4934e36cfb55f075ff93c1cc3b9c89da0e73fae9351725947891b26325253ae7" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1da6a3069329a701773f92cf2ab2fe06b3f200eb8bd71e4a790726899bd5b499" name="Mesa-libGL1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="6ce897e3d0ca8b6ce1daa9977ec985b6c3c28b63af2432c9296b03a33194aaba" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="17ac53c666b45621b6e99206799b6f1fd6551f54d19f8774e732148ed9cb03db" name="Mesa-libGL1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="649584123ffe5ae2b5ea50992d2b67f8c6a4ff9279698ce73e674d6bb664e72f" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="2bf69023a330d8bc526a38f6b5e63afec8ffc55a9a6f9d9dc444a0560fb8f195" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="6fdc66d1893eb73438092b5cd6959f5ea75362e45d7a0addbc7f8223eae4ce92" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="0eb0d2303ef2db8fce39c85848d8eb22c042377802739b0c649a4292b8106aaf" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2b7dc9dfa5399b51193f43dc6b1f2eb2dc969149226fa901216eadf695254f8c" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="1f78acda1c2b1843b30349d1601de4d6de5fea7928e627511492c0c0ec18270b" name="Mesa-libGLESv1_CM-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="9ab6b601be65df095c2ced4880ae004e00ffb910ec9a50b4571a469f996399bc" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="5523b759a1f9d667e1e43e338e47d78464b978949adc059a4064a6f20541cf6d" name="Mesa-libGLESv1_CM-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="c20a7631df14ff744fd6286b6d7d4364b2f26bad8fad24d31ed53e67dc5e60c1" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="7bb1c4aa4d7b6ca58b475a7445fe08c033e7706cc037e3f1662ea242c3e69fcf" name="Mesa-libGLESv1_CM-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="900b7dd3e6ce7845d45cb812e2b7f0bcaf9a70bb5bc961e0ea6446fd69116a14" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="333c9004bb0b9aa9eede7cd7669850b7afbb1a262edfb656fa15aa65d9db97c4" name="Mesa-libGLESv1_CM-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="205dc01f48fff63241b1261c5ebcd4b440b4fb7dcf6444d8acd24b3727659008" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="51deff15f9c88bb9fc31d5158cb44a9386c73cd16c355f7c9ebacd5f6290f751" name="Mesa-libGLESv1_CM1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="b5b2214e8f231a7e61ac22698a9207d652399b3b91c13e4eb1be5d15aa7b474e" name="Mesa-libGLESv1_CM1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="4449dfd15ba7a3b6853a263acb2f888406128614cc26e53fe3029cf9e69248ee" name="Mesa-libGLESv1_CM1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="ded25085eddc4e01f481fd0a096687466127cfc4da279d64028b4bc24e77e886" name="Mesa-libGLESv1_CM1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="b9e42e717ad2ceed1aeda6cda5104ed5b89bcc99286d950628c88d5bc1857c08" name="Mesa-libGLESv1_CM1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="bab4626029d24ff7af3583a6e11aec6ad8eaf23639937a41b890177585301fe5" name="Mesa-libGLESv1_CM1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2cbc47282e902e08a94d8bfd3829badf8397c4df2930281f0f0685feaae7d2ab" name="Mesa-libGLESv1_CM1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="99566041cb5612ad376108357c84b11066c3549f7ef1b1351bf5cfe9b9dadfc0" name="Mesa-libGLESv1_CM1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="c98f6a670ce63aa71484878501f26269d5ec726755a774526b06d21a46159946" name="Mesa-libGLESv2-2" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="b89eae48144fe8dda27c9e4bf338da470e741bff5dd2596ecb3814f5a9606d16" name="Mesa-libGLESv2-2" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="bd9f37191dd06754e4e876c0ce9e0387cbcc0250d373ab066a1ab7624d84b9ab" name="Mesa-libGLESv2-2" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1355c8975fbfe9dcd2e44a6d6ed641eeccb8c0b0b010e94262de87fe47337f2d" name="Mesa-libGLESv2-2" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="4f024f48c587499a73d9917553e2c33cbb688906183d33193ee269f0e08598b4" name="Mesa-libGLESv2-2" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="b09edc30934ffeaa36f0cbec7308de8f4f612ec4a36788f4ce9320ef9182ded8" name="Mesa-libGLESv2-2" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="dcd58d6deb9246be55e3e2fabb4fafebeed916098000f69783c0081e01dd2d7f" name="Mesa-libGLESv2-2" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="c3b2cfd198166f0b4b86e5a0256a32551291d44b95709d86c7250a1ac783a2ea" name="Mesa-libGLESv2-2" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="735ec70f68299cebeef1e8e9161b7851ed2c06e8326120c8260ba63c1e0cb3f4" name="Mesa-libGLESv2-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="502b79f16f23d2cc45a75a5da2ce63f44a4a59ab1db3d4d41c8f66ef0cb75f5f" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="8948a03afae4749ee78e8651d33d1bb7af4a6488cab29131efb3eec8ad6d32cb" name="Mesa-libGLESv2-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="51adadca2aa7cf55fb59c54c552f564681c3084c1aa1141de5a62a1a9f680758" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="e15aa45aa359c1d306aa3e2da80a4c9de1ec1894e8e9ccf977be9c791d8e6b63" name="Mesa-libGLESv2-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="9cbbdecdb34bf3902f4cc1df3077b41747d95d52f6d92ac7991d52e09af22def" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="9ead23ab8d3ff1754d26438bbda5c88d1a21698b8ed48a2a733c4ac4f2cba65a" name="Mesa-libGLESv2-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="ab1b72b100e5bd2e2e36c9094990cf7256aad9662d83ce60a34d1d8ec741e261" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="3c721b44b0d6ee78a3ee38a9deeef2bb6c2d83eabe25e75825c80872ca0426d8" name="Mesa-libGLESv3-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="adcd4a9ccfdf435e528bc8e18d7087ff9d1abda5e05edc94cfece34913073d1f" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="94699904898a2d90e3309b36f5516ca9ec76e52b77cacb0b89dfaf7e9953210b" name="Mesa-libGLESv3-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="86d2b4bdfae6460d5c07fbb4dc00b3c955f92aaf4bfa188bdc16e3d36164cca1" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="7db2bbdb293846515565ef5be5c5b90f035f6437029068f98bf084e7ba679cd3" name="Mesa-libGLESv3-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="14db2549ddbab3eec239fccec364d3d828f373c54fd347f5c0e1686c14fa0e37" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="414047e7ac1820195ecad627b64d7b77f45beadcb7bd050cc1ef0f9bff7e0781" name="Mesa-libGLESv3-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="5c99836a379623c2b28b33deb6211fdaf6e2e17d53176110e590f9d659b40d98" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="9f62480767b51755a8c21828eefcc834870749190b9a0fb1abd2905580e2f0a0" name="Mesa-libOpenCL" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="d4b5b1447eb62562e9f130f0b5b702dd5e2dfbe1d173e3cb6594eea15c0b161f" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="987f9a37d720de5038f351ffa65a53276ee6c734306f7aa0c697b46edeeeca7c" name="Mesa-libOpenCL" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="3090d085b6d3aef2dff1c48a6b335297b25b8eb4ea3f01e73d624dccd9aad059" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="7e94d236be61f3c9877ff5f8f1aed793fec2874842c7fcc7c7e6b07754f60775" name="Mesa-libOpenCL" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="80e87ada9ed9b12ecaa6f2f1d9bcec593bd1df7b425847979b82c3c83de23cd0" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="e7aba7dc20254e025a6f3b6c21192c2c40568448c631da45accb219ee0a3d298" name="Mesa-libOpenCL" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="efbc1b3c46fa5cb5a4c57a704ddf8693250d444e9c32c718ba449865a98e6c50" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="6e74afde510e74db180bfd1fc54b6563c7de225adc346b1e5e9336a31f42fac7" name="Mesa-libVulkan-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="50bb20687429db2a13216d3882b5a0a8e4a3f2e413104ad39c3ffa8674f4ca6a" name="Mesa-libVulkan-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="8dd0d39d06f65e7b3a08163229ae150f151e5bac44fec2f04594a4df5a0c8741" name="Mesa-libVulkan-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="c8fd79b9cc96d31eb2b0af877de910ad1cd5e7995a765ddb080f44336e60388e" name="Mesa-libVulkan-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="b05001c355f0722023aee79f4732cb7314abaee66c29a8540c59ca07849999fd" name="Mesa-libVulkan-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="93259bd18962cd5490134543a580d5a50326d82c2a27c794fd2ea3068429080b" name="Mesa-libVulkan-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="be19a57239d38d59405fbb1fddb478b4f140f4d9c01a72190532c8f7dc9c9c7e" name="Mesa-libVulkan-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="cfe6edd3aa9d2d2d6c640b636000ffd092dc4013d891e9744c47a1a387c142ba" name="Mesa-libVulkan-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="0f90da36c201f6308b4eab4a5b0afb85eac67ce91bc2187113890a6aedd31461" name="Mesa-libd3d" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="1d6595bf57170d9c2c6dcd58d26b138031e26cb783e9eed2a44673bde3105a88" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="eaed5fba54e73953196c0729c92e54a39782b4f9b3ce3ae561dfa19c71e08196" name="Mesa-libd3d" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="430076b40cec16c42848c398f865ef379611a3640306cc937ef01af60648ba5c" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="8108920df1570f0b9b24c638a728fd90b9632ac625e60ccfb956a9d5aeba1fec" name="Mesa-libd3d" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2dd589e7c5084fa0213db08941945a7fbaf32aa37bbf6afba34aa3c6545c7af5" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="dfaabb26d92ac2fa187a0c3cd05d6b0f3a759f3d6531637aec75cf026cf3162e" name="Mesa-libd3d" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="fdb90a789480bef45230d64a30b346f5929881f107d7b9bae8bd3abdf5f72f9f" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="19feeaf9b5ecd8b819124a08a7cb1687811b43a9b1edf7cb339c58aa15043469" name="Mesa-libd3d-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="ff54bc9fcb3911636afc597b3519c26abe54792686ea6d82106c6de0b4fdd91d" name="Mesa-libd3d-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="108e0437377088139ad2dd144ef95614c7003930d26dc83c4d5e78f43c3c9b90" name="Mesa-libd3d-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2cb81b754dc74771427e426bab2167007e3eda13500dbfbca6721edfc6e2d7d6" name="Mesa-libd3d-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="7bedfa532486f771006c484caeccde40b3614649508cb68723908fc8f82d5763" name="Mesa-libd3d-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="f636fe305d473e1f7049c3a51738573e0e986b83246fb0ed14be8cf89f72fc6a" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="a3993d9d5e2984784094d5c762000ad2b24084cb0b23621c85a463c79bdb2113" name="Mesa-libd3d-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="3952b31b02fa58f16197ceea0f13d97e97a81361cb825e52716e4a34ec5f28ec" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="72e1c5c2a421f15958197db64cd074fe3c082877a3e430bc844c39044c99eb90" name="Mesa-libd3d-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="a414002265a61306c0fd2213eb913a3c20493b034ad70bd0db3339839401f3b9" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="06de39a33851a135b38a772599b65db1e8cad8f4bcd8e00cedeb4aaa77ae05d4" name="Mesa-libd3d-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="9e94d8cb1873e91b152a8a180182ca445aa7afa9512cefd6c630ce2bc3ae3db0" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="823927ab5b2630d148d37068dc7d9df49fb0517bf9dfdaf4653657da1a6c7285" name="Mesa-libd3d-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="bd7e5947dee74395a4458208349e13346ebcbfaab73123dfada4704dfa59c1b3" name="Mesa-libd3d-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="59f31677c3d38dac213f66a1a83a13206bad8a45a6e0ddbafd947ae249edee84" name="Mesa-libd3d-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="27649cc88ebd33fa32a058e8d984af2f048be13a0666af600a12983450169371" name="Mesa-libd3d-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="919d6d02935f40d6a5c1f3db25ac8fd9aabbb4212c5397d0fcd7160030baa3ad" name="Mesa-libglapi-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="5751a3a6b2a474e20cb135eeba1fabb485291cfeeb975c75fc055e6d88dae2da" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="6439ce7e41260475e90c1b15d513fd61a03be03f6a1080c47562209329a71e6d" name="Mesa-libglapi-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="829aa2da369e5b785ea83a0c376e83a871a1b6d3f29d23247428712274edfd3d" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="c1a3c6e522cd8284c59afdc7def25e70834947af8df5329c622ffd26e3eb7791" name="Mesa-libglapi-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="cb0bc914e11645820b3230aa3f88b24bf68f147f973289c6086a6bf3fd88ca4c" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2038df42c0f205fa2581a328d00a08447cc40e8bc2a9aff5af16f111dbe91fce" name="Mesa-libglapi-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="e286e6dcb4fe435c98b2da1b056a9eb7019dfc2e488913ac8a9ed3a0f2f5322d" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="1f03ba0cd6f544652cc4b07ec34f0c2f24a1f3484cfcc7424816569bbeb77380" name="Mesa-libglapi-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="42b8b7b8bfe2fdcb5b700eb1c261dbabb81f8b4cfde8b8b4f8eb456299ef6857" name="Mesa-libglapi-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="2a6a46336849578d5d8637221e82ec356ea1271cc7d7044741a73f2e0f72a9fc" name="Mesa-libglapi-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="f143a42191c3db5fcabb2fd3942d8937db3d6df37d77e57c1c527ce39437a1ed" name="Mesa-libglapi-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="83640178bf9e66be7784ad7941af5194a5a887c2963ea4ce5f4da01890853033" name="Mesa-libglapi0" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="f13d7e6681850735a29c3503b5955e4012d71af238b13c4a39047844d8c6a3da" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="578c640e25a82f74841a892ea9da28cf690aa8e7b595228e8a5765dc80a8b430" name="Mesa-libglapi0" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="59f53097aee15827a03e08da4cb409645929e317c40f43c08b7ace688960633b" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="fa9f006d796f41de07ebacb4ed125036e51c039801392ea27e7a944d02714898" name="Mesa-libglapi0" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="a93b1bf8f739f2ff3384857cbbd193d6f3e262a6173f8f3fed31956f752c11f7" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2de11ea9ee6424b78e63e4dcb297519ee45a5484aad7d904788617e9ea358933" name="Mesa-libglapi0" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="213cfffe147415ef2c12dbb6a62b091f366c1d13f1cc589481bf34543f6cb938" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="aa47aa3738552f6d718b2384892ee5a15bda003565c12d3278334c874aabdb0e" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="1b975c3cd5e5081ea7356fa63de347ef98ac16ac323b68d79ffb3172e62d78ea" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="91c3174b4eee7c5aa0656e7b176736b74c56e035300f3fccf655f341f09c99b4" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="ae7a8ce8bad64c11f30c13eccf0d8628511d1b1b1c9fd1518f94f402cc00a394" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="bdd3726b819cd539e25cc079a95d85496c56bcd5636a565c717cfea311bdc60b" name="Mesa-libva" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="0c8ac4624a3d6ca353d5fc25c64e35d7e3d669a419333a733c57760843d47c0f" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.11.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="2b6444e4030acda5164d393554d613585a52c739795fdf5212cb060668ba9101" name="Mesa-libva" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="d0acd05314ddb92ef11eb4f357b39e809bd4c2f6050f6a7a96f383b94d7ca3a3" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="cda85e49641b923c782b6d6ad2b8851f96d532054d56764a995c5a90c9a50b47" name="Mesa-libva" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="6039a3cef500c445f1b570a088ba36e4cba9732e3d2548d6b61ce217c9b426ce" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="d744043b80a98efd1133a9c91073443a8cc0161ea0a174ca475ad6eee9b232d5" name="Mesa-libva" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="e2f8f299c56adfdd7f1a7b51786f02e64dc0ab6726f513038852385d6bace9e7" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.9.1"/>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1574856000">- u_call-shmget-with-permission-0600-instead-of-0777.patch
  * CVE-2019-5068 (bsc#1156015)</changelog>
</package>
<package pkgid="ffaac544e48d3abcb0e3af4d4ecf10e12cc9d94652f3a446925bb473c5fec76c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="5dabefc54e8b8f646338b96e86d6d09a6841341de99e4c88e43bfd4c15572d72" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="63c8d20bc1230bfe427a0b1f46409c603bdc13f6356c3cec36713eb1512f9b62" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="09dc812219793c81cf3742992e537606304e9070f86d247acd5bb46471037bd6" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="b53b3029f39f0dd336d2c494aa51723acf3ccdd4f937eb0c9a43879b031df64b" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="c95492c6c19a14f9c3322fda7e66e518533cfbf5f68973ab921ebe01717e5b89" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="f51f3cd53dfcbc9d9f21328e2fc254d3d25b87f57eed6b799de2efbf6571599b" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="38bc826cdf1cee25495169bf2bac8f8119698a7e2f6cf678650ed7d1658a0747" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="e7efe6b3b86a3b8379ccbe00ace90a6aa8bc473bc2e8921bc4b976ccba217013" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="7fbd307bf3844cc53fd03f95c4477fc2003ee42531f23a2eafdfff07d94c246d" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="efe0d8bfba30c7d5004014b34ce4a1d573f712fb2af2fbaa3b854ef149e5afc6" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.3.0" rel="lp151.2.21.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
</package>
<package pkgid="80739bead0a0f51374c07f3d7b3cf98caec63c3b1e87fea12750340770e6ec83" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.3.0" rel="lp151.2.21.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
</package>
<package pkgid="6f86daf85d7aa4e11694c82ba8cc3ad9653be4a8fdfada5a78fff3c9c774f7d5" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.4.1" rel="lp151.2.24.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
</package>
<package pkgid="dfd41f08490b98002c7cea6f6cce3db58ede0299b94bffe0180c038f72e4842d" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.4.1" rel="lp151.2.24.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
</package>
<package pkgid="cc49d9009f90e45cd42751e29a2a2b6c10c14f654737efab147d65c3955b033b" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.4.2" rel="lp151.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
</package>
<package pkgid="f4b47e455e723b0d2051daffc4b828c35691bb7bf737990b219180e28579e56a" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.4.2" rel="lp151.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
</package>
<package pkgid="4e7c1f04671eb19d390dac5872a2f93b3dc16270b49d74afbcd2660a16a9af5a" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.5.0" rel="lp151.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
</package>
<package pkgid="97bff374258cffbb26aceec5c7e5e1d1a5abd0d8a4d358498cd75db25f88ba94" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.5.0" rel="lp151.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
</package>
<package pkgid="177150f740dafa7a6c0765dd5a4b50c0494ff3c8016372426b53eed898de7622" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.6.0" rel="lp151.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
</package>
<package pkgid="00f4c681eae8ca5eb7b2c6d799574f821f54037d8c5edcd3fc913f0709b50d5d" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
</package>
<package pkgid="85134c63f90135bc5d386b0d6370d225a29396c333296bd28d3f9ee11afa814e" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.6.0" rel="lp151.2.36.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
</package>
<package pkgid="edfdc1cc158f4b0f1d9427a5a2c6fda918da5bf13bd4ef181f6ecb20c8fe43e3" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.36.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
</package>
<package pkgid="d06e4eb1b8ed20547a79ab5c4b87d8856fed01a1c6faa3084d5b8e90da13a0e2" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.6.1" rel="lp151.2.39.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
</package>
<package pkgid="d9563e6786a5b6eb2ead23b1009fea6d82f5c721aea64bfd66748b71e328a3d5" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.6.1" rel="lp151.2.39.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
</package>
<package pkgid="0f021693989179fff37ee046ea690d34a1d369e5cfa657d527718647ef5c6394" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.7.0" rel="lp151.2.42.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
</package>
<package pkgid="4a4ecbe99764d5432c38ea17635ad27ff7f53c4cc92da45c157e293078e936be" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.7.0" rel="lp151.2.42.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
</package>
<package pkgid="32237de68c230fbb368246a82f3d88501eb167b8b06fee5fd25846d6f8398cde" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.8.0" rel="lp151.2.45.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
</package>
<package pkgid="c9f3b6233f3161a77ff8e817cd8104df86ea1f130b20dc56f8f00edc34f6c898" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.8.0" rel="lp151.2.45.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
</package>
<package pkgid="288d57cb6d6e71991a966a2f63a9ba82098067c93e7ae7f2a052095c787e015b" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.9.0" rel="lp151.2.48.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
</package>
<package pkgid="5588f6822b545be338d96c72d4484573f17c592086a458f3a0fcadef9f6c273d" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.9.0" rel="lp151.2.48.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
</package>
<package pkgid="10ed30bb88eb9b1eec26960519a13103d5536fc499a8119085e8839bae832ff8" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.0.1" rel="lp151.2.53.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="f59f35d433073aec1dbe2d249d0e129278fbdf21082524c5ffb34f13b30539ed" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp151.2.53.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="a1c7459847f9cea070007fe1545df2a2febd332231d86d06e43ffb546cad7c9f" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.0.2" rel="lp151.2.57.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="35f22383730e157682342cb1817a8bd3d6dc59268dfa9ff3e6a5879af1a01fba" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp151.2.57.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="46676a5464bc86856c12e1319dde27c7dfb418e4707758cf1fc6ab8874b29e0c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.1.0" rel="lp151.2.61.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="a1d16c68a2e8d5a95a8bbd857b835774c53f8dac6d0330af3c0a56d946a1ab46" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp151.2.61.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="6e140503ea7cf6949ebbc88fd1165e1ea8486c05c80e4cf2f0bc26af7330f3ab" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.2.0" rel="lp151.2.65.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="f73fa3592a5b7fda596068a6212637c1306e40ddca1a7c24360224f3729f15ab" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp151.2.65.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="4839873ed3bc525eeb742e612c77c503bd832f736f158d44a974bc0dd5829484" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.3.0" rel="lp151.2.69.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="39a7791bb73c69a7ea128de5d7eefb57067316a3462ef42eb4288c00da203f0b" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp151.2.69.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="558bee7c1749f0ea580aad9751206b26c1975132fdb3ddf04afd4ae5ad24b4f5" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.4.0" rel="lp151.2.73.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="cb70ecb0423e85bf1ac8ce703a046cf6ab9649692e26f5e2dd42d8248ddbebf2" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp151.2.73.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="6dd96168b57f99c535393d4873d1a850a0b1e46f688644412801c93220487dd5" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.4.1" rel="lp151.2.76.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="30a7bbdef9e8cb2faa35642db6d8cc91f726aab18386a7f77db85acd8d03cc43" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp151.2.76.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="665b1e86f14acc3d5b28167bb53497d64430600f9c62134698891bddc6e0f326" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.5.0" rel="lp151.2.79.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="3efc444e96dad34c80689c8bc15c03d3e7efaee8a82c0434beaea104361aad28" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp151.2.79.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="6a0a6c6a06ab196f3feb3340832b0d74afa13062afa10e8a096a73a71104ed36" name="MozillaFirefox-branding-openSUSE" arch="src">
  <version epoch="0" ver="68" rel="lp151.3.3.1"/>
  <changelog author="wr@rosenauer.org" date="1324468800">- make openSUSE software search version specific (bnc#737709)</changelog>
  <changelog author="wr@rosenauer.org" date="1331812800">- bumped version to 6.0
- support firefox-esr RPM packages
- removed MozillaFirefox build dependency and PreReq
  * everything controlled by Supplements and Requirements from
    base package</changelog>
  <changelog author="wr@rosenauer.org" date="1340712000">- update susefox to snapshot 20120626
  * add window controls for Gnome 3 (bnc#768942)</changelog>
  <changelog author="wr@rosenauer.org" date="1344340800">- move Firefox specific prefs to defaults/preferences (bnc#774914)</changelog>
  <changelog author="wr@rosenauer.org" date="1359633600">- added DuckDuckGo as search option (bnc#801121)</changelog>
  <changelog author="wr@rosenauer.org" date="1364212800">- modified file locations for Firefox 21 and above</changelog>
  <changelog author="wr@rosenauer.org" date="1437912000">- identify Leap 42.1 correctly
- searchplugins need to be placed under distribution with FF 40
- disable susefox
  * its main purpose the plugin finder service misses server
    side maintenance and NPAPI plugins are being obsoleted sooner
    or later
- homepage setting moved back from susefox to distribution
  configuration</changelog>
  <changelog author="wr@rosenauer.org" date="1445256000">- change homepage to https://www.opensuse.org/searchPage/
  (boo#950948, boo#950949)</changelog>
  <changelog author="wr@rosenauer.org" date="1450440000">- identify Tumbleweed correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Identify the different Leap versions correctly (up to Leap 42.2)
  (boo#987969).</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1481284800">- Fix openSUSE bookmarks not added to default profile (boo#1014292)
  * Move openSUSE bookmarks from toolbar to menu
  * Use local favicon for all bookmarks (Firefox 45+)
  * Fix links to "openSUSE Documentation" and "How to Participate"
    (boo#704121, boo#953164)
- Remove DuckDuckGo search plugin (included upstream)
- Clean up spec file
  * Change $RPM_BUILD_ROOT to %{buildroot}
  * Remove %clean section
  * Escape % symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1493380800">- recognize Leap 42.3 (boo#1036679)</changelog>
  <changelog author="wr@rosenauer.org" date="1496664000">- really fix boo#1036679 (recognize Leap 42.3)</changelog>
  <changelog author="wr@rosenauer.org" date="1522584000">- recognize Leap 15.0 (boo#1087713)</changelog>
  <changelog author="wr@rosenauer.org" date="1535198400">- removed intl.locale.matchOS
  * it's not used in recent versions and it was set in the general
    openSUSE Firefox package since 2011</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1556020800">- bump version to 60 for SLE compatibility (bsc#1128316)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- recognize Leap 15 via sle_version (required for &gt;= 15.1)</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563364800">- recognize Leap 15.2 via sle_version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1568030400">- layout.word_select.stop_at_punctuation -&gt; true (boo#1133163)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1570190400">- removed extensions preferences (moved to core package)
- use multibuild to provide branding package for
  MozillaFirefox and firefox-esr</changelog>
</package>
<package pkgid="307f77b4089a1ae5c38b6be350c8ee7f44e3562364924503989e9ff7b3cf3609" name="MozillaFirefox-branding-openSUSE" arch="x86_64">
  <version epoch="0" ver="68" rel="lp151.3.3.1"/>
  <changelog author="wr@rosenauer.org" date="1437912000">- identify Leap 42.1 correctly
- searchplugins need to be placed under distribution with FF 40
- disable susefox
  * its main purpose the plugin finder service misses server
    side maintenance and NPAPI plugins are being obsoleted sooner
    or later
- homepage setting moved back from susefox to distribution
  configuration</changelog>
  <changelog author="wr@rosenauer.org" date="1445256000">- change homepage to https://www.opensuse.org/searchPage/
  (boo#950948, boo#950949)</changelog>
  <changelog author="wr@rosenauer.org" date="1450440000">- identify Tumbleweed correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Identify the different Leap versions correctly (up to Leap 42.2)
  (boo#987969).</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1481284800">- Fix openSUSE bookmarks not added to default profile (boo#1014292)
  * Move openSUSE bookmarks from toolbar to menu
  * Use local favicon for all bookmarks (Firefox 45+)
  * Fix links to "openSUSE Documentation" and "How to Participate"
    (boo#704121, boo#953164)
- Remove DuckDuckGo search plugin (included upstream)
- Clean up spec file
  * Change $RPM_BUILD_ROOT to %{buildroot}
  * Remove %clean section
  * Escape % symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1493380800">- recognize Leap 42.3 (boo#1036679)</changelog>
  <changelog author="wr@rosenauer.org" date="1496664000">- really fix boo#1036679 (recognize Leap 42.3)</changelog>
  <changelog author="wr@rosenauer.org" date="1522584000">- recognize Leap 15.0 (boo#1087713)</changelog>
  <changelog author="wr@rosenauer.org" date="1535198400">- removed intl.locale.matchOS
  * it's not used in recent versions and it was set in the general
    openSUSE Firefox package since 2011</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1556020800">- bump version to 60 for SLE compatibility (bsc#1128316)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- recognize Leap 15 via sle_version (required for &gt;= 15.1)</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563364800">- recognize Leap 15.2 via sle_version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1568030400">- layout.word_select.stop_at_punctuation -&gt; true (boo#1133163)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1570190400">- removed extensions preferences (moved to core package)
- use multibuild to provide branding package for
  MozillaFirefox and firefox-esr</changelog>
</package>
<package pkgid="4f0f13b35988cbb7c2c932dcf572732ec84d5172daf5c80b8c07b51c7acdd753" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="448cf6ceee4d164e1d2df5654ec630ee4174ec1e1da5d8af72ed012a9c5b0e2b" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="9b557aaa3d3a1b698e29b9fe38ce2332402064786d66c32fabab5a4fb5f9246a" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="f3570079933439dedff8c82661d8fa2814b6feb22dc5c251a98f9eed027b87f0" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="249c877ce06184cc11a87eb2ddcbbae52572106635539c148798e8cc03908726" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="937a7d0341e1e0aa4507b88b07d13815b5666d0ca32aeb3f1bd2b69ca84495c1" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.3.0" rel="lp151.2.21.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
</package>
<package pkgid="83af55e71c9a84eff073aa159df18603104ac09d43a9fea958180c171da3bf8d" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.4.1" rel="lp151.2.24.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
</package>
<package pkgid="67d4fa41a9b1ae8e2147d00dc9ae6db5dc3df8118f68c5dff035dce261076616" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.4.2" rel="lp151.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
</package>
<package pkgid="01fba5587450745dd288182abf3e3ea6ee359959bb5585ef19ae69bea89c990c" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.5.0" rel="lp151.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
</package>
<package pkgid="2b536ebed6edb973f1e30d785735f29b1dc30562027f3c9fa26e1edd59b2abc2" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
</package>
<package pkgid="5972f38f060d91d964e24a4adaf8b04621439f2bf877e2a74c3907f60266c273" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.36.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
</package>
<package pkgid="bb2d5edbe56f8c9d359a8970e6490677679ae4f47528c8ca184461e91db167db" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.6.1" rel="lp151.2.39.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
</package>
<package pkgid="94e46a6637ecccad892f0da3e2e8b3d3e112db7abd445bfef21c4d922e1c67f7" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.7.0" rel="lp151.2.42.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
</package>
<package pkgid="f152906eef6f3e403e035472afcbe9c6df8c0f26f92cf18df3644c7d3c9477e0" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.8.0" rel="lp151.2.45.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
</package>
<package pkgid="79151689292418d32a1f79f10fbb53e4d33492cf7df8663bffa91888fe46c7c6" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.9.0" rel="lp151.2.48.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
</package>
<package pkgid="cbd4b5371d697b4cb31544de18765005589627f10c87bf96d40b263b01451586" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp151.2.53.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="818c0a9a50060191408f8cd97a0fcd8567ca016cac7053f16b43943803960667" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp151.2.57.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="e73ac77b6aa644447c39d7ab8e7247661d65d42c646b8671633ec893d5f2f832" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp151.2.61.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="dfab204d80755a12908d3642606982a7be9374bccfe1241c7bbbf393c8324145" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp151.2.65.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="cd6dd486917cd8ec7e4dfc38761c96e41a2f75aa152ef8d5293c5c9c2d2301e5" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp151.2.69.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="5b86af2c81b1e3da32df0e2891823b5cda5a3a75768b5ea713454e485ebb0777" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp151.2.73.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="f4e490021f6f69163ecda6d08fcb8d5d194727d2b37cfebd8c8033c15d1c9d52" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp151.2.76.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="dfb6247e89efeccf4b94430ed5a53382f9f9aad319573099f01413a1378c3ba2" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp151.2.79.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="c7a872d36a4917528daa9c46d08dc32043166d267d2437cfbedaab58ce73b585" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="b422b95fcf96224a4efac629d2aa1fe29ac997a9f1ca8072f99691610093e77d" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="7785eb6dc80e7581dcf2642831afa782cd1c951c1879b83d2f27e4cb9fd86a51" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="c3db69d5fc91f34d5f79293d726bab20600510a85fdd19414aa225a7d92865b5" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="674ceb62c7b17513c8d5592a673e85df6705b9975f6fde2dabd48c5629ad5d95" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="5e2b795590691c6e83c5854cfd8ca1b80e429aededdbf2ffea8a6aa906b40942" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.3.0" rel="lp151.2.21.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
</package>
<package pkgid="5df0c2c8c5201e532075f0de0375e1de5513709a5bb37b9fb768ddea4e8cb0f8" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.4.1" rel="lp151.2.24.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
</package>
<package pkgid="dee26501361d1d687e5e568ba92aa9e2661c9d144c89c51c65fb1054c011969f" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.4.2" rel="lp151.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
</package>
<package pkgid="7ac4fd4193493845a7efd0f5e4453f4fec2ca9dd022ffc48a589636992acfc3c" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.5.0" rel="lp151.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
</package>
<package pkgid="c3de6b04a3e552b4942ea65cabed7dbc1d4b45f8e548effe1f9798139f4577a1" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
</package>
<package pkgid="79177dc4ca5c18f33bda6a163f80d3244e4e6fe61cabca03ec09529af1dcfbe4" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.36.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
</package>
<package pkgid="fb307f2f69f5903310180a7ac26d33b339da60a4920ba3bd4f064758b7cbc77b" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.6.1" rel="lp151.2.39.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
</package>
<package pkgid="88e867701a9b219fb102f80db4e57ea52263f873fef2bc0bea1d316bbce9fb1d" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.7.0" rel="lp151.2.42.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
</package>
<package pkgid="011ab8f2a1d3cb8c2eca09af2fad33e4609fd822341010af8aceb820863dcb8c" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.8.0" rel="lp151.2.45.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
</package>
<package pkgid="fbd8083e5704b5b8b71ea93f736afebf76a506d92e2a7f4e30f2d4228deef2b1" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.9.0" rel="lp151.2.48.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
</package>
<package pkgid="9e63d226d42d6b9b354d3ee811bffe6fa8548970b8499cba6af9bc212d0ae10c" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp151.2.53.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="3ddb1f6316a02d3b725dd424aed93a42e3f7b3e6394f0b043a38a56c1af8520b" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp151.2.57.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="914f451a78d1cc35ec1df321a1f547adc300d582e84caee41b32087e6f836162" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp151.2.61.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="3042327452c38ff23c374a14764d8e04a8653ee0f787b7c5d113761d12ac5669" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp151.2.65.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="74a3da7e02be26ed29fab1c835644a30596d9bc0e8236410be154f8cec1d306d" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp151.2.69.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="e516aaddc0c0fc57baf783a25796a72cf7452f8fea490f8e71f2e3e1bbbf6064" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp151.2.73.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="99e2ce3e482e954a619b322ae45374eab1bbb595348cbad453d5beb00b32f8bd" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp151.2.76.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="b43ab6123cb7a2562ab6f4e33b8ed67e77968d2e494302ddeef4a38f2ca913bc" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp151.2.79.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="490b513dca079970ea2f0628bd2a7ab0999bb9f91100dcb97926c375f078db59" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="df829fd191df7dc70428ddd7764bbe2085b6a0bb858f9e70180a198dd938bfc1" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="f9de92c2fe72f1ea2cab75f3e1971b1ef634bfe4c6ef9ea0996faf08b2249cb7" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="7a4073f0d8ae7f3e0777ec7977184a14be3ee7c34cb0b25dea46786136e02d04" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="9308e0fc133144fd49abde6306529d142817a956c3920c6133266fe6fd3ad018" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="9de6f25e8f08a2a190f61a544716f54e7f27b0df986476b0b6a8f3fc060403f2" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.3.0" rel="lp151.2.21.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
</package>
<package pkgid="a23fe1ed1d26783957b1533b113602937a4318b72cf91693aff6c7ad6b8c5250" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.4.1" rel="lp151.2.24.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
</package>
<package pkgid="e12c1eba12946c27161616af7b614d8a29f0043e43a778cadf3f00aa2c98d3d1" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.4.2" rel="lp151.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
</package>
<package pkgid="b468866ada6d1ff59202e1cb3d5672ba6fd9169afebf4aa80920f4531cb46dcc" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.5.0" rel="lp151.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
</package>
<package pkgid="327e8568d51347cfdd4385742a19e3b573990bc665edd2fb47d0b1d99b1c7eec" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
</package>
<package pkgid="e60af985ebb7774a813508e7a548841376aebd10f681b771562ee39be42617ed" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.36.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
</package>
<package pkgid="f92a52cffddf245bfda4861ea930f842564ac27338f21fe942bf87c9a6e54c7a" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.6.1" rel="lp151.2.39.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
</package>
<package pkgid="3922c0936c2d1d1f6cc0051c475a7633c133a8fd4b6ffc821773449703fe1f9f" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.7.0" rel="lp151.2.42.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
</package>
<package pkgid="1b8d8154d44c1af235a1c7c75c52390303806e114362270b379f8972853f98b1" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.8.0" rel="lp151.2.45.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
</package>
<package pkgid="c68979218b37aa5466fce14bdb38ff81f3969f516e9d8f617721c485bef28852" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.9.0" rel="lp151.2.48.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
</package>
<package pkgid="fe1dff0c19f530dc7d192209270d4ea4ce84ab803c51befcd9f7776acd66de6d" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp151.2.53.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="be12d559f2fa0ed8a62b6b87874c5a703e66d0d87bb09e38d15aafaa382a411d" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp151.2.57.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="14a61ceee0942917c37b1e80d9439db6acd30fd8b216e5e7061acc57a7bdc78f" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp151.2.61.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="d18b614db01968561fdc7818bb63f9b8a2de5253fbecf92ac2c8949745455506" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp151.2.65.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="c61c1f1c33d5bef32d36cb5fded89de7b20318b986b98f3485210aa8d0b9dd4d" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp151.2.69.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="e9c3c25cf51c37f9285f7cc7282dcc568a521bfb2cd217638bb94cad0dd1a273" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp151.2.73.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="33896111809242e9869d560046890855fe0a3bd6b0617d6dd5db07ed3e79ec1c" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp151.2.76.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="3487fca3f92dcb869b6d180daae5451575dca38d49e809aa333d3dced5800481" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp151.2.79.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="1024a691677eec2abe9a1ce0354bebd7de726c1ba066f6cabf32b575a250f00c" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="be9cd5c0609c86d7ba3d8593139fc47942153b3216b1468e9a2b1a68269b7ca8" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="a797eae4cde6ca192f78482ddf77ca7cb7fa818858d128aea6b9e0d10bc0a9ca" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="7a20458a36ac62cb707cf4ae1240dcd214124c0ad1745f11b3e3f0c1401d2b8d" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="6deb7f25e71fa6f31c00c6290b9a1cd03a1381fefca3ca751f8da80123ddea81" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="74e934176fa866a7c7eb0d1b3ba4071f321ed6600adeb2c09253b15b125c3c6d" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.3.0" rel="lp151.2.21.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
</package>
<package pkgid="23380bb678f0b6ca405d6d071df91fdd5f786f791379c26655af28ddecd5694d" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.4.1" rel="lp151.2.24.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
</package>
<package pkgid="153527335fa63f1b0f5f468e2c56a107476213056ad7dbb2cf40696d487b6dab" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.4.2" rel="lp151.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
</package>
<package pkgid="c63a4c58b8a4abdf5c133d218527ceaae31cde6439fafb4b51cf9b82fd09526d" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.5.0" rel="lp151.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
</package>
<package pkgid="4d0cdb227030d47dd581bb9a6262981eb53b0aa6f3194b628cb898f7b65298f1" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
</package>
<package pkgid="f209a63f2a03e158773fecca815a064b18584e6aa30cc72357c35e321bef7c65" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.36.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
</package>
<package pkgid="fe80a95083ce5d1742770f3854c70e118bd547765bf587e2ad991a1d330672fe" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.6.1" rel="lp151.2.39.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
</package>
<package pkgid="b97d5c9a4a581981e242a193704376f0bef1eee766d0dd452ba8e44401e82f9f" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.7.0" rel="lp151.2.42.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
</package>
<package pkgid="e157199cc87658fa0002decf38f26898ca3f644e037bf95caa8d2185cc588871" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.8.0" rel="lp151.2.45.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
</package>
<package pkgid="438284204adf0072ac8ca5c1415a33b80429a27349eea0f5c0b398138614e91a" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.9.0" rel="lp151.2.48.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
</package>
<package pkgid="20bcf8f3b8cdd0a6863ee0d71b977be100c53faed23d7ded8f9b4d16423da8f3" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp151.2.53.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="5abacca2b783bbd1eec076d8aca4e83d3f2500e721e3a073ba736e2d7779839f" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp151.2.57.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="167fa3c9bc9e76b7b5160bac18b93855f4bc1d702f8bb08e9d4ec7fd470edcd4" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp151.2.61.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="13f59783ee2d318a87c2abc975d34a4a454a121f898381e7d6ce6ca4e70426f0" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp151.2.65.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="10fd2be21f9534878b544393399b5778f57c6001452e1fabad5e7ac4e8d9764c" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp151.2.69.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="849e8cbc9a69e9441c4f0c601cd9d2b1b5d9de65edfe4025de76f5c00c71e7fe" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp151.2.73.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="c9995856887f020e22a26e92932a9ed53b279283d1b01cff5568c90b5fb543b4" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp151.2.76.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="db9bd146a5383e65661ef654c0e02307f3a00a2cc1b10901e764fbea6e06e683" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp151.2.79.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="28c0db5b59d2936400d1607d5fc70cbc3940979ca61b9b2b80d0d439d21e4925" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="bd31fe54b71a3a2a8eee05a2945f32bff73ed44aa4d9ce9f39a885608fd64f8f" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="65f91def7c9313f7cdac9befee9681b61ae9e1283438b00857e9276c1b6bccc7" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="43dc8fa27834cecb2acf7d11dd614e4de23092b05a94e6196f27c917901981fe" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="ca627ba1bd3d6a08e0ff79840495714f53298a315166d873c46351fe092d543e" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="17d272edbeddbd235306b190924249a8bbbaddd6a7ea2456e3f8b39345278f8c" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.3.0" rel="lp151.2.21.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
</package>
<package pkgid="e5f89ac76a74a7cf40379926fc7cf7c1734245145bf1134e82b0f08bead42c85" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.4.1" rel="lp151.2.24.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
</package>
<package pkgid="7caf15f4f9d11bc32248236de60938503e7c2003a3e2a4affec5b5ddde8c991a" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.4.2" rel="lp151.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
</package>
<package pkgid="c9f3f8f0588e6f87c467acb35fb60274675503bda110f6c5c68cfb2d41345fd9" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.5.0" rel="lp151.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
</package>
<package pkgid="0a22b103375529a6277228f43d97e72caa29f927dd5b96f3b208162cd6706933" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
</package>
<package pkgid="275523f4d29632ec7195d5983920d1c799bdef8b5386c0ff4f899d3cb0ebd182" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.36.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
</package>
<package pkgid="df5c39d03d45509d516f6fa69a3abdf0961ae17b07eadf9fd0b124a5038a23a8" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.6.1" rel="lp151.2.39.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
</package>
<package pkgid="34c62f58ddce67ca481c69cf14844a56b1a7df5e79447c2244d50d42e6f63f73" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.7.0" rel="lp151.2.42.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
</package>
<package pkgid="e09b43300f1bd709b7b5143044c2d9f4ac2965e0a28ab480dd6784fa8ae996a9" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.8.0" rel="lp151.2.45.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
</package>
<package pkgid="3ee0813359461725bdee6bcb5d5ac9195f4f586aae21e1d82433d645abee6265" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.9.0" rel="lp151.2.48.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
</package>
<package pkgid="88c014b0771e092742e1e4798f8826a8505749f63149777f869acaf120789941" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp151.2.53.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="e36f12197f244d017e8b758c2335f727b22a82f349f1bd7be89c8d8d48535c9a" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp151.2.57.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="8679435d4a34f578e642a40a11cc83cf7fbff2e480841b74657b4322849d5564" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp151.2.61.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="dfa3e8b74b46477726ae6db60d8f22fd2af635f18ad1f4ed254fafdd184878f6" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp151.2.65.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="a6e94f389d18677db9b7eb4491e87d720be664d1dc13f66b74ae0f0115e8a8c0" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp151.2.69.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="68a00544f194cd71b5b7a6a8f4380c324e054e2c54092bacad80c5d72e045e35" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp151.2.73.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="f7f1d9ee577f46661000000cf4431d07751e5c835c93a3ee592e4acca9a89ce4" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp151.2.76.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="83982bd404113261699d8d59ded00baec25bcea0cae8359e603739255712f072" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp151.2.79.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="c6f3438bc42bdeec687f615437a4e4a477887f14a12ddfb782829bbff32fa5ce" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="1fbbd8c77bc1108e42b3b8a43e418a270df9f8cb220cd37e7e34fa8efc25f98b" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="cc98766974b91cb23eb75520cd3d671c918dfbeb21c6d87e61946c5ec99bf326" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="411e782f66af0533b03a391b016c9131f12a58b0be485641392af35bf391c9ae" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="f73cc782015c3f46544b39ed79fd301ba712eff1facfc1b926dee452d4400b8e" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="84ce73fee3ecac9a555747571acce9e94dde82af5a7076ef0743363c2e7700be" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="780645c8af77fee6055148749fe520362acde8b00068d9db14d057e8d7316718" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.1.1" rel="lp151.2.13.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="790da49a0f0dde97ef8a4ac518b781a6f84bf4266924b1c8821efa83f7de1596" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.1.1" rel="lp151.2.13.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="de9360339ff79463d83bd4f69b1900cc5c1bca88f2a6f1d38cf840ecb84c77ff" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.10.0" rel="lp151.2.44.2"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
</package>
<package pkgid="459e6f0665c7d76bb9fe58dc066bd1d41e7367f7293b3fcc7fd74f56c9352ae9" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.10.0" rel="lp151.2.44.2"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
</package>
<package pkgid="05e978852e6244abee5576ec181ab60e03740f9305780be1fbe87c5ec0953e38" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.11.0" rel="lp151.2.47.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
</package>
<package pkgid="58641a4f48d827c9f781127c6d01746ef7330f8fab33158bd065bd8207842c90" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.11.0" rel="lp151.2.47.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
</package>
<package pkgid="4e0aef860773823693348651098900fd599c8f52c781e88cba0ef82d3ed1a8e9" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.12.0" rel="lp151.2.50.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
</package>
<package pkgid="5b3a3f967d22c045fb52ce5723b0e4cc9336c58c4574e08f063871490a7d0cef" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.12.0" rel="lp151.2.50.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
</package>
<package pkgid="2f18e45c693052012fa199b7e159b885cc6d55b3dfc968a4ce5799050b069655" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.2.1" rel="lp151.2.16.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
</package>
<package pkgid="ddce4cf6e130826b34a042f45c450859143b3b7f5fe324bda87e7fe7aeafc8de" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.2.1" rel="lp151.2.16.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
</package>
<package pkgid="3c867a1f8f5aeaed4403cbdd30d92a6038002e19ec689125e2f264642e964a4e" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.3.0" rel="lp151.2.19.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
</package>
<package pkgid="ff173453dd22e1cff2e18204f1736945b890af8d703fd58db47bb056aeb9e48c" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.3.0" rel="lp151.2.19.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
</package>
<package pkgid="bab29ebc0709d4908bfd7daf03ed30ef93b9339ec9d3ef77c7b8349f44f643f5" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.4.1" rel="lp151.2.22.2"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
</package>
<package pkgid="6770491520c091dd996611cb359e9f566df1299a6135e6f814592bbaf340994b" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.4.1" rel="lp151.2.22.2"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
</package>
<package pkgid="4b7ed71b040da3291a635bb6816c3e1a3c396405da68451693641aedffb25e2e" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.5.0" rel="lp151.2.25.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
</package>
<package pkgid="e0d5829276eeabf8425e8971341469f701d4c3ef417f06f2677dae042a7432fc" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.5.0" rel="lp151.2.25.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
</package>
<package pkgid="d0331d73baa1ca83d426ec5d2ac6ccbeb93c3b3437432b5e8bed9d568c71884d" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.6.0" rel="lp151.2.28.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
</package>
<package pkgid="81bbeb136c41ffc5ea560af73789b27aa379de3289f1d3bc4618e82bf93c3faa" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.28.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
</package>
<package pkgid="0d6533d9ba396ce58a6a10bdbebda486e3500c63525ed77102e2060274121c7f" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.7.0" rel="lp151.2.31.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586433600">- Mozilla Thunderbird 68.7.0
  * Updates to MailExtensions API
  * Various improvements to account setup when connecting to an
    Exchange server
  * Thread collapsed when opening news message in a new window
  * Fix Addons not automatically updated to compatible version after
    upgrade from Thunderbird 60
  * Updating addons did not prompt when requesting new permissions
  * Extra recipients panel not keyboard-accessible
  * Accessibility: Status bar was not detected by screenreaders
  * Calendar: Invitations with embedded null bytes did not always decode correctly
  * Calendar: Cancelled events didn't show with a line-through
  * Various security fixes
  MFSA 2020-14
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203,bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
</package>
<package pkgid="00066ca47decad97ec6a512ce99ba4c7085940876a328647ee1f955f7fd0102c" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.7.0" rel="lp151.2.31.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586433600">- Mozilla Thunderbird 68.7.0
  * Updates to MailExtensions API
  * Various improvements to account setup when connecting to an
    Exchange server
  * Thread collapsed when opening news message in a new window
  * Fix Addons not automatically updated to compatible version after
    upgrade from Thunderbird 60
  * Updating addons did not prompt when requesting new permissions
  * Extra recipients panel not keyboard-accessible
  * Accessibility: Status bar was not detected by screenreaders
  * Calendar: Invitations with embedded null bytes did not always decode correctly
  * Calendar: Cancelled events didn't show with a line-through
  * Various security fixes
  MFSA 2020-14
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203,bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
</package>
<package pkgid="1fbaae84fd0004c4e2314c2f133c3a823261e155e703f6582c20d427aafcf09b" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.7.0" rel="lp151.2.35.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
</package>
<package pkgid="c60176aff313d8c7282a1513b088ecf22e8bfae9803116faee9aa8aa4e686f1f" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.7.0" rel="lp151.2.35.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
</package>
<package pkgid="3558f92eb14ef245200c061bb97c6fe4d390e3eb63a10905ef3960c1984023f9" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.8.0" rel="lp151.2.38.2"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
</package>
<package pkgid="601771cde0daa56345a72ca9da5dab07c9818800f711d37a50df80c2407c2f47" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.8.0" rel="lp151.2.38.2"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
</package>
<package pkgid="ddfffaa36675a1ba9cb028b0854a8a357d13eecc8e7ecc36836f04e27d33f04a" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.9.0" rel="lp151.2.41.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
</package>
<package pkgid="cff79180d9f897f2503cfdd13a4f569dddefbcd5bd9d6c9d7b3ba304f40473d6" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.9.0" rel="lp151.2.41.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
</package>
<package pkgid="c0bf96a759c822b254202cc2c8db07a0c3343f5beb1cca7260ebd60d1542af44" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.4.0" rel="lp151.2.53.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="b7c636e0b91cb96d655cb6ee1178604f9c914b138b8a06e32b3ba4caa84c89ee" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp151.2.53.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="2fafb703ea97c677090b8d74f7a79d472c7fb9469c1ef2cdfeb87d4836da944e" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.4.2" rel="lp151.2.56.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
</package>
<package pkgid="4cf35ce00b2c8c28fbc04a7aac05c3ea5ca00efab1813bcdac54b29520024ede" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.4.2" rel="lp151.2.56.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
</package>
<package pkgid="2601a4475bb103d0db69d34ce620b7dcdd7a3b9bea314954eb96a22f234482b7" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.5.0" rel="lp151.2.59.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
</package>
<package pkgid="76325e932193ddac9632a4bf32ff27e64be1b1d1838b2f93206fd545c3145aa8" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp151.2.59.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
</package>
<package pkgid="ff03d2222f05fba3bf124169f74a34fd1c74c50acce2422c4d21bb491d1b5b41" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="64b87078d36aaaa0a984f6420f7cbae011f993ed5ddea33b52d5799735a5f982" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="e569ef43a3eb78f0c2e83338e6a830e2b60eaca60b42589e89e1929ce01181aa" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="e14284c5080124820c2028092e6662a83dfa659dee9004dd2fa8936ddfe4a5a0" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.1.1" rel="lp151.2.13.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="8b85a79e17fb7454384d1cfd5061249a39b779bd2321a2891465516be53aa841" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="465c212728df4068ef3283dcbbfa7ec63e136cec281816fba46f448d47f4b19e" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="30a5a4c4470534099c8f061ee686eb17e17591e57320309b2272a1850b5e0549" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="275a69357ab4c15af8e0b01ae55a492e531706304c840e97fe401764277f2363" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.1.1" rel="lp151.2.13.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="3c4b12edeb3953d3ff3d21f0289ac86ed19d6d7b72cf4927eae8c11e08dcae4a" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.10.0" rel="lp151.2.44.2"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
</package>
<package pkgid="490c1718d2e89357fd938a879d2f4b68fecd1bc38e9adfceb553b2ccbb32b800" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.11.0" rel="lp151.2.47.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
</package>
<package pkgid="b9850ba478595bc0f76d3c7392fe3337202faff728b8ac459010f3c598c70e48" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.12.0" rel="lp151.2.50.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
</package>
<package pkgid="e347ad6663303eab251ac10fff59ed0d49d27f8c9bca980d8d3320f75186ab52" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.2.1" rel="lp151.2.16.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
</package>
<package pkgid="333a95891d8a056f618dfd750aff67e1140b86d7261fc6eba5acf5c0dd810699" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.3.0" rel="lp151.2.19.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
</package>
<package pkgid="36d84cf9e30f5a3ce9b3c2e6423564d299a815ebdbbd547d100963ae7acef287" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.4.1" rel="lp151.2.22.2"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
</package>
<package pkgid="c1bb6857d22f2f97a29ffa8b0222b3a7afa9ce4ccccc94213c8cba40d67ec5af" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.5.0" rel="lp151.2.25.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
</package>
<package pkgid="3b645b179e7cf116ebac7e41802c784c2802ba22372e8ae8e5d2e766eb2606ae" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.28.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
</package>
<package pkgid="50a7797f0ac039eb443a266af2b51a6d9acb3064fd70b0fb26fa4e827e8ef72c" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.7.0" rel="lp151.2.31.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586433600">- Mozilla Thunderbird 68.7.0
  * Updates to MailExtensions API
  * Various improvements to account setup when connecting to an
    Exchange server
  * Thread collapsed when opening news message in a new window
  * Fix Addons not automatically updated to compatible version after
    upgrade from Thunderbird 60
  * Updating addons did not prompt when requesting new permissions
  * Extra recipients panel not keyboard-accessible
  * Accessibility: Status bar was not detected by screenreaders
  * Calendar: Invitations with embedded null bytes did not always decode correctly
  * Calendar: Cancelled events didn't show with a line-through
  * Various security fixes
  MFSA 2020-14
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203,bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
</package>
<package pkgid="3a83d0dde9c06ab39c59ba72146afbd362f6162e77b5f6ccc8122d80da6cdeb2" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.7.0" rel="lp151.2.35.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
</package>
<package pkgid="1fdff0d75c485b3f7446503e2dc7ee31c91cab304d660d1272cc11bebc718cd9" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.8.0" rel="lp151.2.38.2"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
</package>
<package pkgid="02862af2fc2acacbd18fe01f15b364972f8890e523ef9b21f8cf5c96ea984b50" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.9.0" rel="lp151.2.41.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
</package>
<package pkgid="4c1c9ef39e74741501e0ee6266d55b32eedce1f2b80ecab9d111a9ac8a91e31d" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp151.2.53.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="cec8dcc935de2088644897e65442c291212d5e26aeaf5f95a8ba3203c0367cde" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.4.2" rel="lp151.2.56.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
</package>
<package pkgid="de08e6f6b6d22ee68da9cc97c7b601612128990f47b0d527078b34da4f69e4c2" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp151.2.59.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
</package>
<package pkgid="06c2b7c4a4dae7c63a87a2e3d40b9cf3426906fbe531cf7b44d65f49266f9409" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="5415e5ce7d20b0f1bc4bdab33c3c00ded514a635fead2df1857466e185f6ea38" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="980f48498d7888ca41d3d8fb4b7c12c3b58724a2e2f57fecb3ad71e086114e45" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="5ca1ec04bc8f2142f88e400e038b59e9f39edf6d0f54eda9a6086f17f774653f" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.1.1" rel="lp151.2.13.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="74588922b250061e793cc687c37b652404c4ff13f862d603c5e63b2be90ce78e" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.10.0" rel="lp151.2.44.2"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
</package>
<package pkgid="d30a48d62b1411fbd827729cbd58858d187d535ecdd89be58ab64203f13b6437" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.11.0" rel="lp151.2.47.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
</package>
<package pkgid="f02fe733466b65febc40d2746374e8d2d670916c663bfa2c865832712cf9b936" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.12.0" rel="lp151.2.50.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
</package>
<package pkgid="937d92247fb421c7fd3665b061d89c3e8e521796c0fe450d98c7abde7c9ee48d" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.2.1" rel="lp151.2.16.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
</package>
<package pkgid="351e505745ff194833160082b4da2fd441050820b0289e9bdd61b10ddffbb800" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.3.0" rel="lp151.2.19.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
</package>
<package pkgid="fa45872b83bb9ec857e6d7bd79d5a1b14dc3c3a6b3fb7c403794c4e32e7c08a5" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.4.1" rel="lp151.2.22.2"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
</package>
<package pkgid="4bd6b45ef10bad3c3f4b3dfccc8007b2e05a6ba6288c05b28c87afa5b9acd31e" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.5.0" rel="lp151.2.25.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
</package>
<package pkgid="b0090e6f226cad0027ac84a7eeb453c656f68556ec20dd69223cecb3c6f551b7" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.6.0" rel="lp151.2.28.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
</package>
<package pkgid="1302e43f4c54764baeb1db264a6baba477a4ce830f3e51cb6b92d3c58db22d70" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.7.0" rel="lp151.2.31.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586433600">- Mozilla Thunderbird 68.7.0
  * Updates to MailExtensions API
  * Various improvements to account setup when connecting to an
    Exchange server
  * Thread collapsed when opening news message in a new window
  * Fix Addons not automatically updated to compatible version after
    upgrade from Thunderbird 60
  * Updating addons did not prompt when requesting new permissions
  * Extra recipients panel not keyboard-accessible
  * Accessibility: Status bar was not detected by screenreaders
  * Calendar: Invitations with embedded null bytes did not always decode correctly
  * Calendar: Cancelled events didn't show with a line-through
  * Various security fixes
  MFSA 2020-14
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203,bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
</package>
<package pkgid="953932a1bb2e224f4718b4300aee4a8952b8b0db2e036c1f8c8b1c9844d6a2e3" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.7.0" rel="lp151.2.35.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
</package>
<package pkgid="dd2f60568a20ca94c143b2ac868a9ea890d86bd56b1eecaaaa3774af1d83863c" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.8.0" rel="lp151.2.38.2"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
</package>
<package pkgid="0814631781230a8bcde95a868661304ca241de5bbdbed78091dc4ed42121bbbf" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.9.0" rel="lp151.2.41.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
</package>
<package pkgid="a28c3bff9491facf4fdcd33dc41c5af3db013ea3990ae44ad71fcbb9a3868767" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp151.2.53.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="601217c5e32fc9c00077ca7cc16ba687ee0477d0e4d993a5b34ff8aaedafbac3" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.4.2" rel="lp151.2.56.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
</package>
<package pkgid="9b20b3cbe162bf14c986780a106baab227d7739911e6393183289085371d26c2" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp151.2.59.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
</package>
<package pkgid="e6f07e54afc825c65e4507b5105d6e3d8d3f454376da719c44c0b19ab57e174a" name="NetworkManager-openvpn" arch="src">
  <version epoch="0" ver="1.8.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="8607808dd401e2f7c84bedbe52b9c8367c239120827f7002bc8a310f56282d33" name="NetworkManager-openvpn" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="2730087e85e3e7d718c361d55592f4661dc8cd5d9124c630b58d5f2a415c2ea5" name="NetworkManager-openvpn" arch="src">
  <version epoch="0" ver="1.8.2" rel="lp151.4.6.1"/>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587729600">- Add NM-openvpn-ensure-proper-termination.patch: service: ensure
  proper termination when waiting for processes to exit(bsc#1127794,
  glgo#GNOME/NetworkManager-openvpn/commit/c303f0d1).</changelog>
</package>
<package pkgid="79255ef13f8bdbecb057b7bc0555528cecd1a3d24dd155fe4f7ea60167b08e09" name="NetworkManager-openvpn" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.4.6.1"/>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587729600">- Add NM-openvpn-ensure-proper-termination.patch: service: ensure
  proper termination when waiting for processes to exit(bsc#1127794,
  glgo#GNOME/NetworkManager-openvpn/commit/c303f0d1).</changelog>
</package>
<package pkgid="00245319793593edb53b060ab972e4bd3b7140d7d773541fd3d2627d3a758646" name="NetworkManager-openvpn-gnome" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="2f728108b197353fd3aa7f6286f3037b876921fdcd04404600a694f01b10f125" name="NetworkManager-openvpn-gnome" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.4.6.1"/>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587729600">- Add NM-openvpn-ensure-proper-termination.patch: service: ensure
  proper termination when waiting for processes to exit(bsc#1127794,
  glgo#GNOME/NetworkManager-openvpn/commit/c303f0d1).</changelog>
</package>
<package pkgid="2559646f0492b36be01d86d437f6c44e430daeebabb5eb0b50feac57ba9521dd" name="NetworkManager-openvpn-lang" arch="noarch">
  <version epoch="0" ver="1.8.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="280f249151ee1526aca56a40b916bb85020d3523b0f9fc3e7b4f9d3400444e71" name="NetworkManager-openvpn-lang" arch="noarch">
  <version epoch="0" ver="1.8.2" rel="lp151.4.6.1"/>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587729600">- Add NM-openvpn-ensure-proper-termination.patch: service: ensure
  proper termination when waiting for processes to exit(bsc#1127794,
  glgo#GNOME/NetworkManager-openvpn/commit/c303f0d1).</changelog>
</package>
<package pkgid="d47ba39cdabf2fe22b6f26cfbd8fa597221a34152b0c7f7da3064ecf5f7b395a" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="c2dccecc11dabe5a03d84b7282c6b667e674afe3fecbc717e5b4ff1b63b97ce9" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="ffdea299f2e70f29dd3ea7494bef89d1bd259507269d64634c5d8fc8d1cecf3b" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="12f782e3b41f712b995038c8960e1eb368458c09025f666a00178407fa88ed0b" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="39f5c96109900a674a66564d03930cd07f88db196465ed61088bd9288aaad027" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="5a674e7a5904eba96ff4e1aefc0841d0f93a56d6143c12fe2a7ed9ef4f625b1e" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="aff91775777a5218429dcf1affffe04429fbbe2c419f2b77a048ac4904102c84" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="ff938b3f9e9092e758b13996a56db25d48a0f47f9ebc253805f5a383c424d10d" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="f6dece0ce788015cd0b7c0a54fe9239d31e6310af6d4eea1007ec8df2f9dd25b" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="d3d9619671da55cbd281589ece5edcfbc479e8a8d2b42b8a34d505869c4e3136" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="384b956c4efc4c00f1656734b0707708abf4119d0e3ef16c1b914028dbc01d00" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="03add7b3deb0cd2d8846b84eb8d9be0fdc3c2a87baee04fa3873d9f1c4d228ac" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="6cd9aec7a2c16ad055677ded826c8cdf47bab9cb62db198ab2c3ec56e6e15f96" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="336b32df6b283bd54044aecdd6934f1980f877186d198c615a4af94143d33d72" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="3173c9e63394af201fdbdb18da01940bb075629e6b0aa576ccc8fc26e66e1fcd" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="0706da34751c6a18a1f4a0c1a7178276d95c539c8ccfe7f9f99cc5ee57109349" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="f4d8649e597a171ce57db66684598ebea729c337345940dd1cbea7911ed8e510" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="abac7f4ae0c962ccddec13a92bd04f9d8e20a5da39963abf18ba19d89e49e8b8" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="cba251ef83f1a8bd150047b9c98ee0600e870c4820a6ae9e990d7130e7ded64f" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="6a3777d55e435d44e71a887ed7c2cba650932452e2ad5261949a6ead4d8f4b6a" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="5939a4a6b82c275d0a2feb7e81b4f98269408d605b0fb8900c5bb1aa148ffd1a" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="600cba2184e441581cd41225910a3e16210e9309056ecd018310f31bb5460510" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="83daaf9866d0a2467fb77240b0090959b24d36c2fec6ac8f228c01578921007d" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="62c24dd6c8e1ae1a3d484c46c4dc7b6d1b9ec323e9cb8746d7cf1acaeed96e70" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="9bafd9beba9b594e2d391b18390f0ad7a6e153007fdaa356b61eb8ee2dc4d64b" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="620c362dbc3c3416281b329b09ff00e0862653fa29354949e21a421e31420587" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="03b425a375d8f05e6a8470f2e3aaf67e5589851c4c22b7d7bcae37706acfea0c" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="6bbe7c103e120304621f3b05cf45b6f2e9e27adf95984f346d9156f0658408e8" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="3882072fce0fd9bfbd4175b87f63eb3ce8f4523c68c57c3c378fcdc29763cdeb" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="26da1afccb6af52e462ac9f4fae512a3de4327bd4275d99e8f32c85dcc5704ec" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="1fe4167ad94c5141942fe80688caa2b6f52bc1c74e3cd9ae43f0144642db7f64" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="716476c3713918d4ca41b08bae8e80ef123b87d8e3c736552dafa4296c4077e4" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="fff72b02861e41d37232965f2829460e6242db60bb802e846e19805236122d01" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="3e594e013d052e6aecf274cdd811c0cf730da09ba8fffe0ff4b58fc7c7cb0de5" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="e4858bd10164edfd573831205c3bc5694c62c70f7d9ac88fa84864a7dad20ea2" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="6c0b23fce6c7a832fad5343751640a26589c3ec2908234a30761209b50483426" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="df559d0f012333d73cf0f6a649862ad437d8874bb529ac77aed673cf322491d1" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="dad38fd3a3ada78f1dd32a38509b89f09fbd25bceb74c4e3d4a262c1ba8214f2" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="1d07ff732f1cfa7dde89298663436d79c55a97a1ae557336222a8d33e2afd064" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp151.8.9.2"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="249302eb094a348500455c1d244a4889dff9cd15f302b65c33dff154db484b32" name="QR-Code-generator" arch="src">
  <version epoch="0" ver="1.5.0" rel="lp151.2.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1575374400">- Initial commit, needed by libreoffice 6.4</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1575374401">- Add patches to make the stuff actually installable:
  * 0001-Do-not-append-to-C-XX-FLAGS-but-just-set-them-if-not.patch
  * 0002-Make-use-of-fPIC-parameter-when-building.patch
  * 0003-Generate-both-shared-and-static-libraries.patch
  * 0004-Create-install-targets-for-C-and-CPP.patch
  * 0005-Rename-cpp-library-to-qrcodegencpp-to-avoid-conflict.patch
  * cflags.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579608000">- Drop not really needed patch:
  * 0001-Do-not-append-to-C-XX-FLAGS-but-just-set-them-if-not.patch
- Fix build on SLE12</changelog>
</package>
<package pkgid="c491eab534fe16f389d931ba256d28eb41da15f0301a6c25e4853ae0d0dba615" name="QR-Code-generator-devel" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="lp151.2.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1575374400">- Initial commit, needed by libreoffice 6.4</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1575374401">- Add patches to make the stuff actually installable:
  * 0001-Do-not-append-to-C-XX-FLAGS-but-just-set-them-if-not.patch
  * 0002-Make-use-of-fPIC-parameter-when-building.patch
  * 0003-Generate-both-shared-and-static-libraries.patch
  * 0004-Create-install-targets-for-C-and-CPP.patch
  * 0005-Rename-cpp-library-to-qrcodegencpp-to-avoid-conflict.patch
  * cflags.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579608000">- Drop not really needed patch:
  * 0001-Do-not-append-to-C-XX-FLAGS-but-just-set-them-if-not.patch
- Fix build on SLE12</changelog>
</package>
<package pkgid="6f1e0c206ac0e2792e297396ea90eafe36e5d694f555870bdc2eb0528040f059" name="SDL" arch="src">
  <version epoch="0" ver="1.2.15" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- USe OS byteswapping macros that are optimized for all platforms
  directly by GCC.
  - DO not use dlopen to load libraries that otherwise can be linked
  at build-time, this is a _very_ bad idea, starting with the fact
  that rpm dependencies do not take account of dlopen and will
  break profiling/debugging etc..
- SDL-devel now has strict requires, so it will only pull what
  it really requires, as it no longer requires metapackages, it is
  very likely that some packages dont the chain will fail to build
  those must be fixed in the respective spec files (not here)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370692800">- sdl-lfs.patch: Ensure library is built with large file
  support/ 64bit off_t in 32bit systems</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call
- Optional signature verification in local builds</changelog>
  <changelog author="jengelh@inai.de" date="1387281600">- Add libsdl-1.2.15-resizing.patch: resolve an issue whereby window
  frame corner resizing emitted no resize events to applications
  (bnc#855639)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401019200">-  Update SDL-lfs.patch, after a recent verification I found
  that something is not including SDL_config.h (config.h)
  therefore not using large file offsets.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413115200">- Drop esound-devel BuildRequires: esd is really no longer the way
  to go.</changelog>
  <changelog author="jengelh@inai.de" date="1418904000">- Remove gpg-offline leftovers</changelog>
  <changelog author="jengelh@inai.de" date="1418990400">- Drop old soundserver support (also arts, after esound).
  Remove --with-pic, building defaults to PIC anyway.
  Use pkgconfig names to slurp in packages.</changelog>
  <changelog author="jengelh@inai.de" date="1420545600">- Avoid bs_sched computation failure by expanding %power64</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- libspe2 only exists for ppc and ppc64</changelog>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="472e700f5aeccaab3b0064c7243a9a00c69214c948db2f305a37c2f705db5015" name="SDL2" arch="src">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="836e99524a82a19209cc86709d34f5fa3a49ffba33fa71bb1941c99f1a24f393" name="SDL2" arch="src">
  <version epoch="0" ver="2.0.8" rel="lp151.4.6.1"/>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566820800">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).
- Add CVE-2019-13626.patch: add safeguards to the wav parser to
  prevent crashes (boo#1142031 CVE-2019-13626).
- Drop CVE-2019-7572.patch, CVE-2019-7574.patch,
  CVE-2019-7575.patch, CVE-2019-7577.patch, and
  CVE-2019-7578.patch: these are handled by the new code added in
  CVE-2019-13626.patch.</changelog>
</package>
<package pkgid="99f437c7ed194507c0fa026a118f1bb42b3281d57cd6f08a8cc5b67e47b96cfa" name="SDL2_image" arch="src">
  <version epoch="0" ver="2.0.5" rel="lp151.2.5.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_image package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new upstream release 2.0.5
  * Fixed TALOS-2019-0820 CVE-2019-5051
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
- Not mentioned by upstream, but issues seemingly further fixed:
  * Fixed CVE-2019-12218 boo#1135789
  * Fixed CVE-2019-12217 boo#1135787
  * Fixed CVE-2019-12220 boo#1135806
  * Fixed CVE-2019-12221 boo#1135796
  * Fixed CVE-2019-12222 boo#1136101</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566561601">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="17275eab0f6fff3d0d459f08dff4c07359cf8326f54b8922a97cd4be050ae1e2" name="SDL_image" arch="src">
  <version epoch="0" ver="1.2.12+hg695" rel="lp151.3.3.1"/>
  <changelog author="sndirsch@suse.de" date="1197806400">- fixed BuildRequires for SUSE &lt; 10.2</changelog>
  <changelog author="prusnak@suse.cz" date="1201262400">- fix buffer overflow in GIF code (gif-overflow.patch) [#355864]</changelog>
  <changelog author="prusnak@suse.cz" date="1201608000">- fix buffer overflow in LBM code (lbm-overflow.patch) [#355864]</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files, useless without
  SDL static libraries too.
- fix -devel package dependencies.</changelog>
  <changelog author="prusnak@suse.cz" date="1242734400">- updated to 2.1.7
  * Fixed buffer overflow in BMP loading code
  * Fixed buffer overflow in GIF loading code
- removed obsoleted patches:
  * gif-overflow.patch (mainline)
  * lbm-overflow.patch (mainline)</changelog>
  <changelog author="prusnak@suse.cz" date="1242820800">- follow Shared Library Policy</changelog>
  <changelog author="prusnak@suse.cz" date="1243598400">- removed VisualC.zip, Watcom-OS2.zip, Xcode.tar.gz from upstream
  tarball [bnc#508084]</changelog>
  <changelog author="prusnak@suse.cz" date="1254916800">- fix provides and obsoletes [bnc#544957]</changelog>
  <changelog author="jengelh@medozas.de" date="1261224000">- add baselibs.conf as a source</changelog>
  <changelog author="prusnak@suse.cz" date="1261396800">- updated to 1.2.10
  * Fixed bug loading multiple images
  * Fixed checking for IMG_Init() return value in image loaders
  * Added support for uncompressed PCX files
  * Added IMG_Init()/IMG_Quit() to prevent constantly loading and unloading DLLs
  * Added support for ICO and CUR image files</changelog>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_image-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="pgajdos@suse.com" date="1346241600">- updated to 1.2.12:
  * Fixed regression in 1.2.11 loading 8-bit PNG images with libpng
  * Fixed loading 8-bit PNG images on Mac OS X
  * SDL_image is now under the zlib license
  * Added WEBP image support
  * Fixed compiling with libpng 1.4
  * Added Android.mk to build on the Android platform
  * Fixed loading HAM6 images with stencil mask
  * Fixed bug loading 15 and 16 bit BMP images</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- Disable dynamic loading of common libraries, this
  is a bad idea to beging with.
- Cleanup buildRequires. metpackage xorg-x11-devel is not required</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list
- Enable WEBP support</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new snapshot 1.2.12+hg695
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
  * Fixed CVE-2019-7635
  * Fixed CVE-2019-13616 boo#1141844
- Drop CVE-2019-13616.patch (merged)</changelog>
</package>
<package pkgid="ac5961c6e2199683fed39cf5283e2a4395239729f13750813942fb55a5e5b848" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.19" rel="lp151.2.3.1"/>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
</package>
<package pkgid="9d872c4d5684ff2a69519c49612a8d2e7a60113dabc3160cba6cd7f0e69728f9" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.19" rel="lp151.2.3.1"/>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
</package>
<package pkgid="f6eaeb97996b73981d8d345281e07c05677b6a422246c4ad90ec582b99b2095a" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.20" rel="lp151.2.6.1"/>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
</package>
<package pkgid="23de2eae19c54caa9b826304b30aa06a36b2c38bd001415fe1ab8062c54cb517" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.20" rel="lp151.2.6.1"/>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
</package>
<package pkgid="efa19a5ec87a7beef3f86e107db2f93fd5dd4f22652ba4770c6f7df56f6b82e4" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.22" rel="lp151.2.9.1"/>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
</package>
<package pkgid="5bb37ffc9e49e98415ce8256e2eec2b155105cd31eebea9ee2fe351b72e34955" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.22" rel="lp151.2.9.1"/>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
</package>
<package pkgid="fa7aa4c04add6641cdf65ed9b1d345f1efdea19f38b7e925447a619734cf8c0b" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.25" rel="lp151.2.12.1"/>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
</package>
<package pkgid="c903f73a33e51dc8b7e99a3e8f5dc20f99ae4ba0895f11d3f9d4da3fe2969e16" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.25" rel="lp151.2.12.1"/>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
</package>
<package pkgid="c78201570a8319a8ff2e28812b7765739c8c6cc3393c80c4f30d35527ed02d47" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.28" rel="lp151.2.15.1"/>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
</package>
<package pkgid="1eb8836165b5e89135ae5669f7af9ef27f4f994a00b6224513c6cf8c2be580d8" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="lp151.2.15.1"/>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
</package>
<package pkgid="cbdb493e32e6627d81fcee903b68e5113f6b2020d2087a828a43e8f1b9db640e" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="2bd52e8266084be721b1a71fc9ebc83f31edef80c4b3a4e3b81ec0504f555472" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="1cfe8ba25c11c99ab3fc71fe8b25422c4d164a6a1fb8c7f7b1a4d921659ff1d4" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="1d630d54de5f5c08dcc63ccf8a16cbb88881a8812f85dcff97fa0d48be9b07b0" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.15.1"/>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
</package>
<package pkgid="78fe16cd9b0a788bceccb312c65091b6f2301fa39a05717018a0041b1c491ac5" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.15.1"/>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
</package>
<package pkgid="d7a2335b58760b576c5031a478812bb90e490b6c33268f65f7bdb11c232bfe66" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.15.1"/>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
</package>
<package pkgid="ca1e8b348dba6758c00cdc315b804957c9487d1cec59974fcf655fb42339d791" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.18.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
</package>
<package pkgid="66d072aa3f65fe3d22ed8207dadccbe1019f7b1f7cb67110c68b23c224a7260f" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.18.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
</package>
<package pkgid="eb121dd2e6e22bdb66c04e920072bdd4b6f936c19d6d6f16c61ae91979dba09b" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.18.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
</package>
<package pkgid="443835b0062ed3b20b1c5b246594e06591eebb7b6f0c322cae4c16154985edbd" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.21.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
</package>
<package pkgid="d7121bec947785ecc17e7ed32fbda94b7eed41e9f31e78d4cdbdcea6ed656992" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.21.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
</package>
<package pkgid="dd4aa09d40955d15b7fa4de8017b9ff7ba239873cd9ee2df24bcd1d2bb78f74e" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.21.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
</package>
<package pkgid="1a22b3f65a5ad8e06185eaaffc512b40e2a32abe4605f4e15444f853ca8bfd85" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.24.1"/>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
</package>
<package pkgid="e1ef5afc66615d4bff617a7e62a907b2fd32a8131c3fe34d17e69d4d72ba1c99" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.24.1"/>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
</package>
<package pkgid="8f85edb7c1e7f976cdd0e15a21143190df8fcc9bc18493bb4d54016eaea22774" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.24.1"/>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
</package>
<package pkgid="c152ef7fbc00e61d18446bdfac837eea9205cb94b286a5b2d47910474a0909c4" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.27.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
</package>
<package pkgid="922e6faad3569227b88ad7e250d7d9947b2fe9e475279a66bfaf4801fb6d8cf6" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.27.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
</package>
<package pkgid="07c8fd6de51b2d5d9dd9ea1b75dede983dbf6c571b5ba53103a931ccece717de" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.27.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
</package>
<package pkgid="cea51600b38f6708dd72f75ecbd831ed8caca56334677c7df8e13e7d6dbe0a9e" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="657e7a3151a669cd692ab6c56ad7fdee794adab8158d1996c89fe6fcfd37ee6c" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="41513e22aa900d7cb80f0976fafa4c1fae33bcdcc8f62a898858bca2b9d56a96" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="6b15ccaed4179b72b5c0840c23cfe8e131c5ba93f184f65d18bb95a2e443dc4e" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.30.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="fee50b10b36a23aab84bb32ef47b2723f28b3376767008c42e28b9589e1f691a" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.30.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="26819f412f6f62a32a263e74cfe82a1daab0bd75bb82f69f8f2049f0af147acb" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.30.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="4c357b8235b65e1db8b7afe0dc447dd03697dbd33a3c20997a2b4ac628fd3c6f" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.33.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="6e46610812c30f4a328c9f2051419cdb15e585d398fbf1e5df68ba65010a157a" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.33.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="7a8170cba7b7f834a68d881e9501eb4d6881af38d8d4242f1d1f3aae12305975" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.33.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="7809f998eab2c9602332cbb29bca599b4d7119267efda3794bee3890a3ca7633" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="becb6ead884c807af986fbd24bed5b364f1888421fb81e4f5fece0a13b9b0fc4" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="2ab6fc0d0628e6ee14fb01f47d9c83acb3abd1b3a79b895e2e0c9717fe0929a9" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="e4cb2966bf9c14e3e03a307de0a4b11c64b75b0626670ee42f1fe4581523507d" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="2b9e91792c2fcd53e110843a43fc6f27671dccde50c837a35f7c8efe7aeceecc" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="d599d2e41ac8307751182002f509a6848aeca0f67c5e6df1cb3e916e57931ed4" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="b01cb4070b76c621d32075e1ace42504ff05d199fe6816c0ee6c004e73349dde" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="663f2f48a30c01873160670b6e87928953da65f97ab30ac85d393b59e63726a6" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="ab9f36ffb78e2ff94e162c032de9af51726ce6a7a9a37a2bded357eac61f2251" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.15.1"/>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
</package>
<package pkgid="aeefbeca066ea5be0c746cccfc16de4ac259b9d797443f9720faca5323904843" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.15.1"/>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
</package>
<package pkgid="5c68ced865719c3cea3c65a43631ac2330c5796b2085f15b6d4bb27d26ca6c3e" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.18.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
</package>
<package pkgid="35a06da697de4833a99a5464e33f8b6f96f6dc6bd86ca8239c040459c85cc416" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.18.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
</package>
<package pkgid="cb87d4c50c00239835b53249baed1398288863ce117ff0a97b68e382b2823579" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.21.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
</package>
<package pkgid="8d5a15e6aee919f86b37c4ef79ae3a0fe49581fdcec440734fc0da710a57f4fc" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.21.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
</package>
<package pkgid="e6fc1404475e82769137ed963532ce92fc854e547848293fec962f78dc4811aa" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.24.1"/>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
</package>
<package pkgid="57390806660d882d0c0117e20a064715b0943172b45a7a2ef7d93cd3b3a0ce81" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.24.1"/>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
</package>
<package pkgid="0027f5476f94c6426d140924583b1c9a4d1c93a49871a55cacd89aa902bc0de6" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.27.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
</package>
<package pkgid="33495e2fd2e807fc8a186622b63d7fecd79148ff59f2b6c4411d01fbcac66165" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.27.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
</package>
<package pkgid="45b01c69b60eebe09d0a17e563d4386d2c6f644d43c5f292c2c1a1ff5a8fd5df" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="6612db6e0c6521c17545430a4c1a86f62bf0a87105b3c909c62a2a58e7d98596" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="01eb1c6dfb4beee8e461469dc6887c74189ff6a26884498333aaff88ef4f41d6" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.30.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="281e8f2980d6132e42bddbe657ac7e0569228d5389972fa70d3ad157e4b6ce3b" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.30.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="bc4c48b3da6d7260ba2b6937091ce6eae510f9311f876e1c52ecf9a377791cf5" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.33.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="b18f2c98b166706425d0101df96984ada50400a2e193590cc9af56adb3db2964" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.33.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="71c48610c6e382d7a78fc78e1b339626568aefe19f6a1fde0ec7265cf244edc6" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="be132732781e6c986c96b72f56acfb02827107b8050e069eb5858e18494d2f85" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="8b399b5adab9774dca3ab3c62f6646d765c5a9e59c9e3461eb227e4d60134c2b" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="30d5ece8dd45cde4f66cbbd74db3aa59ca47f97d2aea051eca8a56d99aa406ca" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="1c5a8f559570aa35e0834e4d12e08b8be92076f28cfa76925a0d54bd3aa6f88d" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="039dcf3d5246f1eae3df1c78326f005c5ffc9847bdae9682c5be136b6404f801" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="aef302f96fd2500874a058cd14b826a28e9482ae8a81e2b332d933938c2e7baa" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.15.1"/>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
</package>
<package pkgid="8e5e2c5669a783cf729aa6c76253a72d0ddb1e59732627eba87cf1271ea8d436" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.15.1"/>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
</package>
<package pkgid="9860b1fd4896b9f8f6b7e80d2bd002398465cc111e6bf104477490475f4cc010" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.18.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
</package>
<package pkgid="1feb0d366e7e5286bb6fa1b2df3f14394386ec603558efc119a806a393b33ee7" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.18.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
</package>
<package pkgid="1ef23d333c06b9ffb480cc044df4e3ec074f53ad3e0efc305eaacf16fb61c4c7" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.21.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
</package>
<package pkgid="2a1c3e759493586e5e85291fc5ddec26d7d2e76e9c92ec100f336552d96713c2" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.21.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
</package>
<package pkgid="58349400398085293a38f0583ce9183a39ac818c9ae5f8f16ffdab60be0c9591" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.24.1"/>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
</package>
<package pkgid="e0e2377d9470c16bb55a6cc6265c689832197b479d752b3f408668f85c264aed" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.24.1"/>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
</package>
<package pkgid="2f8e85b36bea21d595eaf2c02db090665cc336e5deb6388e909ab7ba7cbec296" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.27.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
</package>
<package pkgid="63feba409c67abffccb5afb40e978f008b63f0f344b4c822fca53ae8056435d8" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.27.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
</package>
<package pkgid="e6d00acea74eb7e352bb2178b72fdfcdb682911f4522ec3decfed83a9540c266" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="792b864d53387957f55347e6e2382b681e0b295a150a55da483bc3eddef3d985" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="60c1cca2880e5f7c5fd63726cd93e31f815ee9b45a17ed1b427ef3c32fb233d9" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.30.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="79b1619bc4c8faf49061306352a5db01384cb6d2a357503ff3399025604d615d" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.30.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="64d44de666db67b1285c8ea502d5fa0ab698276e4ed38ee11201499c6325f752" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.33.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="30a6a752fb6e2c42a881798e1838460434a92c6be6410f68f57c1dda143d9556" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.33.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="0dc9a9c4f6814338b2a71450a5285e3ecfb40fe29295cc268203c7f9e5eb3805" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="0b69675af40156af794e9e5d5aa220a3146bd5b5c25174704fe045860c682ffa" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="03da18297c7c3f306aa8fead338c1fabec0af80de0aa84e614adbe836bfaa031" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="657040a1daae2d04141adf1f9d3e0fa8d27508cab66e563eb75d4d899856f65a" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="57a929a798b0055d81fef959b9f2f97fdd95f7ea1f0a86bc3d6bc90ac9044ead" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="57ddf7457aab1184401962090a33b88655788255df96b2d7ea0c643a1620eb2a" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="245be8fb3c6eccdd073bcd144b8bb1da44fa23ba99455d26020d49271eab7a3f" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.15.1"/>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
</package>
<package pkgid="4dcd8e4fb54b0ebfbddc212103171a3b02869ae7b524360803daf524a170c289" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.15.1"/>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
</package>
<package pkgid="99b22f4bf110bae7658d379b6adc447041b56212edd9c2b470b599ac15f97b2f" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.18.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
</package>
<package pkgid="89831da8187a3a7080e742fafec44d4329baeb8ceab7b785a70c9775b262f56a" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.18.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
</package>
<package pkgid="41c6660cd6e1f4c8acd8b56e1416763943048d200ed4f2570a2f70af7388ba43" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.21.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
</package>
<package pkgid="38e7b324fac52d8fc7e3688364944fa4cd940e7d5e041632cdcc93fa39d8d266" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.21.1"/>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
</package>
<package pkgid="e8a5cb116fe57e89e21964d7e61d974ed0eb033e9564bbac57e0763d3972e94d" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.24.1"/>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
</package>
<package pkgid="6f1aed0e41e261a59532271486aee8aa71262ea1559ea09fe2cf207919f945cd" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.24.1"/>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
</package>
<package pkgid="fed0e609e176d04262f8921f7a7011463a7b2798610d753440f493e8e995c2a3" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.27.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
</package>
<package pkgid="2d937c488d5ec302336b21aeb52fcbd32beedf3a346def4b40a7c04cca81037f" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.27.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
</package>
<package pkgid="29f834d099ee5d04f0381defb3332db43016d6c328d28f28714bbad1a9b6e843" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="02eeada02182d1b8fad842d523a11c23925c6d4de9c12c4a53eff8807c5a05a3" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="27d21be4145111b0d5fbe53a8c45fac6425ab27f07a0ce4ec9b77a75f8dc8d41" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.30.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="baaacb0bfe29fc1f806fd484795c1b876e61605fcf4a8116a8fcc149928ff0c8" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.30.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="1e6dd1a9a706a72770d3590f9a4e5531c28d1f561cfac5040e534f61fe19ad49" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.33.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="032444acd2f10c739f50df9d66f53ce5a82e5105377c12a166bf7d959d5c09f5" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.33.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="dfb450592c70b8541d02d4ef5ec83e131bf42cc3b992fd75270602e766cc2394" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="cb83b691aa9fbe8d2481a8aa6e36e72c7db1f11838b8fef4c35e83658717a513" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="938489551f6742ad2a490f8c877c7f3a723c66b499c1bf609ebd4fe7ea503279" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="10c500eb5cdefa3dc8513284e0088fa13afb5bce699624139d9ee3108c698d51" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="9702b20a099661dacb7f49edd0b89b3c367ac47be43e51c5e703710d0b4b720c" name="accountsservice" arch="i586">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="5b14be5c0feee6a68c18d6435299540e1cf2c506ac593477c42c91c87869a515" name="accountsservice" arch="src">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="a40c13ca62de2959b60f06e934ade0737929bb79b5b481d4bc0d81fb4057ebd0" name="accountsservice" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="2ac5286db9c6ad4d57844cf4bebd77c3c7c05ac1aadcb6c5052e5cf9687cfa39" name="accountsservice-devel" arch="i586">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="cee7c52384a0a93e6ab688c2ac2dad6b8f09e04f8b4a502274ee21195d7cebf3" name="accountsservice-devel" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="ee85c42376634c3fa343c19f4d485cc7b9e067cf87dc735cd9722a327e08ed8f" name="accountsservice-lang" arch="noarch">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="9d44dd7552582fdafc778fd0772811c41144fd41b8fd074c41d81f85774bc382" name="adcli" arch="i586">
  <version epoch="0" ver="0.8.2" rel="lp151.2.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
</package>
<package pkgid="355e921d2d78fa6a0c9be4e39461638d7eeea93fc0bbf00f2f528919deb866e6" name="adcli" arch="src">
  <version epoch="0" ver="0.8.2" rel="lp151.2.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
</package>
<package pkgid="8a14045f10814206af6a9f2e20d079be0ac9b4cec6a2e7015ada83103d3da3c7" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp151.2.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
</package>
<package pkgid="5e4d7c7c3c77175f1d4011a84c185021e52a03179977cca7da087033986df684" name="adcli" arch="i586">
  <version epoch="0" ver="0.8.2" rel="lp151.2.6.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
</package>
<package pkgid="aaa43150e498974c489ff8cd2cd3312e094d8bde2be5c74003337e3ae66ab216" name="adcli" arch="src">
  <version epoch="0" ver="0.8.2" rel="lp151.2.6.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
</package>
<package pkgid="4fa18860599921632c051a06621ef2d7560a2331c2c6418440fb96a82af3d03a" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp151.2.6.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
</package>
<package pkgid="c1f021575d14a6b42869d0825fe0f583f861550449e47281900bac1017342a3f" name="adcli" arch="i586">
  <version epoch="0" ver="0.8.2" rel="lp151.2.9.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="dbfcf91999b8decf362b5e09120757724cb06321c477033c2b6c95692690f6a6" name="adcli" arch="src">
  <version epoch="0" ver="0.8.2" rel="lp151.2.9.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="9f3abbbc0ca4947d6deba748798f981600d9d395dee32c478ae58d33d6bde1be" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp151.2.9.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="96187a5b4d3b1acd820742e5c1e4a43016550eba1afc36038b0628605f171ad7" name="adcli-doc" arch="i586">
  <version epoch="0" ver="0.8.2" rel="lp151.2.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
</package>
<package pkgid="c1f5dc4f6911417181df084282761114d72d689c25c86a6c98a4921da8930e61" name="adcli-doc" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp151.2.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
</package>
<package pkgid="f2e634a054931f4801f51f5b2927774b4a209d141adab78e2cb87d36fdd3b353" name="adcli-doc" arch="i586">
  <version epoch="0" ver="0.8.2" rel="lp151.2.6.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
</package>
<package pkgid="8b4d39a32adb3bc6a1401328179a0552f0d67f9dacacb820d965f1cffe172866" name="adcli-doc" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp151.2.6.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
</package>
<package pkgid="3846741d2ab0396c5cd8a6bbd8751a78bc6fcac6046d4af4a7fe9f7b975679ee" name="adcli-doc" arch="i586">
  <version epoch="0" ver="0.8.2" rel="lp151.2.9.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="f7236fcdae4e3c33fcb83f696899aa78ec196a94033b9fbe81724b14e5589f8f" name="adcli-doc" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp151.2.9.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="d8c5877f753e76ea8596e8eb3628d6015ead8eea17face2173ee4c85e13e2e36" name="adns" arch="i586">
  <version epoch="0" ver="1.5.1" rel="lp151.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1321963200">- Use O_CLOEXEC in library code.
- Change the visibility patch to not use the error prone
  version-script but rather GCC visibility</changelog>
  <changelog author="jengelh@medozas.de" date="1321963201">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added download url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370865600">- Build with large file support in 32 bit archs, autoconf
  stuff is fine, but C files included config.h after C library
  headers, therefore no prototypes for *64 functions found.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370952000">- remove debug statement in the spec file, leftover from
  previous change.</changelog>
  <changelog author="mpluskal@suse.com" date="1425297600">- Remove obsolete patches
  * adns-ocloexec.patch
  * adns-1.4-ipv6.patch
- Add gpg signature
- Cleanup spec-file with spec-cleaner
- Remove already disabled %check section, tests require working
  network setup
- Update to 1.5.0
  * This release provides full IPv6 support.  Applications can
    request AAAA records (containing IPv6 addresses) as well as,
    or instead of, A records (containing IPv4 addresses).  adns
    1.5 can speak to nameservers over IPv6.
  * converting between addresses and address literals.  These carry
    less baggage than getaddrinfo and getnameinfo.
  * bugfixes and other minor changes (see changelog for details)</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macro in the patch name
- restart patch numbering</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to 1.5.1
  * Fix addr queries (including subqueries, ie including deferencing MX
    lookups etc.) not to crash when one of the address queries returns
    tempfail.  Also, do not return a spurious pointer to the application
    when one of the address queries returns a permanent error (although,
    the application almost certainly won't use this pointer because the
    associated count is zero).
  * Portability fix for systems where socklen_t is bigger than int.
  * Fix for malicious optimisation of memcpy in test suite, which
    causes failure with gcc-4.1.9 -O3.
  * Fix TCP async connect handling. The bug is hidden on Linux and on most
    systems where the nameserver is on localhost. If it is not hidden,
    adns's TCP support is broken unless adns_if_noautosys is used.
  * adnsresfilter: Fix addrtextbuf buffer size.  This is not actually a
    problem in real compiled code but should be corrected.
  * Properly include harness.h in adnstest.c in regress/.  Suppresses
    a couple of compiler warnings (implicit declaration of Texit, etc.)
- cleanup with spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1591617600">- add the following patches to fix multiple vulnerabilities [bsc#1172265]
  * adns-1.5.1-CVE-2017-9103.patch [CVE-2017-9103]
  * adns-1.5.1-CVE-2017-9104.patch [CVE-2017-9104]
  * adns-1.5.1-CVE-2017-9105.patch [CVE-2017-9105]
  * adns-1.5.1-CVE-2017-9106.patch [CVE-2017-9106]
  * adns-1.5.1-CVE-2017-9107.patch [CVE-2017-9107]
  * adns-1.5.1-CVE-2017-9108.patch [CVE-2017-9108]
  * adns-1.5.1-CVE-2017-9109.patch [CVE-2017-9109]</changelog>
</package>
<package pkgid="e727c2a3a6e51c044c84409f48ac93b432ef3be17b4ecd2cdb7691a25574fab5" name="adns" arch="src">
  <version epoch="0" ver="1.5.1" rel="lp151.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mrueckert@suse.de" date="1146052800">- added adns-missing_symlink.diff:
  add missing symlink "libadns.so" so you can dynamically
  link against libadns.</changelog>
  <changelog author="mt@suse.de" date="1157112000">- updated to adns-1.3, providing new support for SRV RRs
  and unknown RRs as well as several portability fixes.
- adopted configure and destdir patches, removed obsolete
  codecleanup and missing_symlink patches</changelog>
  <changelog author="crrodriguez@suse.de" date="1186488000">- update to version 1.4
- run ldconfig
- use library packaging policy
- run make check</changelog>
  <changelog author="prusnak@suse.cz" date="1203508800">- added patch to support IPv6 protocol [#350506]</changelog>
  <changelog author="prusnak@suse.cz" date="1221739200">- document CVE-2008-1447 / CVE-2008-4100 poisoning vulnerability
  in README.SUSE [bnc#426515]</changelog>
  <changelog author="crrodriguez@suse.de" date="1232107200">- remove static libraries</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1288958400">- export only public symbols</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1292760000">- Use 64bit file offsets</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Implement baselibs for package
- Remove redundant tags/sections from specfile</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1321963200">- Use O_CLOEXEC in library code.
- Change the visibility patch to not use the error prone
  version-script but rather GCC visibility</changelog>
  <changelog author="jengelh@medozas.de" date="1321963201">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added download url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370865600">- Build with large file support in 32 bit archs, autoconf
  stuff is fine, but C files included config.h after C library
  headers, therefore no prototypes for *64 functions found.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370952000">- remove debug statement in the spec file, leftover from
  previous change.</changelog>
  <changelog author="mpluskal@suse.com" date="1425297600">- Remove obsolete patches
  * adns-ocloexec.patch
  * adns-1.4-ipv6.patch
- Add gpg signature
- Cleanup spec-file with spec-cleaner
- Remove already disabled %check section, tests require working
  network setup
- Update to 1.5.0
  * This release provides full IPv6 support.  Applications can
    request AAAA records (containing IPv6 addresses) as well as,
    or instead of, A records (containing IPv4 addresses).  adns
    1.5 can speak to nameservers over IPv6.
  * converting between addresses and address literals.  These carry
    less baggage than getaddrinfo and getnameinfo.
  * bugfixes and other minor changes (see changelog for details)</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macro in the patch name
- restart patch numbering</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to 1.5.1
  * Fix addr queries (including subqueries, ie including deferencing MX
    lookups etc.) not to crash when one of the address queries returns
    tempfail.  Also, do not return a spurious pointer to the application
    when one of the address queries returns a permanent error (although,
    the application almost certainly won't use this pointer because the
    associated count is zero).
  * Portability fix for systems where socklen_t is bigger than int.
  * Fix for malicious optimisation of memcpy in test suite, which
    causes failure with gcc-4.1.9 -O3.
  * Fix TCP async connect handling. The bug is hidden on Linux and on most
    systems where the nameserver is on localhost. If it is not hidden,
    adns's TCP support is broken unless adns_if_noautosys is used.
  * adnsresfilter: Fix addrtextbuf buffer size.  This is not actually a
    problem in real compiled code but should be corrected.
  * Properly include harness.h in adnstest.c in regress/.  Suppresses
    a couple of compiler warnings (implicit declaration of Texit, etc.)
- cleanup with spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1591617600">- add the following patches to fix multiple vulnerabilities [bsc#1172265]
  * adns-1.5.1-CVE-2017-9103.patch [CVE-2017-9103]
  * adns-1.5.1-CVE-2017-9104.patch [CVE-2017-9104]
  * adns-1.5.1-CVE-2017-9105.patch [CVE-2017-9105]
  * adns-1.5.1-CVE-2017-9106.patch [CVE-2017-9106]
  * adns-1.5.1-CVE-2017-9107.patch [CVE-2017-9107]
  * adns-1.5.1-CVE-2017-9108.patch [CVE-2017-9108]
  * adns-1.5.1-CVE-2017-9109.patch [CVE-2017-9109]</changelog>
</package>
<package pkgid="e4f63fea9d75ad06de352fac4c602a325ae2a7542dd4c16378934f1bd967ee94" name="adns" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp151.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1321963200">- Use O_CLOEXEC in library code.
- Change the visibility patch to not use the error prone
  version-script but rather GCC visibility</changelog>
  <changelog author="jengelh@medozas.de" date="1321963201">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added download url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370865600">- Build with large file support in 32 bit archs, autoconf
  stuff is fine, but C files included config.h after C library
  headers, therefore no prototypes for *64 functions found.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370952000">- remove debug statement in the spec file, leftover from
  previous change.</changelog>
  <changelog author="mpluskal@suse.com" date="1425297600">- Remove obsolete patches
  * adns-ocloexec.patch
  * adns-1.4-ipv6.patch
- Add gpg signature
- Cleanup spec-file with spec-cleaner
- Remove already disabled %check section, tests require working
  network setup
- Update to 1.5.0
  * This release provides full IPv6 support.  Applications can
    request AAAA records (containing IPv6 addresses) as well as,
    or instead of, A records (containing IPv4 addresses).  adns
    1.5 can speak to nameservers over IPv6.
  * converting between addresses and address literals.  These carry
    less baggage than getaddrinfo and getnameinfo.
  * bugfixes and other minor changes (see changelog for details)</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macro in the patch name
- restart patch numbering</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to 1.5.1
  * Fix addr queries (including subqueries, ie including deferencing MX
    lookups etc.) not to crash when one of the address queries returns
    tempfail.  Also, do not return a spurious pointer to the application
    when one of the address queries returns a permanent error (although,
    the application almost certainly won't use this pointer because the
    associated count is zero).
  * Portability fix for systems where socklen_t is bigger than int.
  * Fix for malicious optimisation of memcpy in test suite, which
    causes failure with gcc-4.1.9 -O3.
  * Fix TCP async connect handling. The bug is hidden on Linux and on most
    systems where the nameserver is on localhost. If it is not hidden,
    adns's TCP support is broken unless adns_if_noautosys is used.
  * adnsresfilter: Fix addrtextbuf buffer size.  This is not actually a
    problem in real compiled code but should be corrected.
  * Properly include harness.h in adnstest.c in regress/.  Suppresses
    a couple of compiler warnings (implicit declaration of Texit, etc.)
- cleanup with spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1591617600">- add the following patches to fix multiple vulnerabilities [bsc#1172265]
  * adns-1.5.1-CVE-2017-9103.patch [CVE-2017-9103]
  * adns-1.5.1-CVE-2017-9104.patch [CVE-2017-9104]
  * adns-1.5.1-CVE-2017-9105.patch [CVE-2017-9105]
  * adns-1.5.1-CVE-2017-9106.patch [CVE-2017-9106]
  * adns-1.5.1-CVE-2017-9107.patch [CVE-2017-9107]
  * adns-1.5.1-CVE-2017-9108.patch [CVE-2017-9108]
  * adns-1.5.1-CVE-2017-9109.patch [CVE-2017-9109]</changelog>
</package>
<package pkgid="db63a1e9202aa1d3ec5afbbe2b1b3929a8ef2af3627037f373155986717a3b2b" name="aide" arch="src">
  <version epoch="0" ver="0.16" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.de" date="1144929600">- run aide --init as test</changelog>
  <changelog author="meissner@suse.de" date="1175169600">- buildrequires flex,bison</changelog>
  <changelog author="meissner@suse.de" date="1202817600">- Version 0.13.1
  * Fixed bug with reading gzipped aide.db files
  * Removed dead ustat code
- Version 0.13
  * Added support for selinux and xattr attributes
    (kindly contributed by Red Hat)
  * Added support for the Linux Audit System
    (kindly contributed by Red Hat)
  * Fixed usage of libgcrypt instead of libmhash
  * Added file locking for output files
  * Fixed bugs
- Version 0.12
  * Fixed bugs
  * Allow http/https/ftp URLs through libcurl
  * Support posix_fadvice() to avoid caching files
- enabled ACL and XATTR support</changelog>
  <changelog author="meissner@suse.de" date="1219406400">- enabled SELinux support [Fate#303662]
- enabled curl
- disable static (does not make much sense)</changelog>
  <changelog author="meissner@suse.de" date="1231156800">- fixed abort on check/update by removing the hash requirement bnc#406597
- fixed version output bnc#463511
- enhanced testcase to also run one aide --check</changelog>
  <changelog author="crrodriguez@suse.de" date="1245240000">- fix build when as-needed is a default liker option</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="ro@suse.de" date="1272542400">- make aide check verbose to get started
- add sleep and sync to fix build</changelog>
  <changelog author="meissner@suse.de" date="1281441600">- updated to 0.15
  - lots of fixes and some new stuff</changelog>
  <changelog author="freespacer@gmx.de" date="1285934400">- updated to version 0.15.1
  - Ignore changed file name if attributes does not match
  - Allow absence of DB_CHECKINODE if file name has changed
- renew patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add missing call to make
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
</package>
<package pkgid="f81cd986ad21720019a4b322de09abbb74e4cf8bb7074c602c3b822e79e87fd7" name="aide" arch="x86_64">
  <version epoch="0" ver="0.16" rel="lp151.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add missing call to make
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
</package>
<package pkgid="90d1cda319aacbccae539d9448fda89e936b986d31177e118eb46eabf8d83ed7" name="aide-test" arch="x86_64">
  <version epoch="0" ver="0.16" rel="lp151.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add missing call to make
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
</package>
<package pkgid="5d504abcc116f6eaf6b0d08a01800d69631b5a0de586713a600312c789cf7016" name="akonadi-server" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="cf7ed36281046c2350d33c9a30eb8316a1e96cfdd1e3636eb38f1ef4daec2650" name="akonadi-server" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="43b774e220d33433afd8e44573828607fe6063dbb66565b50f3b4936968cff5e" name="akonadi-server-devel" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="5d4a382a80697d610fcbd60928759dc3c4783141bd35f4e90c1b3631781239ec" name="akonadi-server-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="ab701362f74f03dba50db290000181c93e491b85654cd6bdb2d7008e0bb84bf0" name="akonadi-server-sqlite" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="e675becb257c58f297abccbd213006bfed63c7aa65de9b036c4a0f05c7e556ef" name="alevtd" arch="x86_64">
  <version epoch="0" ver="3.103" rel="lp151.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1306584000">- Added a patch (based on upstream) to fix the issue with GPL incompatible
  OpenGroup license files (bnc#696259).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1309694400">- Update to version 3.101:
  * Man fix to remove mention of v4l1, and describe libv4l instead
  * Fixes at fr/es manuals
  * Warning fixes
  * Addition of alsa streaming at xawtv: now, for devices with video
    associated with audio inputs.
  * Use X11 editres, instead of its on version, based on a port from
    a motif library released under a licence that is not GPL compatible
  * Add auto-detection logic for xawtv: by default, it will now seek for
    the first TV device. If not available, fall back to the first grabber
    device.
  * Add auto-detection logic for scanv: by default, it will now seek for
    the first TV device. If not afailable, fails.
  * Add optional support for libexplain at the v4l2/libv4l driver.
    Libexplain provides a  more complete explanation for the error codes,
    helping developers to better track what's happened.
  * Don't expose tuner commands, on devices that are grabber or  webcams
    at xawtv.
- Removed the patch for the GPL incompatible OpenGroup license files issue
  bnc#696259 (fixed upstream).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1315656000">- Update to version 3.102:
  * Improve alsa latency handler and document the -alsa-latency parameter
  * Improve alsa handling, fixing a cut and past error that causes
    breakages with some cards
  * Improve audio parameters detection
  * fix build with ld --as-needed --no-copy-dt-needed
- Spec file updates:
  * Changed License: to GPL-2.0+.
  * Recommend instead of Require "pia" for xawtv and motv.
  * Removed "export SUSE_ASNEEDED=0" (not needed anymore).
  * Minor other updates.
- Added a patch "v4l-conf_non-position-independent-executable_fix.patch" to fix
  the non-position-independent-executable rpmlint warning for v4l-conf.
- Added a patch "no-copy-dt-needed-entries.patch" to fix linking with
  - -no-copy-dt-needed-entries.</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1330084800">- buildrequire xorg-x11 for configure to find appdefaults location correctly</changelog>
  <changelog author="bwiedemann@suse.com" date="1339848000">- patch to read config as it can contain keyboard events for vdr
  (fixes bnc#735032)</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1370174400">- Update to version 3.103:
  * Improve alsa stream handling
  * Add support for alsa audio loopback to the radio app
  * Add support for multiple-band (AM+FM) tuners to radio app
  * Tons of other bugfixes + improvements for the radio app
  * Fix xawtv window flashing to black when changing channel or taking a
    snapshot
  * Fix crackle crackle sound on mp34xx cards when changing channel
  * Various other bugfixes
- Removed xawtv-3.95.patch, no-copy-dt-needed-entries.patch and
  xawtv-read-config.patch (not needed/fixed upstream).
- Replaced Mesa-devel and xorg-x11-devel build requirements with the needed
  pkgconfig(...) ones.
- Removed automake (autoreconf -fi is not needed) and openmotif (not needed)
  build requirements.
- Use desktop-file-utils instead of update-desktop-files for openSUSE &gt; 12.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1374753600">- Add missing dependencies so the package build on factory.</changelog>
  <changelog author="bwiedemann@suse.com" date="1419595200">- fix Segfault at start + add xawtv-fixblitframesegfault.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1591272000">- v4l-conf: add v4l-conf-fix-CVE-2020-13696.patch: fix security issue in
  setuid-root program that allows for arbitrary file existence tests and
  open() with O_RDWR (bsc#1171655, CVE-2020-13696)</changelog>
</package>
<package pkgid="981924b8d268d5235f2efd04ad229deb897e898a8137b24aaa87b86a45111bc5" name="alsa" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp151.8.3.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="590544902d9d187981df89662d1be5775102b1c2bd6b5fc785ff2180c704e009" name="alsa" arch="src">
  <version epoch="0" ver="1.1.5" rel="lp151.8.3.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="7afebca581245955c1aebf70345d48204f19efdc13996ad06e9be2c4db1ccd0d" name="alsa" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.8.3.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="778569b0700ef35f62b7fb3708deedd8bf95acfcd5314cbfb49d53b82a4e360d" name="alsa-devel" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp151.8.3.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="ae724fc558a5d40dc022fa6aff357ca39673508cbc3e80f0eb9f2596078b42b9" name="alsa-devel" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.8.3.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="3863317fc626534c96f1bba8d57cd1215f9338c5188ae64bb189696e693e852b" name="alsa-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.8.3.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="78121e05e83cb970e465a4a01c977f4af9abba8708ce6402f1834015adb5d12a" name="alsa-docs" arch="noarch">
  <version epoch="0" ver="1.1.5" rel="lp151.8.3.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="464def0e93649f9bb5e1000c1b6870d2d3339a66c1edd855e4fbdc884cadd4a0" name="alsa-firmware" arch="noarch">
  <version epoch="0" ver="1.0.29" rel="lp151.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1296475200">- Updated to version 1.0.24.1:
  * including previous fixes
  * Add firmware for HDSP RPM</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1324555200">- alsa firmware is of no use without alsa</changelog>
  <changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25; Update asihpi firmware to 4.10.05</changelog>
  <changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  add firmware files for CA0132 HD-audio codec
- Fix macros for udev rules installation path</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- 0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:
  Add firmware files for cs46xx that have been cut since 3.13
  kernel</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-firmware 1.0.28:
  Removed obsoleted patch
  0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-firmware 1.0.29:
  update asihpi firmware to version 4.14</changelog>
  <changelog author="tiwai@suse.de" date="1559044800">- Install missing firmware files for CA0132 codec (bsc#1136638)</changelog>
</package>
<package pkgid="d9e4a18645571d4ab2e4b41768351a0fade3d0ca1cfab1d801e450b3817f297b" name="alsa-firmware" arch="src">
  <version epoch="0" ver="1.0.29" rel="lp151.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1202472000">- updated to version 1.0.16-final:
  * just a version bump</changelog>
  <changelog author="tiwai@suse.de" date="1214481600">- updated to version 1.0.17-rc2:
  * update asihpi firmwares</changelog>
  <changelog author="tiwai@suse.de" date="1216123200">- updated to version 1.0.17:
  * just a version bump</changelog>
  <changelog author="tiwai@suse.de" date="1232625600">- updated to version 1.0.19:
  * updated PCXHR firmwares</changelog>
  <changelog author="ro@suse.de" date="1236254400">- fix build</changelog>
  <changelog author="tiwai@suse.de" date="1241524800">- exclude some firmware files already contained in kernel-firmware
  package</changelog>
  <changelog author="tiwai@suse.de" date="1241611200">- updated to version 1.0.20:
  * just a version number bump</changelog>
  <changelog author="tiwai@suse.de" date="1254744000">- really exclude firmware files in kernel-firmware package</changelog>
  <changelog author="aj@suse.de" date="1267012800">- Use ATTR instead of SYSFS for udev rules.</changelog>
  <changelog author="tiwai@suse.de" date="1271678400">- updated to version 1.0.23:
  * update asihpi firmware version 40304</changelog>
  <changelog author="tiwai@suse.de" date="1296475200">- Updated to version 1.0.24.1:
  * including previous fixes
  * Add firmware for HDSP RPM</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1324555200">- alsa firmware is of no use without alsa</changelog>
  <changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25; Update asihpi firmware to 4.10.05</changelog>
  <changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  add firmware files for CA0132 HD-audio codec
- Fix macros for udev rules installation path</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- 0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:
  Add firmware files for cs46xx that have been cut since 3.13
  kernel</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-firmware 1.0.28:
  Removed obsoleted patch
  0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-firmware 1.0.29:
  update asihpi firmware to version 4.14</changelog>
  <changelog author="tiwai@suse.de" date="1559044800">- Install missing firmware files for CA0132 codec (bsc#1136638)</changelog>
</package>
<package pkgid="5ca193761a0676db7000dd19e45b47a84506537b2a579cfafa813175bf6fc6c9" name="alsa-plugins" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="d034abd09bb2641d28e62cda0db4aaeb47ac9e79fc65a4920bc50e4a73f0d3a1" name="alsa-plugins" arch="src">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  including all previous fixes; all 00*-* patches dropped</changelog>
  <changelog author="tiwai@suse.de" date="1369310400">- Backport upstream fixes:
  0001-Check-for-and-include-libavutil.h-to-avoid-unresolve.patch
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch</changelog>
  <changelog author="tiwai@suse.de" date="1394539200">- Backport upstream fixes: add chmap support to plugins, fix a52
  builds, add a new option to jack plugin:
  0003-vdownmix-Add-chmap-support.patch
  0004-upmix-Add-chmap-support.patch
  0005-a52-Fix-build-error-with-the-recent-version.patch
  0006-a52-Add-chmap-support.patch
  0007-a52-Propagate-errors-from-hw.patch
  0008-a52-switch-to-AV_CODEC_ID-identifiers.patch
  0009-jack-Allow-to-specify-a-client-name-as-parameters.patch
- Run spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-plugins 1.0.28:
  All pervious fix patches are obsoleted:
  0001-Check-for-and-include-libavutil.h-to-avoid-unresolve.patch
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch
  0003-vdownmix-Add-chmap-support.patch
  0004-upmix-Add-chmap-support.patch
  0005-a52-Fix-build-error-with-the-recent-version.patch
  0006-a52-Add-chmap-support.patch
  0007-a52-Propagate-errors-from-hw.patch
  0008-a52-switch-to-AV_CODEC_ID-identifiers.patch
  0009-jack-Allow-to-specify-a-client-name-as-parameters.patch</changelog>
  <changelog author="tiwai@suse.de" date="1407844800">- Backport upstream fix for backward compatibility of jack PCM
  plugin:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="4741b284450eacb8cb3fb63804113043c26a9790fc91126ced07106ac4bd3dbb" name="alsa-plugins" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="f712afc717c22a7317041254b305d402e911af76dd1ebbb1ae6152fd676093c6" name="alsa-plugins-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="e0d6d0f3853745b8e56c08a37575f5a35b0cfb27c74e77d2781e25d1e2b8f9ec" name="alsa-plugins-a52" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="976e3c63a914b07a395d8a9563b05c8a81315d98f24b77203ba38556cf4e9ed0" name="alsa-plugins-a52" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="1dc080ecb309c464df866dba0d10cef79ced37155be49ec11130a0db532c4bac" name="alsa-plugins-jack" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="fb612adacd90ec7506123cf1bcb7a708d2a74a7e56c46284ffaee55d57daa185" name="alsa-plugins-jack" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="1bda979797a178a243abbd6a35d781f44866a137869a702bb8c7e5ae1763ac02" name="alsa-plugins-jack-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="3e6a14f42f6f897491d00226194528756301f03b6b75984dbd9dc14412e0d416" name="alsa-plugins-lavcrate" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="e2a38de520028143b2f78e05f136f7517004eceb228132e91f258050b67258ee" name="alsa-plugins-lavcrate" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="99b05c1d4986d0157cc517253dabe054c8d1966ec2f3a37138cb5a7a271490b4" name="alsa-plugins-maemo" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="6ebb5257e748eda69528518c56adf8c6a32e5f0e71daca829ddf56285e15d591" name="alsa-plugins-maemo" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="e899200d5a30981bfa93ec53f62cbf222a2d33b29504452b112455f63009f68c" name="alsa-plugins-maemo-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="455c674e866111bfdd997644f1c027476928b4744f50aee3c069adf5e7b05384" name="alsa-plugins-pulse" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="560d3068ba31fe1e577c8d8c0f9b39018892dd9a74011fbc539b177a399ad5a5" name="alsa-plugins-pulse" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="5497b90a256a2742b6ac37c383ce32073035f08cbf1046b0292a23eedfcf1f8a" name="alsa-plugins-pulse-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="4d3773b401a8c1e25fcf7c76a1b6f9bfcd84f8083556b77956441c9923edd290" name="alsa-plugins-samplerate" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="d2503ce95706a6259119ea10ffc4e477ac3b4f44a8df3d86cbca0c71ca1d65b5" name="alsa-plugins-samplerate" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="085453f70a0d45a997241617bb43ad137a95c6df8b2daeb61e822de131c0dc92" name="alsa-plugins-samplerate-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="1d646801066559fce65c329d29ca9c145e730077aefeec9e542335a1ad0cf335" name="alsa-plugins-speex" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="e69592856849be0d4becbb6d1f8c3238789a92caa14beb80335f84fd4ef9f437" name="alsa-plugins-speex" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts:
  option '-p' of 'type' command may be unsupported is some shells,
  use 'command -v' instead</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-plugins 1.0.29:
  Just a version bump including previous fixes
- Drop obsoleted patch:
  0001-jack-Restore-PID-to-jack-client-name-when-not-specif.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- BuildRequire pkgconfig(speexdsp) instead of speex-devel: the
  packages have been rearranged/split.
- Add alsa-plugins-include-config.h.patch: Fix build with new
  speexdsp versions. The speexdsp headers expect the caller to set
  HAVE_STDINT_H (or any of the other appropriate headers, based on
  platform) in order to define the specific types.</changelog>
  <changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: fixes for A52 plugin, mix plugin protocol
  version fix, and enhancement for JACK plugin to support 24bit
  formats:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436443200">- Backport upstream fixes: just minor build fix issues that don't
  hit us, but kept here for consistency
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch
- Fix build error with SLE11-SP3 due to lack of speexdsp pkgconfig.</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-plugins 1.1.0:
  including all previous fixes, a small memory leak fix in jack
  plugin
- Dropped patches:
  0001-rate-Allow-LGPL-for-libsamplerate-commercial-license.patch
  0002-mix-Fix-extplug-version-ifdef-checks.patch
  0003-a52-Fix-ioplug-version-ifdef-checks.patch
  0004-pulse-Add-24-bit-data-formats-to-Pulse-plugin.patch
  0005-arcam-av-Include-sys-select.h-for-fd_set-definition.patch
  0006-pph-include-speexdsp_types.h-not-speex_types.h.patch
  0007-pph-Fix-build-with-older-speex.patch</changelog>
  <changelog author="tiwai@suse.de" date="1448452800">- Add supplements to 32bit packages to be fetched automatically
  (bsc#956402)</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: build fixes with the recent ffmpeg
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch
- Drop the obsoleted patch:
  alsa-plugins-include-config.h.patch</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-plugins 1.1.1:
  including all previous fixes, fixes of a52 plugin for the recent
  ffmpeg versions
- Delete obsoleted patches:
  0001-speex-Add-missing-include-config.h.patch
  0002-a52-fix-reported-input-channel-order.patch
  0003-pph-include-config.h-from-rate_speexrate.c.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1481284800">- Own alsa-lib dir, needed due to changes in alsa.</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Fix the detection of libavcodec header files:
  0001-configure-Fix-detection-of-avcodec.h.patches
- Enable the build of a52 and lavcrate plugins for openSUSE</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-plugins 1.1.4:
  * extend configure script to disable more stuff
  * including previous fix for libavcodec
- Obsoleted patch:
  0001-configure-Fix-detection-of-avcodec.h.patches</changelog>
  <changelog author="tiwai@suse.de" date="1504008000">- Disable avcodec-related plugins for SLE packages</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-plugins 1.1.5:
  * pulse: prevent double-free when pulse_hw_constraint returns
    error</changelog>
  <changelog author="tiwai@suse.de" date="1588852800">- Build avcodec-related plugins for SLE packages again
  (jsc#SLE-11987)</changelog>
</package>
<package pkgid="b8277fbf7847aedf42c8aec088ec6ea8a8116e3b3ad45287b164fafaaeb614ed" name="alsa-utils" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp151.4.3.1"/>
  <changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes: rubustify dB value handling in amixer
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch</changelog>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
</package>
<package pkgid="fc9b4d43ec5125f6bccbb242db647e496e193e9bf07d8ceca92258d3397e9a7e" name="alsa-utils" arch="src">
  <version epoch="0" ver="1.1.5" rel="lp151.4.3.1"/>
  <changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes: rubustify dB value handling in amixer
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch</changelog>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
</package>
<package pkgid="4e2601f1d610704cd3e4eb12bcc4d7f3caa595370b46f6d1ac7aa2db06c143a8" name="alsa-utils" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.4.3.1"/>
  <changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes: rubustify dB value handling in amixer
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch</changelog>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
</package>
<package pkgid="7199166f251c55603224ca26d6e7901e438ab55409e001696190d0ea016849a2" name="alsabat" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp151.4.3.1"/>
  <changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes: rubustify dB value handling in amixer
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch</changelog>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
</package>
<package pkgid="167bdf2026dd7063f9ad458cb0d38624a94ecea574f48063cb6af1369f57d029" name="alsabat" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp151.4.3.1"/>
  <changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes: rubustify dB value handling in amixer
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch</changelog>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
</package>
<package pkgid="f2420fa8280fc070b3a5339b803641e05e07ebba53a7361f8c477641ba987a43" name="amanda" arch="src">
  <version epoch="0" ver="3.5.1" rel="lp151.5.3.1"/>
  <changelog author="jmatejek@suse.com" date="1328616000">- removed custom definition of g_queue_free_full which was
  conflicting with a function newly added to glib2</changelog>
  <changelog author="aj@suse.de" date="1343649600">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="vdziewiecki@suse.com" date="1349265600">-Update to 3.3.2 (see NEWS)
-Remove queue patch (fixed upstream, see ChangeLog)
-Replaced %run_permissions with %set_permissions (bnc#764124)</changelog>
  <changelog author="jmatejek@suse.com" date="1349438400">- fixed some functions without return values</changelog>
  <changelog author="vdziewiecki@suse.com" date="1357905600">-Update to 3.3.3
  * amdump.X log files use timestamp instead of number, amdump and amdump.1
    are maintained as symlink.
  * chg-disk
    o Use the changerfile for the statefile.
  * s3 device
    o support CASTOR storage
  * amanda.conf
    o New REPORT-USE-MEDIA and REPORT-NEXT-MEDIA.
  * amfetchdump
    o new --extract, --directory, --data-path and --application-property
    arguments. It allow to do the extraction on the server.
  * --exact-match argument to many command, and '=' prefix to expression.
    o It diable use of expression for host, disk, level and datestamp on
    command line argument.
  * All changer scripts.
    o Add LOCK-TIMEOUT property.
  * Many bug fix
-Fixed bnc#784375 - Clarify licensing of amanda. Zmanda changed its
  licensing from GPL-2.0 to GPL-2.0+ and LGPLv2 to LGPLv2+.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Added automake --add-missing option to fix build with new automake</changelog>
  <changelog author="mls@suse.de" date="1405944000">- comment out all 'undef bool' lines, as they break the build
  with modern perl versions
  added patch: amanda-3.3.3-noundefbool.patch</changelog>
  <changelog author="darin@darins.net" date="1410782400">- update to 3.3.6
  * ambsdtar
    new application that use BSD tar to do the backup.
  3.3.5 release notes
  * faster 'verify' command.
    fix parsing of config override arguments.
  * amsamba
    Add REGEX-MATCH property.
  * amvault
    Print progress status.
  * ndmp device
    INDIRECT property default to yes.
  3.3.4 release notes
  * amreport
    new --format argument
    new 'json' and 'json_raw' format.
  * amanda.conf
    new REPORT-FORMAT option.
  * amtape
    new 'verify' command.
  * amadmin
    new 'force-level-1' command.
  * ampgsql
    Add VERBOSE property.
  * S3 device
    handle DURABLE_REDUCED_AVAILABILITY for google storage.
  See ChangeLog for a full listing of changes:
    /usr/share/doc/packages/amanda/ChangeLog
- removed amanda-gets.patch, applied upstream</changelog>
  <changelog author="darin@darins.net" date="1410868800">- wrap %post permissions routines in conditionals for SLES</changelog>
  <changelog author="mpluskal@suse.com" date="1417089600">- Fix for boo#907361 -- amanda-2.6.1p1-fix-perl-format.patch
- Clean spec file with spec-cleaner</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  amanda-timestamp.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1460808000">- Replace libsmbclient and libsmbclient-devel for
  pkgconfig(smbclient) BuildRequires: Following samba changes.</changelog>
  <changelog author="kstreitova@suse.com" date="1485518400">- add openssh to BuildRequires to support ssh [bsc#1022028]</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Added lines to %files to clear unpackaged files error in
  openSUSE:Factory</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1507896000">- update to 3.5
  * see ReleaseNotes for more information
  * refresh
    amanda-2.6.1p1-shellbang.patch
    amanda-2.6.1p1-return_val.patch
    amanda-timestamp.patch
  * remove (applied upstream)
    amanda-automake_add_missing.patch
    amanda-3.3.3-noundefbool.patch
    amanda-2.6.1p1-fix-perl-format.patch
  * remove chg-* scripts from the filelist
  * pack new files
- add amanda-3.5-no_return_in_nonvoid_fnc.patch to fix
  no-return-in-nonvoid-function rpmlint error
- add url for source
- remove SLE11 specific stuff from specfile
- SuSE -&gt; SUSE
  * amanda-SuSE.tar.bz2 is now amanda-SUSE.tar.bz2
  * README.SuSE is now README.SUSE
- tweak description
- run make check
- use %configure macro
- renumber patches
- create a symlink for amoldrecover manpage</changelog>
  <changelog author="kstreitova@suse.com" date="1513166400">- update to 3.5.1
  * do not check all 'r' bit on suid binary
  * fix parsing of configuration override (-o)
  * can unset some setting
  * client code will not fail if shared memory is not available
  * amreport
  * lot of improvement
  * allow '*' for a datestamp wildcard
  * amgetconf
  * print an empty string if a parameter is not set instead of
    'no such parameter'
  * amdump
  * new --no-dump, --no-flush and --no-vault argument
  * amstatus fix
  * lock holding disk to protect multiple parallel access</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521633600">- Buildrequire curl and libcrypto (enables amazon s3 module)
- amanda-libnsl.patch: libnsl is gone, replaced by tirpc
  fix configure checks.
- Buildrequire libtirpc</changelog>
  <changelog author="dimstar@opensuse.org" date="1522065600">- Own %{_sysconfdir}/xinetd.d: filesystem won't own this directory
  much longer (boo#1084457).</changelog>
  <changelog author="kstreitova@suse.com" date="1542715200">- update the list of suid binaries [bsc#1110797]
  * added: ambind, ambsdtar, amgtar, amstar
  * removed: amcheck, planner, dumper
- update README.SUSE and add a note about setuid binaries and the
  fact that user amanda and members of the group amanda should be
  considered privileged users</changelog>
</package>
<package pkgid="fd7e0e2f44ed36ee33e8999ba32b451f07bc90232a1a07e6c6c97c21a963bcf0" name="amanda" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="lp151.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1417089600">- Fix for boo#907361 -- amanda-2.6.1p1-fix-perl-format.patch
- Clean spec file with spec-cleaner</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  amanda-timestamp.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1460808000">- Replace libsmbclient and libsmbclient-devel for
  pkgconfig(smbclient) BuildRequires: Following samba changes.</changelog>
  <changelog author="kstreitova@suse.com" date="1485518400">- add openssh to BuildRequires to support ssh [bsc#1022028]</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Added lines to %files to clear unpackaged files error in
  openSUSE:Factory</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1507896000">- update to 3.5
  * see ReleaseNotes for more information
  * refresh
    amanda-2.6.1p1-shellbang.patch
    amanda-2.6.1p1-return_val.patch
    amanda-timestamp.patch
  * remove (applied upstream)
    amanda-automake_add_missing.patch
    amanda-3.3.3-noundefbool.patch
    amanda-2.6.1p1-fix-perl-format.patch
  * remove chg-* scripts from the filelist
  * pack new files
- add amanda-3.5-no_return_in_nonvoid_fnc.patch to fix
  no-return-in-nonvoid-function rpmlint error
- add url for source
- remove SLE11 specific stuff from specfile
- SuSE -&gt; SUSE
  * amanda-SuSE.tar.bz2 is now amanda-SUSE.tar.bz2
  * README.SuSE is now README.SUSE
- tweak description
- run make check
- use %configure macro
- renumber patches
- create a symlink for amoldrecover manpage</changelog>
  <changelog author="kstreitova@suse.com" date="1513166400">- update to 3.5.1
  * do not check all 'r' bit on suid binary
  * fix parsing of configuration override (-o)
  * can unset some setting
  * client code will not fail if shared memory is not available
  * amreport
  * lot of improvement
  * allow '*' for a datestamp wildcard
  * amgetconf
  * print an empty string if a parameter is not set instead of
    'no such parameter'
  * amdump
  * new --no-dump, --no-flush and --no-vault argument
  * amstatus fix
  * lock holding disk to protect multiple parallel access</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521633600">- Buildrequire curl and libcrypto (enables amazon s3 module)
- amanda-libnsl.patch: libnsl is gone, replaced by tirpc
  fix configure checks.
- Buildrequire libtirpc</changelog>
  <changelog author="dimstar@opensuse.org" date="1522065600">- Own %{_sysconfdir}/xinetd.d: filesystem won't own this directory
  much longer (boo#1084457).</changelog>
  <changelog author="kstreitova@suse.com" date="1542715200">- update the list of suid binaries [bsc#1110797]
  * added: ambind, ambsdtar, amgtar, amstar
  * removed: amcheck, planner, dumper
- update README.SUSE and add a note about setuid binaries and the
  fact that user amanda and members of the group amanda should be
  considered privileged users</changelog>
</package>
<package pkgid="2abd1dc94bd104d97aad29880b51feb37e1dc9991638b4e18dbe6b4191fda731" name="amazon-ssm-agent" arch="src">
  <version epoch="0" ver="2.3.978.0" rel="lp151.5.3.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537012800">- Update to 2.3.50.0 2018-09-12 (bsc#1108265)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user
    is reset on every session. You can change the permissions
    by moving the ssm-user to a less-privileged group or by
    changing the sudoers file. The ssm-user is not removed
    from the system when SSM Agent is uninstalled.
- Update to 2.3.13.0 2018-08-16
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 2018-08-02
  + NOTE: This build should not be installed for Windows since
    the SSM Agent service may remain in starting status if unable
    to authenticate to the Systems Manager service, which is
    fixed in the latest release.
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 2018-07-31
  + NOTE: This build should not be installed for Windows since
    you might see the error - "Encountered error while starting
    the plugin: Unable to locate cloudwatch.exe" for Cloudwatch
    plugin. This bug has been fixed in SSM Agent version 2.2.916.0.
    Also SSM Agent service may remain in starting status if unable
    to authenticate to the Systems Manager service, which is
    fixed in the latest release.
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 2018-06-26
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output
    to CloudWatch Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 2018-05-29
  + Various bug fixes
- Update to 2.2.607.0 2018-05-23
  + Various bug fixes
- Update to 2.2.546.0 2018-05-07
  + Bug fix to retry sending document results if they
    couldn't reach the service
- Update to 2.2.493.0 2018-04-25
  + NOTE: Downgrade to this version using AWS-UpdateSSMAgent
    is not permitted for agent installed using snap
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change
    permissions of directories
  + Bug fix to Cloudwatch plugin where StartType has
    duplicated Enabled value
- Update to 2.2.392.0 2018-03-27
  + Added support for agent hibernation so that Agent backs
    off or enters hibernation mode if it does not have access
    to the service
  + Various bug fixes
- Update to 2.2.355.0 2018-03-16
  + Fix S3Download to download from cross regions.
  + Various bug fixes
- Refresh patches for new version
  + fix-config.patch
  + fix-version.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170935)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Update to 2.3.415.0 (2019-01-25)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-01-08)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2018-12-14)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2018-11-26)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2018-10-23)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2018-10-23)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2018-10-23)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2018-10-09)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2018-10-02)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2018-10-02)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2018-09-17)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Add patch to remove unused import
  + remove-unused-import.patch
- Build-Depend on pkgconfig(systemd) instead of systemd
  + Allows OBS to depend on the -mini flavors
- Refresh patches for new version
  + fix-version.patch</changelog>
</package>
<package pkgid="48f4c594db59b88f96e8ad846b3b364646c7e4aaabe603af1c6088705d3ba108" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="2.3.978.0" rel="lp151.5.3.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537012800">- Update to 2.3.50.0 2018-09-12 (bsc#1108265)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user
    is reset on every session. You can change the permissions
    by moving the ssm-user to a less-privileged group or by
    changing the sudoers file. The ssm-user is not removed
    from the system when SSM Agent is uninstalled.
- Update to 2.3.13.0 2018-08-16
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 2018-08-02
  + NOTE: This build should not be installed for Windows since
    the SSM Agent service may remain in starting status if unable
    to authenticate to the Systems Manager service, which is
    fixed in the latest release.
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 2018-07-31
  + NOTE: This build should not be installed for Windows since
    you might see the error - "Encountered error while starting
    the plugin: Unable to locate cloudwatch.exe" for Cloudwatch
    plugin. This bug has been fixed in SSM Agent version 2.2.916.0.
    Also SSM Agent service may remain in starting status if unable
    to authenticate to the Systems Manager service, which is
    fixed in the latest release.
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 2018-06-26
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output
    to CloudWatch Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 2018-05-29
  + Various bug fixes
- Update to 2.2.607.0 2018-05-23
  + Various bug fixes
- Update to 2.2.546.0 2018-05-07
  + Bug fix to retry sending document results if they
    couldn't reach the service
- Update to 2.2.493.0 2018-04-25
  + NOTE: Downgrade to this version using AWS-UpdateSSMAgent
    is not permitted for agent installed using snap
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change
    permissions of directories
  + Bug fix to Cloudwatch plugin where StartType has
    duplicated Enabled value
- Update to 2.2.392.0 2018-03-27
  + Added support for agent hibernation so that Agent backs
    off or enters hibernation mode if it does not have access
    to the service
  + Various bug fixes
- Update to 2.2.355.0 2018-03-16
  + Fix S3Download to download from cross regions.
  + Various bug fixes
- Refresh patches for new version
  + fix-config.patch
  + fix-version.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170935)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Update to 2.3.415.0 (2019-01-25)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-01-08)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2018-12-14)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2018-11-26)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2018-10-23)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2018-10-23)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2018-10-23)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2018-10-09)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2018-10-02)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2018-10-02)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2018-09-17)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Add patch to remove unused import
  + remove-unused-import.patch
- Build-Depend on pkgconfig(systemd) instead of systemd
  + Allows OBS to depend on the -mini flavors
- Refresh patches for new version
  + fix-version.patch</changelog>
</package>
<package pkgid="a9db7f8adcffe519b1ff5b0a0e7269d977201fc5a2e8719192cfb9da3372ff36" name="ansible" arch="noarch">
  <version epoch="0" ver="2.8.1" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1530014400">- use python3 on (open)SUSE 15 or newer</changelog>
  <changelog author="boris@steki.net" date="1530532800">- updated to latest release 2.6.0
- New Plugins:
  + Callback:
  - cgroup_memory_recap
  - grafana_annotations
  - sumologic
  + Connection:
  - httpapi
  + Inventory:
  - foreman
  - gcp_compute
  - generator
  - nmap
  + Lookup:
  - onepassword
  - onepassword_raw
- Modules updates too many to mention here
  please look at package documentation directory (/usr/share/doc/packages/.../changelogs)
- bug fixes:
  - **Security Fix** - Some connection exceptions would cause no_log
    specified on a task to be ignored.  If this happened, the task information,
    including any private information coul d have been displayed to stdout and
    (if enabled, not the default) logged to a log file specified in
    ansible.cfg's log_path.  Additionally, sites which redirected stdout from
    ansible runs to a log file may have stored that private information onto
    disk that way as well.  (https://github.com/ansible/ansible/pull/41414)
  - Changed the admin_users config option to not include "admin" by default
    as admin is frequently used for a non-privileged account
    (https://github.com/ansible/ansible/pull/41164)
  - Changed the output to "text" for "show vrf" command as default "json"
    output format with respect to "eapi" transport was failing
    (https://github.com/ansible/ansible/pull/41470)
  - Document mode=preserve for both the copy and template module
  - Fix added for Digital Ocean Volumes API change causing Ansible to
    recieve an unexpected value in the response.
    (https://github.com/ansible/ansible/pull/41431)
  - Fix an encoding issue when parsing the examples from a plugins'
    documentation
  - Fix iosxr_config module to handle route-policy, community-set,
    prefix-set, as-path-set and rd-set blocks.  All these blocks are part of
    route-policy language of iosxr.
  - Fix mode=preserve with remote_src=True for the copy module
  - Implement mode=preserve for the template module
  - The yaml callback plugin now allows non-ascii characters to be
    displayed.
  - Various grafana_* modules - Port away from the deprecated
    b64encodestring function to the b64encode function instead.
    https://github.com/ansible/ansible/pull/38388
  - added missing 'raise' to exception definition
    https://github.com/ansible/ansible/pull/41690
  - allow custom endpoints to be used in the aws_s3 module
    (https://github.com/ansible/ansible/pull/36832)
  - allow set_options to be called multiple times
    https://github.com/ansible/ansible/pull/41913
  - ansible-doc - fixed traceback on missing plugins
    (https://github.com/ansible/ansible/pull/41167)
  - cast the device_mapping volume size to an int in the ec2_ami module
    (https://github.com/ansible/ansible/pull/40938)
  - copy - fixed copy to only follow symlinks for files in the non-recursive case
  - copy module - The copy module was attempting to change the mode of files
    for remote_src=True even if mode was not set as a parameter.  This
    failed on filesystems which do not have permission bits
    (https://github.com/ansible/ansible/pull/40099)
  - copy module - fixed recursive copy with relative paths
    (https://github.com/ansible/ansible/pull/40166)
  - correct debug display for all cases
    https://github.com/ansible/ansible/pull/41331
  - correctly check hostvars for vars term
    https://github.com/ansible/ansible/pull/41819
  - correctly handle yaml inventory files when entries are null dicts
    https://github.com/ansible/ansible/issues/41692
  - dynamic includes - Allow inheriting attributes from static parents
    (https://github.com/ansible/ansible/pull/38827)
  - dynamic includes - Don't treat undefined vars for conditional includes
    as truthy (https://github.com/ansible/ansible/pull/39377)
  - dynamic includes - Fix IncludedFile comparison for free strategy
    (https://github.com/ansible/ansible/pull/37083)
  - dynamic includes - Improved performance by fixing re-parenting on copy
    (https://github.com/ansible/ansible/pull/38747)
  - dynamic includes - Use the copied and merged task for calculating task
    vars (https://github.com/ansible/ansible/pull/39762)
  - file - fixed the default follow behaviour of file to be true
  - file module - Eliminate an error if we're asked to remove a file but
    something removes it while we are processing the request
    (https://github.com/ansible/ansible/pull/39466)
  - file module - Fix error when recursively assigning permissions and a
    symlink to a nonexistent file is present in the directory tree
    (https://github.com/ansible/ansible/issues/39456)
  - file module - Fix error when running a task which assures a symlink to a
    nonexistent file exists for the second and subsequent times
    (https://github.com/ansible/ansible/issues/39558)
  - file module - The file module allowed the user to specify src as a
    parameter when state was not link or hard.  This is documented as only
    applying to state=link or state=hard but in previous Ansible, this could
    have an effect in rare cornercases.  For instance, "ansible -m file -a
    'state=directory path=/tmp src=/var/lib'" would create /tmp/lib.  This
    has been disabled and a warning emitted (will change to an error in
    Ansible-2.10).
  - file module - The touch subcommand had its diff output broken during the
    2.6.x development cycle.  This is now fixed
    (https://github.com/ansible/ansible/issues/41755)
  - fix BotoCoreError exception handling
  - fix apt-mark on debian6 (https://github.com/ansible/ansible/pull/41530)
  - fix async for the aws_s3 module by adding async support to the action
    plugin (https://github.com/ansible/ansible/pull/40826)
  - fix decrypting vault files for the aws_s3 module
    (https://github.com/ansible/ansible/pull/39634)
  - fix errors with S3-compatible APIs if they cannot use ACLs for buckets
    or objects
  - fix permission handling to try to download a file even if the user does
    not have permission to list all objects in the bucket
  - fixed config required handling, specifically for _terms in lookups
    https://github.com/ansible/ansible/pull/41740
  - gce_net - Fix sorting of allowed ports
    (https://github.com/ansible/ansible/pull/41567)
  - group_by - support implicit localhost
    (https://github.com/ansible/ansible/pull/41860)
  - import/include - Ensure role handlers have the proper parent, allowing
    for correct attribute inheritance
    (https://github.com/ansible/ansible/pull/39426)
  - import_playbook - Pass vars applied to import_playbook into parsing of
    the playbook as they may be needed to parse the imported plays
    (https://github.com/ansible/ansible/pull/39521)
  - include_role/import_role - Don't overwrite included role handlers with
    play handlers on parse (https://github.com/ansible/ansible/pull/39563)
  - include_role/import_role - Fix parameter templating
    (https://github.com/ansible/ansible/pull/36372)
  - include_role/import_role - Use the computed role name for
    include_role/import_role so to diffentiate between names computed from
    host vars (https://github.com/ansible/ansible/pull/39516)-
    include_role/import_role - improved performance and recursion depth
    (https://github.com/ansible/ansible/pull/36470)
  - lineinfile - fix insertbefore when used with BOF to not insert duplicate
    lines (https://github.com/ansible/ansible/issues/38219)
  - password lookup - Do not load password lookup in network filters,
    allowing the password lookup to be overriden
    (https://github.com/ansible/ansible/pull/41907)
  - pause - ensure ctrl+c interrupt works in all cases
    (https://github.com/ansible/ansible/issues/35372)
  - powershell - use the tmpdir set by `remote_tmp` for become/async tasks
    instead of the generic $env:TEMP -
    https://github.com/ansible/ansible/pull/40210
  - selinux - correct check mode behavior to report same changes as normal
    mode (https://github.com/ansible/ansible/pull/40721)
  - spwd - With python 3.6 spwd.getspnam returns PermissionError instead of
    KeyError if user does not have privileges
    (https://github.com/ansible/ansible/issues/39472)
  - synchronize - Ensure the local connection created by synchronize uses
    _remote_is_local=True, which causes ActionBase to build a local tmpdir
    (https://github.com/ansible/ansible/pull/40833)
  - template - Fix for encoding issues when a template path contains
    non-ascii characters and using the template path in ansible_managed
    (https://github.com/ansible/ansible/issues/27262)
  - template action plugin - fix the encoding of filenames to avoid
    tracebacks on Python2 when characters that are not present in the user's
    locale are present.  (https://github.com/ansible/ansible/pull/39424)
  - user - only change the expiration time when necessary
    (https://github.com/ansible/ansible/issues/13235)
  - uses correct conn info for reset_connection
    https://github.com/ansible/ansible/issues/27520
  - win_environment - Fix for issue where the environment value was deleted
    when a null value or empty string was set -
    https://github.com/ansible/ansible/issues/40450
  - win_file - fix issue where special chars like [ and ] were not being
    handled correctly https://github.com/ansible/ansible/pull/37901
  - win_get_url - fixed a few bugs around authentication and force no when
    using an FTP URL
  - win_iis_webapppool - redirect some module output to null so Ansible can
    read the output JSON https://github.com/ansible/ansible/issues/40874
  - win_template - fix when specifying the dest option as a directory with
    and without the trailing slash
    https://github.com/ansible/ansible/issues/39886
  - win_updates - Added the ability to run on a scheduled task for older
    hosts so async starts working again -
    https://github.com/ansible/ansible/issues/38364
  - win_updates - Fix logic when using a whitelist for multiple updates
  - win_updates - Fix typo that hid the download error when a download
    failed
  - win_updates - Fixed issue where running win_updates on async fails
    without any error
  - windows become - Show better error messages when the become process fails
  - winrm - Add better error handling when the kinit process fails
  - winrm - allow `ansible_user` or `ansible_winrm_user` to override
    `ansible_ssh_user` when both are defined in an inventory -
    https://github.com/ansible/ansible/issues/39844
  - winrm - ensure pexpect is set to not echo the input on a failure and have
    a manual sanity check afterwards
    https://github.com/ansible/ansible/issues/41865
  - winrm connection plugin - Fix exception messages sometimes raising a
    traceback when the winrm connection plugin encounters an unrecoverable
    error.  https://github.com/ansible/ansible/pull/39333
  - xenserver_facts - ensure module works with newer versions of XenServer
    (https://github.com/ansible/ansible/pull/35821)</changelog>
  <changelog author="mrueckert@suse.de" date="1530532801">- revert some unneeded changes from spec-cleaner</changelog>
  <changelog author="lars@linux-schulserver.de" date="1532952000">- update to 2.6.2
  Minor Changes
  + Sceanrio guide for removing an existing virtual machine is added.
  + lineinfile - add warning when using an empty regexp
  + Restore module_utils.basic.BOOLEANS variable for backwards compatibility
    with the module API in older ansible releases.
  Bugfixes:
  + Add text output along with structured output in nxos_facts
  + Allow more than one page of results by using the right pagination
    indicator ('NextMarker' instead of 'NextToken').
  + Fix an atomic_move error that is 'true', but misleading.
    Now we show all 3 files involved and clarify what happened.
  + Fix eos_l2_interface eapi.
  + Fix fetching old style facts in junos_facts module
  + Fix get_device_info nxos zero or more whitespace regex
  + Fix nxos CI failures
  + Fix nxos_nxapi default http behavior
  + Fix nxos_vxlan_vtep_vni
  + Fix regex network_os_platform nxos
  + Refactor nxos cliconf get_device_info for non structured
    output supported devices
  + To fix the NoneType error raised in ios_l2_interface when
    Access Mode VLAN is unassigned
  + emtpy host/group name is an error
  + fix default SSL version for docker modules
  + fix mail module when using starttls
  + fix nmap config example
  + fix ps detection of service
  + fix the remote tmp folder permissions issue when becoming a non
    admin user
  + fix typoe in sysvinit that breaks update.rc-d detection
  + fixes docker_container compatibilty with docker-py &lt; 2.2
  + get_capabilities in nxapi module_utils should not return empty dictionary
  + inventory - When using an inventory directory, ensure extension
    comparison uses text types
  + ios_vlan - fix unable to identify correct vlans issue
  + nxos_facts warning message improved
  + openvswitch_db - make 'key' argument optional
  + pause - do not set stdout to raw mode when redirecting to a file
  + pause - nest try except when importing curses to gracefully fail
    if curses is not present
  + plugins/inventory/openstack.py - Do not create group with empty
    name if region is not set
  + preseve delegation info on nolog
  + remove ambiguity when it comes to 'the source'
  + remove dupes from var precedence
  + restores filtering out conflicting facts
  + user - fix bug that resulted in module always reporting a change when
    specifiying the home directory on FreeBSD
  + user - use correct attribute name in FreeBSD for creat_home
  + vultr - Do not fail trying to load configuration from ini files if
    required variables have been set as environment variables.
  + vyos_command correcting conditionals looping
  + win_chocolatey - enable TLSv1.2 support when downloading the
    Chocolatey installer
  + win_reboot - fix for handling an already scheduled reboot and other
    minor log formatting issues
  + win_reboot - fix issue when overridding connection timeout hung
    the post reboot uptime check
  + win_reboot - handle post reboots when running test_command
  + win_security_policy - allows an empty string to reset a policy value
  + win_share - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_unzip - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_updates - fixed module return value is lost in error in some cases
  + win_user - Use LogonUser to validate the password as it does not
    rely on SMB/RPC to be available
  + Security Fix - avoid loading host/group vars from cwd when not
    specifying a playbook or playbook base dir
  + Security Fix - avoid using ansible.cfg in a world writable dir.
  + Fix junos_config confirm commit timeout issue
    (https://github.com/ansible/ansible/pull/41527)
  + file module - The touch subcommand had its diff output broken during
    the 2.6.x development cycle. This is now fixed.
  + inventory manager - This fixes required options being populated before
    the inventory config file is read, so the required options may be
    set in the config file.
  + nsupdate - allow hmac-sha384 https://github.com/ansible/ansible/pull/42209
  + win_domain - fixes typo in one of the AD cmdlets
    https://github.com/ansible/ansible/issues/41536
  + win_group_membership - uses the internal Ansible SID conversion logic
    and uses that when comparing group membership instead of the name
- use fdupes to save some space in python_sitelib
- define BuildRoot on older distributions like SLE-11
- be a bit more flexible with the ending of manpage files to allow
  Fedora builds to succeed</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1535371200">- update to 2.6.3
  Bugfixes:
  * Fix lxd module to be idempotent when the given configuration for
  the lxd container has not changed
  * Fix setting value type to str to avoid conversion during template
  read. Fix Idempotency in case of 'no key'.
  * Fix the mount module's handling of swap entries in fstab
  * The fix for (CVE-2018-10875) prints out a warning message about
  skipping a config file from a world writable current working
  directory. However, if the user explicitly specifies that the
  config file should be used via the ANSIBLE_CONFIG environment
  variable then Ansible would honor that but still print out the
  warning message. This has been fixed so that Ansible honors the
  user's explicit wishes and does not print a warning message in
  that circumstance.
  * To fix the bug where existing host_record was deleted when existing
  record name is used with different IP.
  * VMware handle pnic in proxyswitch
  * fix azure security group cannot add rules when purge_rule set to false.
  * fix azure_rm_deployment collect tags from existing Resource Group.
  * fix azure_rm_loadbalancer_facts list takes at least 2 arguments.
  * fix for the bundled selectors module (used in the ssh and local
  connection plugins) when a syscall is restarted after being
  interrupted by a signal
  * get_url - fix the bug that get_url does not change mode when checksum matches
  * nicer error when multiprocessing breaks
  * openssl_certificate - Convert valid_date to bytes for conversion
  * openstack_inventory.py dynamic inventory file fixed the plugin to the
  script so that it will work with current ansible-inventory. Also
    redirect stdout before dumping the ouptput, because not doing so will
  cause JSON parse errors in some cases.
  * slack callback - Fix invocation by looking up data from cli.options
  * sysvinit module: handle values of optional parameters. Don't disable
  service when enabled parameter isn't set. Fix command when arguments
  parameter isn't set.
  * vars_prompt - properly template play level variables in vars_prompt
  * win_domain - ensure the Netlogon service is up and running after
  promoting host to controller
  * win_domain_controller - ensure the Netlogon service is up and running
  after promoting host to controller</changelog>
  <changelog author="lars@linux-schulserver.de" date="1536667200">- update to 2.6.4
  Minor Changes:
  * add azure_rm_storageaccount support to StorageV2 kind.
  * import_tasks - Do not allow import_tasks to transition to dynamic
    if the file is missing
  Bugfixes:
  * Add md5sum check in nxos_file_copy module
  * Allow arbitrary log_driver for docker_container
  * Fix Python2.6 regex bug terminal plugin nxos, iosxr
  * Fix check_mode in nxos_static_route module
  * Fix glob path of rc.d Some distribtuions like SUSE has the rc%.d
    directories under /etc/init.d
  * Fix network config diff issue for lines
  * Fixed an issue where ansible_facts.pkg_mgr would incorrectly set
    to zypper on Debian/Ubuntu systems that happened to have the
    command installed
  * The docker_* modules respect the DOCKER_* environment variables again
  * The fix for CVE-2018-10875 prints out a warning message about
    skipping a config file from a world writable current working directory.
    However, if the user is in a world writable current working directory
    which does not contain a config file, it should not print a warning
    message. This release fixes that extaneous warning.
  * To resolve nios_network issue where vendor-encapsulated-options
    can not have a use_option flag.
  * To resolve the issue of handling exception for Nios lookup gracefully.
  * always correctly template no log for tasks
  * ansible-galaxy - properly list all roles in roles_path
  * basic.py - catch ValueError in case a FIPS enabled platform
    raises this exception
  * docker_container: fixing working_dir idempotency problem
  * docker_container: makes unit parsing for memory sizes more consistent,
    and fixes idempotency problem when kernel_memory is set
  * fix example code for AWS lightsail documentation
  * fix the enable_snat parameter that is only supposed to be used by
    an user with the right policies.
  * fixes docker_container check and debug mode
  * improves docker_container idempotency
  * ios_l2_interface - fix bug when list of vlans ends with comma
  * ios_l2_interface - fix issue with certain interface types
  * ios_user - fix unable to delete user admin issue
  * ios_vlan - fix unable to work on certain interface types issue
  * nxos_facts test lldp feature and fix nxapi check_rc
  * nxos_interface port-channel idempotence fix for mode
  * nxos_linkagg mode fix
  * nxos_system idempotence fix
  * nxos_vlan refactor to support non structured output
  * one_host - fixes settings via environment variables
  * use retry_json nxos_banner
  * user - Strip trailing comments in /etc/default/passwd
  * user - when creating a new user without an expiration date,
    properly set no expiration rather that expirining the account
  * win_domain_computer - fixed deletion of computer active directory
    object that have dependent objects
  * win_domain_computer - fixed error in diff_support
  * win_domain_computer - fixed error when description parameter is empty
  * win_psexec - changed code to not escape the command option when building the args
  * win_uri -- Fix support for JSON output when charset is set
  * win_wait_for - fix issue where timeout doesn't wait unless state=drained</changelog>
  <changelog author="sean@suspend.net" date="1539000000">- update to 2.7.0
  Major changes:
  * Allow config to enable native jinja types
  * Remove support for simplejson
  * yum and dnf modules now at feature parity
  Minor changes:
  * Changed the prefix of all Vultr modules from vr to vultr
  * Enable installroot tests for yum4(dnf) integration testing, dnf backend now supports that
  * Fixed timer in exponential backoff algorithm in vmware.py
  Bugfixes:
  * Security Fix - avoid loading host/group vars from cwd when not specifying a playbook or playbook base dir
  * Security Fix - avoid using ansible.cfg in a world writable dir
  * Some connection exception would cause no_log specified on a task to be ignored (stdout info disclosure)
  * Fix glob path of rc.d (SUSE-specific)
  * Fix lambda_policy updates
  * Fix alt linux detection/matching</changelog>
  <changelog author="sean@suspend.net" date="1540641600">- update to 2.7.1
  Minor changes:
  * Fix yum module to properly check for empty conf_file value
  * added capability to set the scheme for the consul_kv lookup
  * added optional certificate and certificate validation for consul_kv lookups
  * dnf - properly handle modifying the enable/disable excludes data field
  * dnf appropriately handles disable_excludes repoid argument
  * dnf proerly honors disable_gpg_check for local package installation
  * fix yum module to handle list argument optional empty strings properly
  * netconf_config - Make default_operation optional in netconf_config module
  * yum - properly handle proxy password and username embedded in url
  * yum/dnf - fail when space separated string of names</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543406400">- update to version 2.7.2
  Minor changes:
  * Fix documentation for cloning template
  * Parsing plugin filter may raise TypeError, gracefully handle this
  exception and let user know about the syntax error in plugin filter file
  * Scenario guide for VMware HTTP API usage
  * Update plugin filter documentation
  * fix yum and dnf autoremove input sanitization to properly warn user if
  invalid options passed and update documentation to match
  * improve readability and fix privileges names on vmware scenario_clone_template
  * k8s - updated module documentation to mention how to avoid SSL validation errors
  * yum - when checking for updates, now properly include Obsoletes
  (both old and new) package data in the module JSON output</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752000">- update to version 2.7.3
  Minor Changes:
  * Document Path and Port are mutually exclusive parameters in wait_for module
  * Puppet module remove --ignorecache to allow Puppet 6 support
  * dnf properly support modularity appstream installation via overloaded group
  modifier syntax
  * proxmox_kvm - fix exception
  * win_security_policy - warn users to use win_user_right instead when editing
  Privilege Rights
  Bugfixes:
  * Fix the issue that FTD HTTP API retries authentication-related HTTP requests
  * Fix the issue that module fails when the Swagger model does not have required fields
  * Fix the issue with comparing string-like objects
  * Fix using omit on play keywords
  * Windows - prevent sensitive content from appearing in scriptblock logging (CVE-2018-16859)
  * apt_key - Disable TTY requirement in GnuPG for the module to work correctly
  when SSH pipelining is enabled
  * better error message when bad type in config, deal with EVNAR= more gracefully
  * configuration retrieval would fail on non primed plugins
  * cs_template - Fixed a KeyError on state=extracted
  * docker_container - fix idempotency problems with docker-py caused by previous
  init idempotency fix
  * docker_container - fix interplay of docker-py version check with argument_spec
  validation improvements
  * docker_network - driver_options containing Python booleans would cause Docker
    to throw exceptions
  * ec2_group - Fix comparison of determining which rules to purge by ignoring descriptions
  * pip module - fix setuptools/distutils replacement
  * sysvinit - enabling a service should use "defaults" if no runlevels are specified</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752001">- update to version 2.7.4
  Bugfixes:
  * powershell - add lib/ansible/executor/powershell to the packaging data</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1544961600">- update to version 2.7.5
  Minor Changes:
  * Add warning about falling back to jinja2_native=false when Jinja2 version is lower than 2.10.
  * Change the position to search os-release since clearlinux new versions are providing /etc/os-release too
  * Fixed typo in ansible-galaxy info command.
  * Improve the deprecation message for squashing, to not give misleading advice
  * Update docs and return section of vmware_host_service_facts module.
  * ansible-galaxy: properly warn when git isn't found in an installed bin path instead of traceback
  * dnf module properly load and initialize dnf package manager plugins
  * docker_swarm_service: use docker defaults for the user parameter if it is set to null
  Bugfixes:
  * ACME modules: improve error messages in some cases (include error returned by server).
  * Added unit test for VMware module_utils.
  * Also check stdout for interpreter errors for more intelligent messages to user
  * Backported support for Devuan-based distribution
  * Convert hostvars data in OpenShift inventory plugin to be serializable by ansible-inventory
  * Fix AttributeError (Python 3 only) when an exception occurs while rendering a template
  * Fix N3K power supply facts (https://github.com/ansible/ansible/pull/49150).
  * Fix NameError nxos_facts (https://github.com/ansible/ansible/pull/48981).
  * Fix VMware module utils for self usage.
  * Fix error in OpenShift inventory plugin when a pod has errored and is empty
  * Fix if the route table changed to none (https://github.com/ansible/ansible/pull/49533)
  * Fix iosxr netconf plugin response namespace (https://github.com/ansible/ansible/pull/49300)
  * Fix issues with nxos_install_os module for nxapi (https://github.com/ansible/ansible/pull/48811).
  * Fix lldp and cdp neighbors information (https://github.com/ansible/ansible/pull/48318)(https://github.com/ansible/ansible/pull/48087)(https://github.com/ansible/ansible/pull/49024).
  * Fix nxos_interface and nxos_linkagg Idempotence issue (https://github.com/ansible/ansible/pull/46437).
  * Fix traceback when updating facts and the fact cache plugin was nonfunctional
  * Fix using vault encrypted data with jinja2_native (https://github.com/ansible/ansible/issues/48950)
  * Fixed: Make sure that the files excluded when extracting the archive are not checked. https://github.com/ansible/ansible/pull/45122
  * Fixes issue where a password parameter was not set to no_log
  * Respect no_log on retry and high verbosity (CVE-2018-16876)
  * aci_rest - Fix issue ignoring custom port
  * acme_account, acme_account_facts - in some cases, it could happen that the modules return information on disabled accounts accidentally returned by the ACME server.
  * docker_swarm - decreased minimal required API version from 1.35 to 1.25; some features require API version 1.30 though.
  * docker_swarm_service: fails because of default "user: root" (https://github.com/ansible/ansible/issues/49199)
  * ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different
  * fix azure_rm_image module use positional parameter (https://github.com/ansible/ansible/pull/49394)
  * fixes an issue with dict_merge in network utils (https://github.com/ansible/ansible/pull/49474)
  * gcp_utils - fix google auth scoping issue with application default credentials or google cloud engine credentials. Only scope credentials that can be scoped.
  * mail - fix python 2.7 regression
  * openstack - fix parameter handling when cloud provided as dict https://github.com/ansible/ansible/issues/42858
  * os_user - Include domain parameter in user deletion https://github.com/ansible/ansible/issues/42901
  * os_user - Include domain parameter in user lookup https://github.com/ansible/ansible/issues/42901
  * ovirt_storage_connection - comparing passwords breaks idempotency in update_check (https://github.com/ansible/ansible/issues/48933)
  * paramiko_ssh - improve log message to state the connection type
  * reboot - use IndexError instead of TypeError in exception
  * redis cache - Support version 3 of the redis python library (https://github.com/ansible/ansible/issues/49341)
  * sensu_silence - Cast int for expire field to avoid call failure to sensu API.
  * vmware_host_service_facts - handle exception when service package does not have package name.
  * win_nssm - Switched to Argv-ToString for escaping NSSM credentials (https://github.com/ansible/ansible/issues/48728)
  * zabbix_hostmacro - Added missing validate_certs logic for running module against Zabbix servers with untrused SSL certificates (https://github.com/ansible/ansible/issues/47611)
  * zabbix_hostmacro - Fixed support for user macros with context (https://github.com/ansible/ansible/issues/46953)</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1547985600">- update to version 2.7.6
  Minor Changes:
  * Added documentation about using VMware dynamic inventory plugin.
  * Fixed bug around populating host_ip in hostvars in vmware_vm_inventory.
  * Image reference change in Azure VMSS is detected and applied correctly.
  * docker_volume - reverted changed behavior of force, which was released in Ansible 2.7.1 to 2.7.5, and Ansible 2.6.8 to 2.6.11. Volumes are now only recreated if the parameters changed and force is set to true (instead of or). This is the behavior which has been described in the documentation all the time.
  * set ansible_os_family from name variable in os-release
  * yum and dnf can now handle installing packages from URIs that are proxy redirects and don't end in the .rpm file extension
  Bugfixes:
  * Added log message at -vvvv when using netconf connection listing connection details.
  * Changes how ansible-connection names socket lock files. They now use the same name as the socket itself, and as such do not lock other attempts on connections to the same host, or cause issues with overly-long hostnames.
  * Fix mandatory statement error for junos modules (https://github.com/ansible/ansible/pull/50138)
  * Moved error in netconf connection plugin from at import to on connection.
  * This reverts some changes from commit 723daf3. If a line is found in the file, exactly or via regexp matching, it must not be added again. insertafter/insertbefore options are used only when a line is to be inserted, to specify where it must be added.
  * allow using openstack inventory plugin w/o a cache
  * callbacks - Do not filter out exception, warnings, deprecations on failure when using debug (https://github.com/ansible/ansible/issues/47576)
  * certificate_complete_chain - fix behavior when invalid file is parsed while reading intermediate or root certificates.
  * copy - Ensure that the src file contents is converted to unicode in diff information so that it is properly wrapped by AnsibleUnsafeText to prevent unexpected templating of diff data in Python3 (https://github.com/ansible/ansible/issues/45717)
  * correct behaviour of verify_file for vmware inventory plugin, it was always returning True
  * dnf - fix issue where conf_file was not being loaded properly
  * dnf - fix update_cache combined with install operation to not cause dnf transaction failure
  * docker_container - fix network_mode idempotency if the container:&lt;container-name&gt; form is used (as opposed to container:&lt;container-id&gt;) (https://github.com/ansible/ansible/issues/49794)
  * docker_container - warning when non-string env values are found, avoiding YAML parsing issues. Will be made an error in Ansible 2.8. (https://github.com/ansible/ansible/issues/49802)
  * docker_swarm_service - Document labels and container_labels with correct type.
  * docker_swarm_service - Document limit_memory and reserve_memory correctly on how to specify sizes.
  * docker_swarm_service - Document minimal API version for configs and secrets.
  * docker_swarm_service - fix use of Docker API so that services are not detected as present if there is an existing service whose name is a substring of the desired service
  * docker_swarm_service - fixing falsely reporting update_order as changed when option is not used.
  * document old option that was initally missed
  * ec2_instance now respects check mode https://github.com/ansible/ansible/pull/46774
  * fix for network_cli - ansible_command_timeout not working as expected (#49466)
  * fix handling of firewalld port if protocol is missing
  * fix lastpass lookup failure on python 3 (https://github.com/ansible/ansible/issues/42062)
  * flatpak - Fixed Python 2/3 compatibility
  * flatpak - Fixed issue where newer versions of flatpak failed on flatpak removal
  * flatpak_remote - Fixed Python 2/3 compatibility
  * gcp_compute_instance - fix crash when the instance metadata is not set
  * grafana_dashboard - Fix a pair of unicode string handling issues with version checking (https://github.com/ansible/ansible/pull/49194)
  * host execution order - Fix reverse_inventory not to change the order of the items before reversing on python2 and to not backtrace on python3
  * icinga2_host - fixed the issue with not working use_proxy option of the module.
  * influxdb_user - An unspecified password now sets the password to blank, except on existing users. This previously caused an unhandled exception.
  * influxdb_user - Fixed unhandled exception when using invalid login credentials (https://github.com/ansible/ansible/issues/50131)
  * openssl_* - fix error when path contains a file name without path.
  * openssl_csr - fix problem with idempotency of keyUsage option.
  * openssl_pkcs12 - now does proper path expansion for ca_certificates.
  * os_security_group_rule - os_security_group_rule doesn't exit properly when secgroup doesn't exist and state=absent (https://github.com/ansible/ansible/issues/50057)
  * paramiko_ssh - add auth_timeout parameter to ssh.connect when supported by installed paramiko version. This will prevent "Authentication timeout" errors when a slow authentication step (&gt;30s) happens with a host (https://github.com/ansible/ansible/issues/42596)
  * purefa_facts and purefb_facts now correctly adds facts into main ansible_fact dictionary (https://github.com/ansible/ansible/pull/50349)
  * reboot - add appropriate commands to make the plugin work with VMware ESXi (https://github.com/ansible/ansible/issues/48425)
  * reboot - add support for rebooting AIX (https://github.com/ansible/ansible/issues/49712)
  * reboot - gather distribution information in order to support Alpine and other distributions (https://github.com/ansible/ansible/issues/46723)
  * reboot - search common paths for the shutdown command and use the full path to the binary rather than depending on the PATH of the remote system (https://github.com/ansible/ansible/issues/47131)
  * reboot - use a common set of commands for older and newer Solaris and SunOS variants (https://github.com/ansible/ansible/pull/48986)
  * redfish_utils - fix reference to local variable 'systems_service'
  * setup - fix the rounding of the ansible_memtotal_mb value on VMWare vm's (https://github.com/ansible/ansible/issues/49608)
  * vultr_server - fixed multiple ssh keys were not handled.
  * win_copy - Fix copy of a dir that contains an empty directory - https://github.com/ansible/ansible/issues/50077
  * win_firewall_rule - Remove invalid 'bypass' action
  * win_lineinfile - Fix issue where a malformed json block was returned causing an error
  * win_updates - Correctly report changes on success</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549713600">- Update to version 2.7.7
  Minor Changes:
  * Allow check_mode with supports_generate_diff capability in cli_config. (https://github.com/ansible/ansible/pull/51417)
  * Fixed typo in vmware documentation fragment. Changed "supported added" to "support added".
  Bugfixes:
  * All K8S_AUTH_* environment variables are now properly loaded by the k8s lookup plugin
  * Change backup file globbing for network _config modules so backing up one host's config will not delete the backed up config of any host whose hostname is a subset of the first host's hostname (e.g., switch1 and switch11)
  * Fixes bug where nios_a_record wasn't getting deleted if an uppercase named a_record was being passed. (https://github.com/ansible/ansible/pull/51539)
  * aci_aaa_user - Fix setting user description (https://github.com/ansible/ansible/issues/51406)
  * apt_repository - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * archive - Fix check if archive is created in path to be removed
  * azure_rm inventory plugin - fix azure batch request (https://github.com/ansible/ansible/pull/50006)
  * cnos_backup - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * cnos_image - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * consul_kv - minor error-handling bugfix under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * copy - align invocation in return value between check and normal mode
  * delegate_facts - fix to work properly under block and include_role (https://github.com/ansible/ansible/pull/51553)
  * docker_swarm_service - fix endpoint_mode and publish idempotency.
  * ec2_instance - Correctly adds description when adding a single ENI to the instance
  * ensure we have a XDG_RUNTIME_DIR, as it is not handled correctly by some privilege escalation configurations
  * file - Allow state=touch on file the user does not own https://github.com/ansible/ansible/issues/50943
  * fix ansible-pull hanlding of extra args, complex quoting is needed for inline JSON
  * fix ansible_connect_timeout variable in network_cli,netconf,httpapi and nxos_install_os timeout check
  * netapp_e_storagepool - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * onepassword_facts - Fix an issue looking up some 1Password items which have a 'password' attribute alongside the 'fields' attribute, not inside it.
  * prevent import_role from inserting dupe into roles: execution when duplicate signature role already exists in the section.
  * reboot - Fix bug where the connection timeout was not reset in the same task after rebooting
  * ssh connection - do not retry with invalid credentials to prevent account lockout (https://github.com/ansible/ansible/issues/48422)
  * systemd - warn when exeuting in a chroot environment rather than failing (https://github.com/ansible/ansible/pull/43904)
  * win_chocolatey - Fix hang when used with proxy for the first time - https://github.com/ansible/ansible/issues/47669
  * win_power_plan - Fix issue where win_power_plan failed on newer Windows 10 builds - https://github.com/ansible/ansible/issues/43827</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551009600">- Update to version 2.7.8
  Minor Changes:
  * Raise AnsibleConnectionError on winrm connnection errors
  Bugfixes:
  * Backport of https://github.com/ansible/ansible/pull/46478 , fixes name collision in haproxy module
  * Fix aws_ec2 inventory plugin code to automatically populate regions when missing as documentation states, also leverage config system vs self default/type validation
  * Fix unexpected error when using Jinja2 native types with non-strict constructed keyed_groups (https://github.com/ansible/ansible/issues/52158).
  * If an ios module uses a section filter on a device which does not support it, retry the command without the filter.
  * acme_challenge_cert_helper * the module no longer crashes when the required ``cryptography`` library cannot be found.
  * azure_rm_managed_disk_facts * added missing implementation of listing managed disks by resource group
  * azure_rm_mysqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_postgresqldatabase * fix force_update bug (https://github.com/ansible/ansible/issues/50978).
  * azure_rm_postgresqldatabase * fix force_update bug.
  * azure_rm_postgresqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_sqlserver * fix for tags support
  * azure_rm_virtualmachine * fixed several crashes in module
  * azure_rm_virtualmachine_facts * fix crash when vm created from custom image
  * azure_rm_virtualmachine_facts * fixed crash related to VM with managed disk attached
  * ec2 * Correctly sets the end date of the Spot Instance request. Sets `ValidUntil` value in proper way so it will be auto-canceled through `spot_wait_timeout` interval.
  * openssl_csr * fixes idempotence problem with PyOpenSSL backend when no Subject Alternative Names were specified.
  * openstack inventory plugin * send logs from sdk to stderr so they do not combine with output
  * psrp * do not display bootstrap wrapper for each module exec run
  * redfish_utils * get standard properties for firmware entries (https://github.com/ansible/ansible/issues/49832)
  * remote home directory * Disallow use of remote home directories that include relative pathing by means of `..` (CVE-2019-3828) (https://github.com/ansible/ansible/pull/52133)
  * ufw * when using ``state: reset`` in check mode, ``ufw --dry-run reset`` was executed, which causes a loss of firewall rules. The ``ufw`` module was adjusted to no longer run ``ufw --dry-run reset`` to prevent this from happening.
  * ufw: make sure that only valid values for ``direction`` are passed on.
  * update GetBiosBootOrder to use standard Redfish resources (https://github.com/ansible/ansible/issues/47571)
  * win become * Fix some scenarios where become failed to create an elevated process
  * win_psmodule * the NuGet package provider will be updated, if needed, to avoid issue under adding a repository
  * yum * Remove incorrect disable_includes error message when using disable_excludes (https://github.com/ansible/ansible/issues/51697)
  * yum * properly handle a proxy config in yum.conf for an unauthenticated proxy</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1552737600">- update URL (use SSL version of the URL)
- prepare update for multiple releases (bsc#1102126, bsc#1109957)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1552824000">- Update to version 2.7.9
  Minor Changes
  * Add missing import for ConnectionError in edge and routeros module_utils.
  * ``to_yaml`` filter updated to maintain formatting consistency when used
    with ``pyyaml`` versions 5.1 and later
    (https://github.com/ansible/ansible/pull/53772)
  * docker_image * set ``changed`` to ``false`` when using ``force: yes`` to
    tag or push an image that ends up being identical to one already present on
    the Docker host or Docker registry.
  * jenkins_plugin * Set new default value for the update_url parameter
    (https://github.com/ansible/ansible/issues/52086)
  Bugfixes
  * Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
  * Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
  * Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
  * Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
  * If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
  * allow nice error to work when auto plugin reads file w/o `plugin` field
  * ansible-doc * Fix traceback on providing arguemnt --all to ansible-doc command
  * azure_rm_virtualmachine_facts * fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
  * basic * modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
  * cloudscale * Fix compatibilty with Python3 in version 3.5 and lower.
  * convert input into text to ensure valid comparisons in nmap inventory plugin
  * dict2items * Allow dict2items to work with hostvars
  * dnsimple * fixed a KeyError exception related to record types handling.
  * docker_container * now returns warnings from docker daemon on container creation and updating.
  * docker_swarm * Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
  * docker_swarm * do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
  * docker_swarm * fixes idempotency for the ``ca_force_rotate`` option.
  * docker_swarm * improve Swarm detection.
  * docker_swarm * improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
  * docker_swarm * now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
  * docker_swarm * properly implement check mode (it did apply changes).
  * docker_swarm * the ``force`` option was ignored when ``state: present``.
  * docker_swarm_service * do basic validation of ``publish`` option if specified (must be list of dicts).
  * docker_swarm_service * don't crash when ``publish`` is not specified.
  * docker_swarm_service * fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
  * docker_swarm_service * the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
  * ec2 * if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
  * fix DNSimple to ensure check works even when the number of records is larger than 100
  * get_url * return no change in check mode when checksum matches
  * inventory plugins * Fix creating groups from composed variables by getting the latest host variables
  * inventory_aws_ec2 * fix no_log indentation so AWS temporary credentials aren't displayed in tests
  * jenkins_plugin * Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
  * lvol * fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
  * mysql * MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
  * mysql * fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
  * mysql_user: match backticks, single and double quotes when checking user privileges.
  * onepassword_facts * Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
  * openssl_certificate * ``has_expired`` correctly checks if the certificate is expired or not
  * openssl_certificate * fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
  * openssl_certificate * make sure that extensions are actually present when their values should be checked.
  * openssl_csr * improve ``subject`` validation.
  * openssl_csr * improve error messages for invalid SANs.
  * play order is now applied under all circumstances, fixes
  * remote_management foreman * Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
  * rhsm_repository * handle systems without any repos
  * skip invalid plugin after warning in loader
  * urpmi module * fixed issue
  * win_certificate_store * Fix exception handling typo
  * win_chocolatey * Fix issue when parsing a beta Chocolatey install * https://github.com/ansible/ansible/issues/52331
  * win_chocolatey_source * fix bug where a Chocolatey source could not be disabled unless ``source`` was also set * https://github.com/ansible/ansible/issues/50133
  * win_domain * Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
  * win_domain * Fix when running without credential delegated authentication * https://github.com/ansible/ansible/issues/53182
  * win_file * Fix issue when managing hidden files and directories * https://github.com/ansible/ansible/issues/42466
  * winrm * attempt to recover from a WinRM send input failure if possible
  * zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
  New Plugins
  * vmware_vm_inventory * VMware Guest inventory source</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554379200">- Update to version 2.7.10
  Minor Changes
- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
  Bugfixes
- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
- foreman - fix Foreman returning host parameters
- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
- include_tasks - Fixed an unexpected exception if no file was given to include.
- openssl_certificate - fix ``state=absent``.
- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_psexec - Support executables with a space in the path
- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
- windows - Fixed various module utils that did not work with path that had glob like chars
- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1558526400">- Update to version 2.8.0
  Major changes:
  * Experimental support for Ansible Collections and content namespacing -
    Ansible content can now be packaged in a collection and addressed via
    namespaces. This allows for easier sharing, distribution, and installation
    of bundled modules/roles/plugins, and consistent rules for accessing
    specific content via namespaces.
  * Python interpreter discovery - The first time a Python module runs on a
    target, Ansible will attempt to discover the proper default Python
    interpreter to use for the target platform/version (instead of immediately
    defaulting to /usr/bin/python). You can override this behavior by
    setting ansible_python_interpreter or via config.
    (see https://github.com/ansible/ansible/pull/50163)
  * become - The deprecated CLI arguments for --sudo, --sudo-user,
  - -ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in
    favor of the more generic --become, --become-user, --become-method, and
  - -ask-become-pass.
  * become - become functionality has been migrated to a plugin architecture,
    to allow customization of become functionality and 3rd party become methods
    (https://github.com/ansible/ansible/pull/50991)
- addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837
  For the full changelog see /usr/share/doc/packages/ansible/changelogs or online:
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1559995200">- Update to version 2.8.1
  Full changelog is at /usr/share/doc/packages/ansible/changelogs/
  Bugfixes
  - -------
  - ACI - DO not encode query_string
  - ACI modules - Fix non-signature authentication
  - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading
  - Fix "Interface not found" errors when using eos_l2_interface with nonexistant
    interfaces configured
  - Fix cannot get credential when `source_auth` set to `credential_file`.
  - Fix netconf_config backup string issue
  - Fix privilege escalation support for the docker connection plugin when
    credentials need to be supplied (e.g. sudo with password).
  - Fix vyos cli prompt inspection
  - Fixed loading namespaced documentation fragments from collections.
  - Fixing bug came up after running cnos_vrf module against coverity.
  - Properly handle data importer failures on PVC creation, instead of timing out.
  - To fix the ios static route TC failure in CI
  - To fix the nios member module params
  - To fix the nios_zone module idempotency failure
  - add terminal initial prompt for initial connection
  - allow include_role to work with ansible command
  - allow python_requirements_facts to report on dependencies containing dashes
  - asa_config fix
  - azure_rm_roledefinition - fix a small error in build scope.
  - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network
    peering.
  - cgroup_perf_recap - When not using file_per_task, make sure we don't
    prematurely close the perf files
  - display underlying error when reporting an invalid ``tasks:`` block.
  - dnf - fix wildcard matching for state: absent
  - docker connection plugin - accept version ``dev`` as 'newest version' and
    print warning.
  - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available
    since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
  - docker_container - fix network creation when ``networks_cli_compatible`` is
    enabled.
  - docker_container - use docker API's ``restart`` instead of ``stop``/``start``
    to restart a container.
  - docker_image - if ``build`` was not specified, the wrong default for
    ``build.rm`` is used.
  - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the
    module failed.
  - docker_image - module failed when ``source: build`` was set but
    ``build.path`` options not specified.
  - docker_network module - fix idempotency when using ``aux_addresses`` in
    ``ipam_config``.
  - ec2_instance - make Name tag idempotent
  - eos: don't fail modules without become set, instead show message and continue
  - eos_config: check for session support when asked to 'diff_against: session'
  - eos_eapi: fix idempotency issues when vrf was unspecified.
  - fix bugs for ce - more info see
  - fix incorrect uses of to_native that should be to_text instead.
  - hcloud_volume - Fix idempotency when attaching a server to a volume.
  - ibm_storage - Added a check for null fields in ibm_storage utils module.
  - include_tasks - whitelist ``listen`` as a valid keyword
  - k8s - resource updates applied with force work correctly now
  - keep results subset also when not no_log.
  - meraki_switchport - improve reliability with native VLAN functionality.
  - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and
    clearing functionality
  - netapp_e_volumes - fix workload profileId indexing when no previous workload
    tags exist on the storage array.
  - nxos_acl some platforms/versions raise when no ACLs are present
  - nxos_facts fix &lt;https://github.com/ansible/ansible/pull/57009&gt;
  - nxos_file_copy fix passwordless workflow
  - nxos_interface Fix admin_state check for n6k
  - nxos_snmp_traps fix group all for N35 platforms
  - nxos_snmp_user fix platform fixes for get_snmp_user
  - nxos_vlan mode idempotence bug
  - nxos_vlan vlan names containing regex ctl chars should be escaped
  - nxos_vtp_* modules fix n6k issues
  - openssl_certificate - fix private key passphrase handling for
    ``cryptography`` backend.
  - openssl_pkcs12 - fixes crash when private key has a passphrase and the module
    is run a second time.
  - os_stack - Apply tags conditionally so that the module does not throw up an
    error when using an older distro of openstacksdk
  - pass correct loading context to persistent connections other than local
  - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux
  - postgresql - added initial SSL related tests
  - postgresql - added missing_required_libs, removed excess param mapping
  - postgresql - move connect_to_db and get_pg_version into
    module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514)
  - postgresql_db - add note to the documentation about state dump and the
    incorrect rc (https://github.com/ansible/ansible/pull/57297)
  - postgresql_db - fix for postgresql_db fails if stderr contains output
  - postgresql_ping - fixed a typo in the module documentation
  - preserve actual ssh error when we cannot connect.
  - route53_facts - the module did not advertise check mode support, causing it
    not to be run in check mode.
  - sysctl: the module now also checks the output of STDERR to report if values
    are correctly set (https://github.com/ansible/ansible/pull/55695)
  - ufw - correctly check status when logging is off
  - uri - always return a value for status even during failure
  - urls - Handle redirects properly for IPv6 address by not splitting on ``:``
    and rely on already parsed hostname and port values
  - vmware_vm_facts - fix the support with regular ESXi
  - vyos_interface fix &lt;https://github.com/ansible/ansible/pull/57169&gt;
  - we don't really need to template vars on definition as we do this on demand
    in templating.
  - win_acl - Fix qualifier parser when using UNC paths -
  - win_hostname - Fix non netbios compliant name handling
  - winrm - Fix issue when attempting to parse CLIXML on send input failure
  - xenserver_guest - fixed an issue where VM whould be powered off even though
    check mode is used if reconfiguration requires VM to be powered off.
  - xenserver_guest - proper error message is shown when maximum number of
    network interfaces is reached and multiple network interfaces are added at
    once.
  - yum - Fix false error message about autoremove not being supported
  - yum - fix failure when using ``update_cache`` standalone
  - yum - handle special "_none_" value for proxy in yum.conf and .repo files</changelog>
</package>
<package pkgid="be9e5c3f56ceae1c8b15711f8313c01d1bb41b3af02bef41aa9fa2bc9b19d78f" name="ansible" arch="src">
  <version epoch="0" ver="2.8.1" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1530014400">- use python3 on (open)SUSE 15 or newer</changelog>
  <changelog author="boris@steki.net" date="1530532800">- updated to latest release 2.6.0
- New Plugins:
  + Callback:
  - cgroup_memory_recap
  - grafana_annotations
  - sumologic
  + Connection:
  - httpapi
  + Inventory:
  - foreman
  - gcp_compute
  - generator
  - nmap
  + Lookup:
  - onepassword
  - onepassword_raw
- Modules updates too many to mention here
  please look at package documentation directory (/usr/share/doc/packages/.../changelogs)
- bug fixes:
  - **Security Fix** - Some connection exceptions would cause no_log
    specified on a task to be ignored.  If this happened, the task information,
    including any private information coul d have been displayed to stdout and
    (if enabled, not the default) logged to a log file specified in
    ansible.cfg's log_path.  Additionally, sites which redirected stdout from
    ansible runs to a log file may have stored that private information onto
    disk that way as well.  (https://github.com/ansible/ansible/pull/41414)
  - Changed the admin_users config option to not include "admin" by default
    as admin is frequently used for a non-privileged account
    (https://github.com/ansible/ansible/pull/41164)
  - Changed the output to "text" for "show vrf" command as default "json"
    output format with respect to "eapi" transport was failing
    (https://github.com/ansible/ansible/pull/41470)
  - Document mode=preserve for both the copy and template module
  - Fix added for Digital Ocean Volumes API change causing Ansible to
    recieve an unexpected value in the response.
    (https://github.com/ansible/ansible/pull/41431)
  - Fix an encoding issue when parsing the examples from a plugins'
    documentation
  - Fix iosxr_config module to handle route-policy, community-set,
    prefix-set, as-path-set and rd-set blocks.  All these blocks are part of
    route-policy language of iosxr.
  - Fix mode=preserve with remote_src=True for the copy module
  - Implement mode=preserve for the template module
  - The yaml callback plugin now allows non-ascii characters to be
    displayed.
  - Various grafana_* modules - Port away from the deprecated
    b64encodestring function to the b64encode function instead.
    https://github.com/ansible/ansible/pull/38388
  - added missing 'raise' to exception definition
    https://github.com/ansible/ansible/pull/41690
  - allow custom endpoints to be used in the aws_s3 module
    (https://github.com/ansible/ansible/pull/36832)
  - allow set_options to be called multiple times
    https://github.com/ansible/ansible/pull/41913
  - ansible-doc - fixed traceback on missing plugins
    (https://github.com/ansible/ansible/pull/41167)
  - cast the device_mapping volume size to an int in the ec2_ami module
    (https://github.com/ansible/ansible/pull/40938)
  - copy - fixed copy to only follow symlinks for files in the non-recursive case
  - copy module - The copy module was attempting to change the mode of files
    for remote_src=True even if mode was not set as a parameter.  This
    failed on filesystems which do not have permission bits
    (https://github.com/ansible/ansible/pull/40099)
  - copy module - fixed recursive copy with relative paths
    (https://github.com/ansible/ansible/pull/40166)
  - correct debug display for all cases
    https://github.com/ansible/ansible/pull/41331
  - correctly check hostvars for vars term
    https://github.com/ansible/ansible/pull/41819
  - correctly handle yaml inventory files when entries are null dicts
    https://github.com/ansible/ansible/issues/41692
  - dynamic includes - Allow inheriting attributes from static parents
    (https://github.com/ansible/ansible/pull/38827)
  - dynamic includes - Don't treat undefined vars for conditional includes
    as truthy (https://github.com/ansible/ansible/pull/39377)
  - dynamic includes - Fix IncludedFile comparison for free strategy
    (https://github.com/ansible/ansible/pull/37083)
  - dynamic includes - Improved performance by fixing re-parenting on copy
    (https://github.com/ansible/ansible/pull/38747)
  - dynamic includes - Use the copied and merged task for calculating task
    vars (https://github.com/ansible/ansible/pull/39762)
  - file - fixed the default follow behaviour of file to be true
  - file module - Eliminate an error if we're asked to remove a file but
    something removes it while we are processing the request
    (https://github.com/ansible/ansible/pull/39466)
  - file module - Fix error when recursively assigning permissions and a
    symlink to a nonexistent file is present in the directory tree
    (https://github.com/ansible/ansible/issues/39456)
  - file module - Fix error when running a task which assures a symlink to a
    nonexistent file exists for the second and subsequent times
    (https://github.com/ansible/ansible/issues/39558)
  - file module - The file module allowed the user to specify src as a
    parameter when state was not link or hard.  This is documented as only
    applying to state=link or state=hard but in previous Ansible, this could
    have an effect in rare cornercases.  For instance, "ansible -m file -a
    'state=directory path=/tmp src=/var/lib'" would create /tmp/lib.  This
    has been disabled and a warning emitted (will change to an error in
    Ansible-2.10).
  - file module - The touch subcommand had its diff output broken during the
    2.6.x development cycle.  This is now fixed
    (https://github.com/ansible/ansible/issues/41755)
  - fix BotoCoreError exception handling
  - fix apt-mark on debian6 (https://github.com/ansible/ansible/pull/41530)
  - fix async for the aws_s3 module by adding async support to the action
    plugin (https://github.com/ansible/ansible/pull/40826)
  - fix decrypting vault files for the aws_s3 module
    (https://github.com/ansible/ansible/pull/39634)
  - fix errors with S3-compatible APIs if they cannot use ACLs for buckets
    or objects
  - fix permission handling to try to download a file even if the user does
    not have permission to list all objects in the bucket
  - fixed config required handling, specifically for _terms in lookups
    https://github.com/ansible/ansible/pull/41740
  - gce_net - Fix sorting of allowed ports
    (https://github.com/ansible/ansible/pull/41567)
  - group_by - support implicit localhost
    (https://github.com/ansible/ansible/pull/41860)
  - import/include - Ensure role handlers have the proper parent, allowing
    for correct attribute inheritance
    (https://github.com/ansible/ansible/pull/39426)
  - import_playbook - Pass vars applied to import_playbook into parsing of
    the playbook as they may be needed to parse the imported plays
    (https://github.com/ansible/ansible/pull/39521)
  - include_role/import_role - Don't overwrite included role handlers with
    play handlers on parse (https://github.com/ansible/ansible/pull/39563)
  - include_role/import_role - Fix parameter templating
    (https://github.com/ansible/ansible/pull/36372)
  - include_role/import_role - Use the computed role name for
    include_role/import_role so to diffentiate between names computed from
    host vars (https://github.com/ansible/ansible/pull/39516)-
    include_role/import_role - improved performance and recursion depth
    (https://github.com/ansible/ansible/pull/36470)
  - lineinfile - fix insertbefore when used with BOF to not insert duplicate
    lines (https://github.com/ansible/ansible/issues/38219)
  - password lookup - Do not load password lookup in network filters,
    allowing the password lookup to be overriden
    (https://github.com/ansible/ansible/pull/41907)
  - pause - ensure ctrl+c interrupt works in all cases
    (https://github.com/ansible/ansible/issues/35372)
  - powershell - use the tmpdir set by `remote_tmp` for become/async tasks
    instead of the generic $env:TEMP -
    https://github.com/ansible/ansible/pull/40210
  - selinux - correct check mode behavior to report same changes as normal
    mode (https://github.com/ansible/ansible/pull/40721)
  - spwd - With python 3.6 spwd.getspnam returns PermissionError instead of
    KeyError if user does not have privileges
    (https://github.com/ansible/ansible/issues/39472)
  - synchronize - Ensure the local connection created by synchronize uses
    _remote_is_local=True, which causes ActionBase to build a local tmpdir
    (https://github.com/ansible/ansible/pull/40833)
  - template - Fix for encoding issues when a template path contains
    non-ascii characters and using the template path in ansible_managed
    (https://github.com/ansible/ansible/issues/27262)
  - template action plugin - fix the encoding of filenames to avoid
    tracebacks on Python2 when characters that are not present in the user's
    locale are present.  (https://github.com/ansible/ansible/pull/39424)
  - user - only change the expiration time when necessary
    (https://github.com/ansible/ansible/issues/13235)
  - uses correct conn info for reset_connection
    https://github.com/ansible/ansible/issues/27520
  - win_environment - Fix for issue where the environment value was deleted
    when a null value or empty string was set -
    https://github.com/ansible/ansible/issues/40450
  - win_file - fix issue where special chars like [ and ] were not being
    handled correctly https://github.com/ansible/ansible/pull/37901
  - win_get_url - fixed a few bugs around authentication and force no when
    using an FTP URL
  - win_iis_webapppool - redirect some module output to null so Ansible can
    read the output JSON https://github.com/ansible/ansible/issues/40874
  - win_template - fix when specifying the dest option as a directory with
    and without the trailing slash
    https://github.com/ansible/ansible/issues/39886
  - win_updates - Added the ability to run on a scheduled task for older
    hosts so async starts working again -
    https://github.com/ansible/ansible/issues/38364
  - win_updates - Fix logic when using a whitelist for multiple updates
  - win_updates - Fix typo that hid the download error when a download
    failed
  - win_updates - Fixed issue where running win_updates on async fails
    without any error
  - windows become - Show better error messages when the become process fails
  - winrm - Add better error handling when the kinit process fails
  - winrm - allow `ansible_user` or `ansible_winrm_user` to override
    `ansible_ssh_user` when both are defined in an inventory -
    https://github.com/ansible/ansible/issues/39844
  - winrm - ensure pexpect is set to not echo the input on a failure and have
    a manual sanity check afterwards
    https://github.com/ansible/ansible/issues/41865
  - winrm connection plugin - Fix exception messages sometimes raising a
    traceback when the winrm connection plugin encounters an unrecoverable
    error.  https://github.com/ansible/ansible/pull/39333
  - xenserver_facts - ensure module works with newer versions of XenServer
    (https://github.com/ansible/ansible/pull/35821)</changelog>
  <changelog author="mrueckert@suse.de" date="1530532801">- revert some unneeded changes from spec-cleaner</changelog>
  <changelog author="lars@linux-schulserver.de" date="1532952000">- update to 2.6.2
  Minor Changes
  + Sceanrio guide for removing an existing virtual machine is added.
  + lineinfile - add warning when using an empty regexp
  + Restore module_utils.basic.BOOLEANS variable for backwards compatibility
    with the module API in older ansible releases.
  Bugfixes:
  + Add text output along with structured output in nxos_facts
  + Allow more than one page of results by using the right pagination
    indicator ('NextMarker' instead of 'NextToken').
  + Fix an atomic_move error that is 'true', but misleading.
    Now we show all 3 files involved and clarify what happened.
  + Fix eos_l2_interface eapi.
  + Fix fetching old style facts in junos_facts module
  + Fix get_device_info nxos zero or more whitespace regex
  + Fix nxos CI failures
  + Fix nxos_nxapi default http behavior
  + Fix nxos_vxlan_vtep_vni
  + Fix regex network_os_platform nxos
  + Refactor nxos cliconf get_device_info for non structured
    output supported devices
  + To fix the NoneType error raised in ios_l2_interface when
    Access Mode VLAN is unassigned
  + emtpy host/group name is an error
  + fix default SSL version for docker modules
  + fix mail module when using starttls
  + fix nmap config example
  + fix ps detection of service
  + fix the remote tmp folder permissions issue when becoming a non
    admin user
  + fix typoe in sysvinit that breaks update.rc-d detection
  + fixes docker_container compatibilty with docker-py &lt; 2.2
  + get_capabilities in nxapi module_utils should not return empty dictionary
  + inventory - When using an inventory directory, ensure extension
    comparison uses text types
  + ios_vlan - fix unable to identify correct vlans issue
  + nxos_facts warning message improved
  + openvswitch_db - make 'key' argument optional
  + pause - do not set stdout to raw mode when redirecting to a file
  + pause - nest try except when importing curses to gracefully fail
    if curses is not present
  + plugins/inventory/openstack.py - Do not create group with empty
    name if region is not set
  + preseve delegation info on nolog
  + remove ambiguity when it comes to 'the source'
  + remove dupes from var precedence
  + restores filtering out conflicting facts
  + user - fix bug that resulted in module always reporting a change when
    specifiying the home directory on FreeBSD
  + user - use correct attribute name in FreeBSD for creat_home
  + vultr - Do not fail trying to load configuration from ini files if
    required variables have been set as environment variables.
  + vyos_command correcting conditionals looping
  + win_chocolatey - enable TLSv1.2 support when downloading the
    Chocolatey installer
  + win_reboot - fix for handling an already scheduled reboot and other
    minor log formatting issues
  + win_reboot - fix issue when overridding connection timeout hung
    the post reboot uptime check
  + win_reboot - handle post reboots when running test_command
  + win_security_policy - allows an empty string to reset a policy value
  + win_share - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_unzip - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_updates - fixed module return value is lost in error in some cases
  + win_user - Use LogonUser to validate the password as it does not
    rely on SMB/RPC to be available
  + Security Fix - avoid loading host/group vars from cwd when not
    specifying a playbook or playbook base dir
  + Security Fix - avoid using ansible.cfg in a world writable dir.
  + Fix junos_config confirm commit timeout issue
    (https://github.com/ansible/ansible/pull/41527)
  + file module - The touch subcommand had its diff output broken during
    the 2.6.x development cycle. This is now fixed.
  + inventory manager - This fixes required options being populated before
    the inventory config file is read, so the required options may be
    set in the config file.
  + nsupdate - allow hmac-sha384 https://github.com/ansible/ansible/pull/42209
  + win_domain - fixes typo in one of the AD cmdlets
    https://github.com/ansible/ansible/issues/41536
  + win_group_membership - uses the internal Ansible SID conversion logic
    and uses that when comparing group membership instead of the name
- use fdupes to save some space in python_sitelib
- define BuildRoot on older distributions like SLE-11
- be a bit more flexible with the ending of manpage files to allow
  Fedora builds to succeed</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1535371200">- update to 2.6.3
  Bugfixes:
  * Fix lxd module to be idempotent when the given configuration for
  the lxd container has not changed
  * Fix setting value type to str to avoid conversion during template
  read. Fix Idempotency in case of 'no key'.
  * Fix the mount module's handling of swap entries in fstab
  * The fix for (CVE-2018-10875) prints out a warning message about
  skipping a config file from a world writable current working
  directory. However, if the user explicitly specifies that the
  config file should be used via the ANSIBLE_CONFIG environment
  variable then Ansible would honor that but still print out the
  warning message. This has been fixed so that Ansible honors the
  user's explicit wishes and does not print a warning message in
  that circumstance.
  * To fix the bug where existing host_record was deleted when existing
  record name is used with different IP.
  * VMware handle pnic in proxyswitch
  * fix azure security group cannot add rules when purge_rule set to false.
  * fix azure_rm_deployment collect tags from existing Resource Group.
  * fix azure_rm_loadbalancer_facts list takes at least 2 arguments.
  * fix for the bundled selectors module (used in the ssh and local
  connection plugins) when a syscall is restarted after being
  interrupted by a signal
  * get_url - fix the bug that get_url does not change mode when checksum matches
  * nicer error when multiprocessing breaks
  * openssl_certificate - Convert valid_date to bytes for conversion
  * openstack_inventory.py dynamic inventory file fixed the plugin to the
  script so that it will work with current ansible-inventory. Also
    redirect stdout before dumping the ouptput, because not doing so will
  cause JSON parse errors in some cases.
  * slack callback - Fix invocation by looking up data from cli.options
  * sysvinit module: handle values of optional parameters. Don't disable
  service when enabled parameter isn't set. Fix command when arguments
  parameter isn't set.
  * vars_prompt - properly template play level variables in vars_prompt
  * win_domain - ensure the Netlogon service is up and running after
  promoting host to controller
  * win_domain_controller - ensure the Netlogon service is up and running
  after promoting host to controller</changelog>
  <changelog author="lars@linux-schulserver.de" date="1536667200">- update to 2.6.4
  Minor Changes:
  * add azure_rm_storageaccount support to StorageV2 kind.
  * import_tasks - Do not allow import_tasks to transition to dynamic
    if the file is missing
  Bugfixes:
  * Add md5sum check in nxos_file_copy module
  * Allow arbitrary log_driver for docker_container
  * Fix Python2.6 regex bug terminal plugin nxos, iosxr
  * Fix check_mode in nxos_static_route module
  * Fix glob path of rc.d Some distribtuions like SUSE has the rc%.d
    directories under /etc/init.d
  * Fix network config diff issue for lines
  * Fixed an issue where ansible_facts.pkg_mgr would incorrectly set
    to zypper on Debian/Ubuntu systems that happened to have the
    command installed
  * The docker_* modules respect the DOCKER_* environment variables again
  * The fix for CVE-2018-10875 prints out a warning message about
    skipping a config file from a world writable current working directory.
    However, if the user is in a world writable current working directory
    which does not contain a config file, it should not print a warning
    message. This release fixes that extaneous warning.
  * To resolve nios_network issue where vendor-encapsulated-options
    can not have a use_option flag.
  * To resolve the issue of handling exception for Nios lookup gracefully.
  * always correctly template no log for tasks
  * ansible-galaxy - properly list all roles in roles_path
  * basic.py - catch ValueError in case a FIPS enabled platform
    raises this exception
  * docker_container: fixing working_dir idempotency problem
  * docker_container: makes unit parsing for memory sizes more consistent,
    and fixes idempotency problem when kernel_memory is set
  * fix example code for AWS lightsail documentation
  * fix the enable_snat parameter that is only supposed to be used by
    an user with the right policies.
  * fixes docker_container check and debug mode
  * improves docker_container idempotency
  * ios_l2_interface - fix bug when list of vlans ends with comma
  * ios_l2_interface - fix issue with certain interface types
  * ios_user - fix unable to delete user admin issue
  * ios_vlan - fix unable to work on certain interface types issue
  * nxos_facts test lldp feature and fix nxapi check_rc
  * nxos_interface port-channel idempotence fix for mode
  * nxos_linkagg mode fix
  * nxos_system idempotence fix
  * nxos_vlan refactor to support non structured output
  * one_host - fixes settings via environment variables
  * use retry_json nxos_banner
  * user - Strip trailing comments in /etc/default/passwd
  * user - when creating a new user without an expiration date,
    properly set no expiration rather that expirining the account
  * win_domain_computer - fixed deletion of computer active directory
    object that have dependent objects
  * win_domain_computer - fixed error in diff_support
  * win_domain_computer - fixed error when description parameter is empty
  * win_psexec - changed code to not escape the command option when building the args
  * win_uri -- Fix support for JSON output when charset is set
  * win_wait_for - fix issue where timeout doesn't wait unless state=drained</changelog>
  <changelog author="sean@suspend.net" date="1539000000">- update to 2.7.0
  Major changes:
  * Allow config to enable native jinja types
  * Remove support for simplejson
  * yum and dnf modules now at feature parity
  Minor changes:
  * Changed the prefix of all Vultr modules from vr to vultr
  * Enable installroot tests for yum4(dnf) integration testing, dnf backend now supports that
  * Fixed timer in exponential backoff algorithm in vmware.py
  Bugfixes:
  * Security Fix - avoid loading host/group vars from cwd when not specifying a playbook or playbook base dir
  * Security Fix - avoid using ansible.cfg in a world writable dir
  * Some connection exception would cause no_log specified on a task to be ignored (stdout info disclosure)
  * Fix glob path of rc.d (SUSE-specific)
  * Fix lambda_policy updates
  * Fix alt linux detection/matching</changelog>
  <changelog author="sean@suspend.net" date="1540641600">- update to 2.7.1
  Minor changes:
  * Fix yum module to properly check for empty conf_file value
  * added capability to set the scheme for the consul_kv lookup
  * added optional certificate and certificate validation for consul_kv lookups
  * dnf - properly handle modifying the enable/disable excludes data field
  * dnf appropriately handles disable_excludes repoid argument
  * dnf proerly honors disable_gpg_check for local package installation
  * fix yum module to handle list argument optional empty strings properly
  * netconf_config - Make default_operation optional in netconf_config module
  * yum - properly handle proxy password and username embedded in url
  * yum/dnf - fail when space separated string of names</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543406400">- update to version 2.7.2
  Minor changes:
  * Fix documentation for cloning template
  * Parsing plugin filter may raise TypeError, gracefully handle this
  exception and let user know about the syntax error in plugin filter file
  * Scenario guide for VMware HTTP API usage
  * Update plugin filter documentation
  * fix yum and dnf autoremove input sanitization to properly warn user if
  invalid options passed and update documentation to match
  * improve readability and fix privileges names on vmware scenario_clone_template
  * k8s - updated module documentation to mention how to avoid SSL validation errors
  * yum - when checking for updates, now properly include Obsoletes
  (both old and new) package data in the module JSON output</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752000">- update to version 2.7.3
  Minor Changes:
  * Document Path and Port are mutually exclusive parameters in wait_for module
  * Puppet module remove --ignorecache to allow Puppet 6 support
  * dnf properly support modularity appstream installation via overloaded group
  modifier syntax
  * proxmox_kvm - fix exception
  * win_security_policy - warn users to use win_user_right instead when editing
  Privilege Rights
  Bugfixes:
  * Fix the issue that FTD HTTP API retries authentication-related HTTP requests
  * Fix the issue that module fails when the Swagger model does not have required fields
  * Fix the issue with comparing string-like objects
  * Fix using omit on play keywords
  * Windows - prevent sensitive content from appearing in scriptblock logging (CVE-2018-16859)
  * apt_key - Disable TTY requirement in GnuPG for the module to work correctly
  when SSH pipelining is enabled
  * better error message when bad type in config, deal with EVNAR= more gracefully
  * configuration retrieval would fail on non primed plugins
  * cs_template - Fixed a KeyError on state=extracted
  * docker_container - fix idempotency problems with docker-py caused by previous
  init idempotency fix
  * docker_container - fix interplay of docker-py version check with argument_spec
  validation improvements
  * docker_network - driver_options containing Python booleans would cause Docker
    to throw exceptions
  * ec2_group - Fix comparison of determining which rules to purge by ignoring descriptions
  * pip module - fix setuptools/distutils replacement
  * sysvinit - enabling a service should use "defaults" if no runlevels are specified</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752001">- update to version 2.7.4
  Bugfixes:
  * powershell - add lib/ansible/executor/powershell to the packaging data</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1544961600">- update to version 2.7.5
  Minor Changes:
  * Add warning about falling back to jinja2_native=false when Jinja2 version is lower than 2.10.
  * Change the position to search os-release since clearlinux new versions are providing /etc/os-release too
  * Fixed typo in ansible-galaxy info command.
  * Improve the deprecation message for squashing, to not give misleading advice
  * Update docs and return section of vmware_host_service_facts module.
  * ansible-galaxy: properly warn when git isn't found in an installed bin path instead of traceback
  * dnf module properly load and initialize dnf package manager plugins
  * docker_swarm_service: use docker defaults for the user parameter if it is set to null
  Bugfixes:
  * ACME modules: improve error messages in some cases (include error returned by server).
  * Added unit test for VMware module_utils.
  * Also check stdout for interpreter errors for more intelligent messages to user
  * Backported support for Devuan-based distribution
  * Convert hostvars data in OpenShift inventory plugin to be serializable by ansible-inventory
  * Fix AttributeError (Python 3 only) when an exception occurs while rendering a template
  * Fix N3K power supply facts (https://github.com/ansible/ansible/pull/49150).
  * Fix NameError nxos_facts (https://github.com/ansible/ansible/pull/48981).
  * Fix VMware module utils for self usage.
  * Fix error in OpenShift inventory plugin when a pod has errored and is empty
  * Fix if the route table changed to none (https://github.com/ansible/ansible/pull/49533)
  * Fix iosxr netconf plugin response namespace (https://github.com/ansible/ansible/pull/49300)
  * Fix issues with nxos_install_os module for nxapi (https://github.com/ansible/ansible/pull/48811).
  * Fix lldp and cdp neighbors information (https://github.com/ansible/ansible/pull/48318)(https://github.com/ansible/ansible/pull/48087)(https://github.com/ansible/ansible/pull/49024).
  * Fix nxos_interface and nxos_linkagg Idempotence issue (https://github.com/ansible/ansible/pull/46437).
  * Fix traceback when updating facts and the fact cache plugin was nonfunctional
  * Fix using vault encrypted data with jinja2_native (https://github.com/ansible/ansible/issues/48950)
  * Fixed: Make sure that the files excluded when extracting the archive are not checked. https://github.com/ansible/ansible/pull/45122
  * Fixes issue where a password parameter was not set to no_log
  * Respect no_log on retry and high verbosity (CVE-2018-16876)
  * aci_rest - Fix issue ignoring custom port
  * acme_account, acme_account_facts - in some cases, it could happen that the modules return information on disabled accounts accidentally returned by the ACME server.
  * docker_swarm - decreased minimal required API version from 1.35 to 1.25; some features require API version 1.30 though.
  * docker_swarm_service: fails because of default "user: root" (https://github.com/ansible/ansible/issues/49199)
  * ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different
  * fix azure_rm_image module use positional parameter (https://github.com/ansible/ansible/pull/49394)
  * fixes an issue with dict_merge in network utils (https://github.com/ansible/ansible/pull/49474)
  * gcp_utils - fix google auth scoping issue with application default credentials or google cloud engine credentials. Only scope credentials that can be scoped.
  * mail - fix python 2.7 regression
  * openstack - fix parameter handling when cloud provided as dict https://github.com/ansible/ansible/issues/42858
  * os_user - Include domain parameter in user deletion https://github.com/ansible/ansible/issues/42901
  * os_user - Include domain parameter in user lookup https://github.com/ansible/ansible/issues/42901
  * ovirt_storage_connection - comparing passwords breaks idempotency in update_check (https://github.com/ansible/ansible/issues/48933)
  * paramiko_ssh - improve log message to state the connection type
  * reboot - use IndexError instead of TypeError in exception
  * redis cache - Support version 3 of the redis python library (https://github.com/ansible/ansible/issues/49341)
  * sensu_silence - Cast int for expire field to avoid call failure to sensu API.
  * vmware_host_service_facts - handle exception when service package does not have package name.
  * win_nssm - Switched to Argv-ToString for escaping NSSM credentials (https://github.com/ansible/ansible/issues/48728)
  * zabbix_hostmacro - Added missing validate_certs logic for running module against Zabbix servers with untrused SSL certificates (https://github.com/ansible/ansible/issues/47611)
  * zabbix_hostmacro - Fixed support for user macros with context (https://github.com/ansible/ansible/issues/46953)</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1547985600">- update to version 2.7.6
  Minor Changes:
  * Added documentation about using VMware dynamic inventory plugin.
  * Fixed bug around populating host_ip in hostvars in vmware_vm_inventory.
  * Image reference change in Azure VMSS is detected and applied correctly.
  * docker_volume - reverted changed behavior of force, which was released in Ansible 2.7.1 to 2.7.5, and Ansible 2.6.8 to 2.6.11. Volumes are now only recreated if the parameters changed and force is set to true (instead of or). This is the behavior which has been described in the documentation all the time.
  * set ansible_os_family from name variable in os-release
  * yum and dnf can now handle installing packages from URIs that are proxy redirects and don't end in the .rpm file extension
  Bugfixes:
  * Added log message at -vvvv when using netconf connection listing connection details.
  * Changes how ansible-connection names socket lock files. They now use the same name as the socket itself, and as such do not lock other attempts on connections to the same host, or cause issues with overly-long hostnames.
  * Fix mandatory statement error for junos modules (https://github.com/ansible/ansible/pull/50138)
  * Moved error in netconf connection plugin from at import to on connection.
  * This reverts some changes from commit 723daf3. If a line is found in the file, exactly or via regexp matching, it must not be added again. insertafter/insertbefore options are used only when a line is to be inserted, to specify where it must be added.
  * allow using openstack inventory plugin w/o a cache
  * callbacks - Do not filter out exception, warnings, deprecations on failure when using debug (https://github.com/ansible/ansible/issues/47576)
  * certificate_complete_chain - fix behavior when invalid file is parsed while reading intermediate or root certificates.
  * copy - Ensure that the src file contents is converted to unicode in diff information so that it is properly wrapped by AnsibleUnsafeText to prevent unexpected templating of diff data in Python3 (https://github.com/ansible/ansible/issues/45717)
  * correct behaviour of verify_file for vmware inventory plugin, it was always returning True
  * dnf - fix issue where conf_file was not being loaded properly
  * dnf - fix update_cache combined with install operation to not cause dnf transaction failure
  * docker_container - fix network_mode idempotency if the container:&lt;container-name&gt; form is used (as opposed to container:&lt;container-id&gt;) (https://github.com/ansible/ansible/issues/49794)
  * docker_container - warning when non-string env values are found, avoiding YAML parsing issues. Will be made an error in Ansible 2.8. (https://github.com/ansible/ansible/issues/49802)
  * docker_swarm_service - Document labels and container_labels with correct type.
  * docker_swarm_service - Document limit_memory and reserve_memory correctly on how to specify sizes.
  * docker_swarm_service - Document minimal API version for configs and secrets.
  * docker_swarm_service - fix use of Docker API so that services are not detected as present if there is an existing service whose name is a substring of the desired service
  * docker_swarm_service - fixing falsely reporting update_order as changed when option is not used.
  * document old option that was initally missed
  * ec2_instance now respects check mode https://github.com/ansible/ansible/pull/46774
  * fix for network_cli - ansible_command_timeout not working as expected (#49466)
  * fix handling of firewalld port if protocol is missing
  * fix lastpass lookup failure on python 3 (https://github.com/ansible/ansible/issues/42062)
  * flatpak - Fixed Python 2/3 compatibility
  * flatpak - Fixed issue where newer versions of flatpak failed on flatpak removal
  * flatpak_remote - Fixed Python 2/3 compatibility
  * gcp_compute_instance - fix crash when the instance metadata is not set
  * grafana_dashboard - Fix a pair of unicode string handling issues with version checking (https://github.com/ansible/ansible/pull/49194)
  * host execution order - Fix reverse_inventory not to change the order of the items before reversing on python2 and to not backtrace on python3
  * icinga2_host - fixed the issue with not working use_proxy option of the module.
  * influxdb_user - An unspecified password now sets the password to blank, except on existing users. This previously caused an unhandled exception.
  * influxdb_user - Fixed unhandled exception when using invalid login credentials (https://github.com/ansible/ansible/issues/50131)
  * openssl_* - fix error when path contains a file name without path.
  * openssl_csr - fix problem with idempotency of keyUsage option.
  * openssl_pkcs12 - now does proper path expansion for ca_certificates.
  * os_security_group_rule - os_security_group_rule doesn't exit properly when secgroup doesn't exist and state=absent (https://github.com/ansible/ansible/issues/50057)
  * paramiko_ssh - add auth_timeout parameter to ssh.connect when supported by installed paramiko version. This will prevent "Authentication timeout" errors when a slow authentication step (&gt;30s) happens with a host (https://github.com/ansible/ansible/issues/42596)
  * purefa_facts and purefb_facts now correctly adds facts into main ansible_fact dictionary (https://github.com/ansible/ansible/pull/50349)
  * reboot - add appropriate commands to make the plugin work with VMware ESXi (https://github.com/ansible/ansible/issues/48425)
  * reboot - add support for rebooting AIX (https://github.com/ansible/ansible/issues/49712)
  * reboot - gather distribution information in order to support Alpine and other distributions (https://github.com/ansible/ansible/issues/46723)
  * reboot - search common paths for the shutdown command and use the full path to the binary rather than depending on the PATH of the remote system (https://github.com/ansible/ansible/issues/47131)
  * reboot - use a common set of commands for older and newer Solaris and SunOS variants (https://github.com/ansible/ansible/pull/48986)
  * redfish_utils - fix reference to local variable 'systems_service'
  * setup - fix the rounding of the ansible_memtotal_mb value on VMWare vm's (https://github.com/ansible/ansible/issues/49608)
  * vultr_server - fixed multiple ssh keys were not handled.
  * win_copy - Fix copy of a dir that contains an empty directory - https://github.com/ansible/ansible/issues/50077
  * win_firewall_rule - Remove invalid 'bypass' action
  * win_lineinfile - Fix issue where a malformed json block was returned causing an error
  * win_updates - Correctly report changes on success</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549713600">- Update to version 2.7.7
  Minor Changes:
  * Allow check_mode with supports_generate_diff capability in cli_config. (https://github.com/ansible/ansible/pull/51417)
  * Fixed typo in vmware documentation fragment. Changed "supported added" to "support added".
  Bugfixes:
  * All K8S_AUTH_* environment variables are now properly loaded by the k8s lookup plugin
  * Change backup file globbing for network _config modules so backing up one host's config will not delete the backed up config of any host whose hostname is a subset of the first host's hostname (e.g., switch1 and switch11)
  * Fixes bug where nios_a_record wasn't getting deleted if an uppercase named a_record was being passed. (https://github.com/ansible/ansible/pull/51539)
  * aci_aaa_user - Fix setting user description (https://github.com/ansible/ansible/issues/51406)
  * apt_repository - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * archive - Fix check if archive is created in path to be removed
  * azure_rm inventory plugin - fix azure batch request (https://github.com/ansible/ansible/pull/50006)
  * cnos_backup - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * cnos_image - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * consul_kv - minor error-handling bugfix under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * copy - align invocation in return value between check and normal mode
  * delegate_facts - fix to work properly under block and include_role (https://github.com/ansible/ansible/pull/51553)
  * docker_swarm_service - fix endpoint_mode and publish idempotency.
  * ec2_instance - Correctly adds description when adding a single ENI to the instance
  * ensure we have a XDG_RUNTIME_DIR, as it is not handled correctly by some privilege escalation configurations
  * file - Allow state=touch on file the user does not own https://github.com/ansible/ansible/issues/50943
  * fix ansible-pull hanlding of extra args, complex quoting is needed for inline JSON
  * fix ansible_connect_timeout variable in network_cli,netconf,httpapi and nxos_install_os timeout check
  * netapp_e_storagepool - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * onepassword_facts - Fix an issue looking up some 1Password items which have a 'password' attribute alongside the 'fields' attribute, not inside it.
  * prevent import_role from inserting dupe into roles: execution when duplicate signature role already exists in the section.
  * reboot - Fix bug where the connection timeout was not reset in the same task after rebooting
  * ssh connection - do not retry with invalid credentials to prevent account lockout (https://github.com/ansible/ansible/issues/48422)
  * systemd - warn when exeuting in a chroot environment rather than failing (https://github.com/ansible/ansible/pull/43904)
  * win_chocolatey - Fix hang when used with proxy for the first time - https://github.com/ansible/ansible/issues/47669
  * win_power_plan - Fix issue where win_power_plan failed on newer Windows 10 builds - https://github.com/ansible/ansible/issues/43827</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551009600">- Update to version 2.7.8
  Minor Changes:
  * Raise AnsibleConnectionError on winrm connnection errors
  Bugfixes:
  * Backport of https://github.com/ansible/ansible/pull/46478 , fixes name collision in haproxy module
  * Fix aws_ec2 inventory plugin code to automatically populate regions when missing as documentation states, also leverage config system vs self default/type validation
  * Fix unexpected error when using Jinja2 native types with non-strict constructed keyed_groups (https://github.com/ansible/ansible/issues/52158).
  * If an ios module uses a section filter on a device which does not support it, retry the command without the filter.
  * acme_challenge_cert_helper * the module no longer crashes when the required ``cryptography`` library cannot be found.
  * azure_rm_managed_disk_facts * added missing implementation of listing managed disks by resource group
  * azure_rm_mysqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_postgresqldatabase * fix force_update bug (https://github.com/ansible/ansible/issues/50978).
  * azure_rm_postgresqldatabase * fix force_update bug.
  * azure_rm_postgresqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_sqlserver * fix for tags support
  * azure_rm_virtualmachine * fixed several crashes in module
  * azure_rm_virtualmachine_facts * fix crash when vm created from custom image
  * azure_rm_virtualmachine_facts * fixed crash related to VM with managed disk attached
  * ec2 * Correctly sets the end date of the Spot Instance request. Sets `ValidUntil` value in proper way so it will be auto-canceled through `spot_wait_timeout` interval.
  * openssl_csr * fixes idempotence problem with PyOpenSSL backend when no Subject Alternative Names were specified.
  * openstack inventory plugin * send logs from sdk to stderr so they do not combine with output
  * psrp * do not display bootstrap wrapper for each module exec run
  * redfish_utils * get standard properties for firmware entries (https://github.com/ansible/ansible/issues/49832)
  * remote home directory * Disallow use of remote home directories that include relative pathing by means of `..` (CVE-2019-3828) (https://github.com/ansible/ansible/pull/52133)
  * ufw * when using ``state: reset`` in check mode, ``ufw --dry-run reset`` was executed, which causes a loss of firewall rules. The ``ufw`` module was adjusted to no longer run ``ufw --dry-run reset`` to prevent this from happening.
  * ufw: make sure that only valid values for ``direction`` are passed on.
  * update GetBiosBootOrder to use standard Redfish resources (https://github.com/ansible/ansible/issues/47571)
  * win become * Fix some scenarios where become failed to create an elevated process
  * win_psmodule * the NuGet package provider will be updated, if needed, to avoid issue under adding a repository
  * yum * Remove incorrect disable_includes error message when using disable_excludes (https://github.com/ansible/ansible/issues/51697)
  * yum * properly handle a proxy config in yum.conf for an unauthenticated proxy</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1552737600">- update URL (use SSL version of the URL)
- prepare update for multiple releases (bsc#1102126, bsc#1109957)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1552824000">- Update to version 2.7.9
  Minor Changes
  * Add missing import for ConnectionError in edge and routeros module_utils.
  * ``to_yaml`` filter updated to maintain formatting consistency when used
    with ``pyyaml`` versions 5.1 and later
    (https://github.com/ansible/ansible/pull/53772)
  * docker_image * set ``changed`` to ``false`` when using ``force: yes`` to
    tag or push an image that ends up being identical to one already present on
    the Docker host or Docker registry.
  * jenkins_plugin * Set new default value for the update_url parameter
    (https://github.com/ansible/ansible/issues/52086)
  Bugfixes
  * Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
  * Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
  * Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
  * Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
  * If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
  * allow nice error to work when auto plugin reads file w/o `plugin` field
  * ansible-doc * Fix traceback on providing arguemnt --all to ansible-doc command
  * azure_rm_virtualmachine_facts * fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
  * basic * modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
  * cloudscale * Fix compatibilty with Python3 in version 3.5 and lower.
  * convert input into text to ensure valid comparisons in nmap inventory plugin
  * dict2items * Allow dict2items to work with hostvars
  * dnsimple * fixed a KeyError exception related to record types handling.
  * docker_container * now returns warnings from docker daemon on container creation and updating.
  * docker_swarm * Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
  * docker_swarm * do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
  * docker_swarm * fixes idempotency for the ``ca_force_rotate`` option.
  * docker_swarm * improve Swarm detection.
  * docker_swarm * improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
  * docker_swarm * now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
  * docker_swarm * properly implement check mode (it did apply changes).
  * docker_swarm * the ``force`` option was ignored when ``state: present``.
  * docker_swarm_service * do basic validation of ``publish`` option if specified (must be list of dicts).
  * docker_swarm_service * don't crash when ``publish`` is not specified.
  * docker_swarm_service * fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
  * docker_swarm_service * the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
  * ec2 * if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
  * fix DNSimple to ensure check works even when the number of records is larger than 100
  * get_url * return no change in check mode when checksum matches
  * inventory plugins * Fix creating groups from composed variables by getting the latest host variables
  * inventory_aws_ec2 * fix no_log indentation so AWS temporary credentials aren't displayed in tests
  * jenkins_plugin * Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
  * lvol * fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
  * mysql * MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
  * mysql * fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
  * mysql_user: match backticks, single and double quotes when checking user privileges.
  * onepassword_facts * Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
  * openssl_certificate * ``has_expired`` correctly checks if the certificate is expired or not
  * openssl_certificate * fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
  * openssl_certificate * make sure that extensions are actually present when their values should be checked.
  * openssl_csr * improve ``subject`` validation.
  * openssl_csr * improve error messages for invalid SANs.
  * play order is now applied under all circumstances, fixes
  * remote_management foreman * Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
  * rhsm_repository * handle systems without any repos
  * skip invalid plugin after warning in loader
  * urpmi module * fixed issue
  * win_certificate_store * Fix exception handling typo
  * win_chocolatey * Fix issue when parsing a beta Chocolatey install * https://github.com/ansible/ansible/issues/52331
  * win_chocolatey_source * fix bug where a Chocolatey source could not be disabled unless ``source`` was also set * https://github.com/ansible/ansible/issues/50133
  * win_domain * Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
  * win_domain * Fix when running without credential delegated authentication * https://github.com/ansible/ansible/issues/53182
  * win_file * Fix issue when managing hidden files and directories * https://github.com/ansible/ansible/issues/42466
  * winrm * attempt to recover from a WinRM send input failure if possible
  * zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
  New Plugins
  * vmware_vm_inventory * VMware Guest inventory source</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554379200">- Update to version 2.7.10
  Minor Changes
- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
  Bugfixes
- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
- foreman - fix Foreman returning host parameters
- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
- include_tasks - Fixed an unexpected exception if no file was given to include.
- openssl_certificate - fix ``state=absent``.
- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_psexec - Support executables with a space in the path
- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
- windows - Fixed various module utils that did not work with path that had glob like chars
- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1558526400">- Update to version 2.8.0
  Major changes:
  * Experimental support for Ansible Collections and content namespacing -
    Ansible content can now be packaged in a collection and addressed via
    namespaces. This allows for easier sharing, distribution, and installation
    of bundled modules/roles/plugins, and consistent rules for accessing
    specific content via namespaces.
  * Python interpreter discovery - The first time a Python module runs on a
    target, Ansible will attempt to discover the proper default Python
    interpreter to use for the target platform/version (instead of immediately
    defaulting to /usr/bin/python). You can override this behavior by
    setting ansible_python_interpreter or via config.
    (see https://github.com/ansible/ansible/pull/50163)
  * become - The deprecated CLI arguments for --sudo, --sudo-user,
  - -ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in
    favor of the more generic --become, --become-user, --become-method, and
  - -ask-become-pass.
  * become - become functionality has been migrated to a plugin architecture,
    to allow customization of become functionality and 3rd party become methods
    (https://github.com/ansible/ansible/pull/50991)
- addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837
  For the full changelog see /usr/share/doc/packages/ansible/changelogs or online:
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1559995200">- Update to version 2.8.1
  Full changelog is at /usr/share/doc/packages/ansible/changelogs/
  Bugfixes
  - -------
  - ACI - DO not encode query_string
  - ACI modules - Fix non-signature authentication
  - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading
  - Fix "Interface not found" errors when using eos_l2_interface with nonexistant
    interfaces configured
  - Fix cannot get credential when `source_auth` set to `credential_file`.
  - Fix netconf_config backup string issue
  - Fix privilege escalation support for the docker connection plugin when
    credentials need to be supplied (e.g. sudo with password).
  - Fix vyos cli prompt inspection
  - Fixed loading namespaced documentation fragments from collections.
  - Fixing bug came up after running cnos_vrf module against coverity.
  - Properly handle data importer failures on PVC creation, instead of timing out.
  - To fix the ios static route TC failure in CI
  - To fix the nios member module params
  - To fix the nios_zone module idempotency failure
  - add terminal initial prompt for initial connection
  - allow include_role to work with ansible command
  - allow python_requirements_facts to report on dependencies containing dashes
  - asa_config fix
  - azure_rm_roledefinition - fix a small error in build scope.
  - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network
    peering.
  - cgroup_perf_recap - When not using file_per_task, make sure we don't
    prematurely close the perf files
  - display underlying error when reporting an invalid ``tasks:`` block.
  - dnf - fix wildcard matching for state: absent
  - docker connection plugin - accept version ``dev`` as 'newest version' and
    print warning.
  - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available
    since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
  - docker_container - fix network creation when ``networks_cli_compatible`` is
    enabled.
  - docker_container - use docker API's ``restart`` instead of ``stop``/``start``
    to restart a container.
  - docker_image - if ``build`` was not specified, the wrong default for
    ``build.rm`` is used.
  - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the
    module failed.
  - docker_image - module failed when ``source: build`` was set but
    ``build.path`` options not specified.
  - docker_network module - fix idempotency when using ``aux_addresses`` in
    ``ipam_config``.
  - ec2_instance - make Name tag idempotent
  - eos: don't fail modules without become set, instead show message and continue
  - eos_config: check for session support when asked to 'diff_against: session'
  - eos_eapi: fix idempotency issues when vrf was unspecified.
  - fix bugs for ce - more info see
  - fix incorrect uses of to_native that should be to_text instead.
  - hcloud_volume - Fix idempotency when attaching a server to a volume.
  - ibm_storage - Added a check for null fields in ibm_storage utils module.
  - include_tasks - whitelist ``listen`` as a valid keyword
  - k8s - resource updates applied with force work correctly now
  - keep results subset also when not no_log.
  - meraki_switchport - improve reliability with native VLAN functionality.
  - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and
    clearing functionality
  - netapp_e_volumes - fix workload profileId indexing when no previous workload
    tags exist on the storage array.
  - nxos_acl some platforms/versions raise when no ACLs are present
  - nxos_facts fix &lt;https://github.com/ansible/ansible/pull/57009&gt;
  - nxos_file_copy fix passwordless workflow
  - nxos_interface Fix admin_state check for n6k
  - nxos_snmp_traps fix group all for N35 platforms
  - nxos_snmp_user fix platform fixes for get_snmp_user
  - nxos_vlan mode idempotence bug
  - nxos_vlan vlan names containing regex ctl chars should be escaped
  - nxos_vtp_* modules fix n6k issues
  - openssl_certificate - fix private key passphrase handling for
    ``cryptography`` backend.
  - openssl_pkcs12 - fixes crash when private key has a passphrase and the module
    is run a second time.
  - os_stack - Apply tags conditionally so that the module does not throw up an
    error when using an older distro of openstacksdk
  - pass correct loading context to persistent connections other than local
  - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux
  - postgresql - added initial SSL related tests
  - postgresql - added missing_required_libs, removed excess param mapping
  - postgresql - move connect_to_db and get_pg_version into
    module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514)
  - postgresql_db - add note to the documentation about state dump and the
    incorrect rc (https://github.com/ansible/ansible/pull/57297)
  - postgresql_db - fix for postgresql_db fails if stderr contains output
  - postgresql_ping - fixed a typo in the module documentation
  - preserve actual ssh error when we cannot connect.
  - route53_facts - the module did not advertise check mode support, causing it
    not to be run in check mode.
  - sysctl: the module now also checks the output of STDERR to report if values
    are correctly set (https://github.com/ansible/ansible/pull/55695)
  - ufw - correctly check status when logging is off
  - uri - always return a value for status even during failure
  - urls - Handle redirects properly for IPv6 address by not splitting on ``:``
    and rely on already parsed hostname and port values
  - vmware_vm_facts - fix the support with regular ESXi
  - vyos_interface fix &lt;https://github.com/ansible/ansible/pull/57169&gt;
  - we don't really need to template vars on definition as we do this on demand
    in templating.
  - win_acl - Fix qualifier parser when using UNC paths -
  - win_hostname - Fix non netbios compliant name handling
  - winrm - Fix issue when attempting to parse CLIXML on send input failure
  - xenserver_guest - fixed an issue where VM whould be powered off even though
    check mode is used if reconfiguration requires VM to be powered off.
  - xenserver_guest - proper error message is shown when maximum number of
    network interfaces is reached and multiple network interfaces are added at
    once.
  - yum - Fix false error message about autoremove not being supported
  - yum - fix failure when using ``update_cache`` standalone
  - yum - handle special "_none_" value for proxy in yum.conf and .repo files</changelog>
</package>
<package pkgid="a83f9326a04481e35702badf24a580db392d9918e2c2f8ec6d9f9873d462afbd" name="ansible" arch="noarch">
  <version epoch="0" ver="2.9.6" rel="lp151.2.7.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1552824000">- Update to version 2.7.9
  Minor Changes
  * Add missing import for ConnectionError in edge and routeros module_utils.
  * ``to_yaml`` filter updated to maintain formatting consistency when used
    with ``pyyaml`` versions 5.1 and later
    (https://github.com/ansible/ansible/pull/53772)
  * docker_image * set ``changed`` to ``false`` when using ``force: yes`` to
    tag or push an image that ends up being identical to one already present on
    the Docker host or Docker registry.
  * jenkins_plugin * Set new default value for the update_url parameter
    (https://github.com/ansible/ansible/issues/52086)
  Bugfixes
  * Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
  * Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
  * Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
  * Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
  * If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
  * allow nice error to work when auto plugin reads file w/o `plugin` field
  * ansible-doc * Fix traceback on providing arguemnt --all to ansible-doc command
  * azure_rm_virtualmachine_facts * fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
  * basic * modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
  * cloudscale * Fix compatibilty with Python3 in version 3.5 and lower.
  * convert input into text to ensure valid comparisons in nmap inventory plugin
  * dict2items * Allow dict2items to work with hostvars
  * dnsimple * fixed a KeyError exception related to record types handling.
  * docker_container * now returns warnings from docker daemon on container creation and updating.
  * docker_swarm * Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
  * docker_swarm * do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
  * docker_swarm * fixes idempotency for the ``ca_force_rotate`` option.
  * docker_swarm * improve Swarm detection.
  * docker_swarm * improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
  * docker_swarm * now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
  * docker_swarm * properly implement check mode (it did apply changes).
  * docker_swarm * the ``force`` option was ignored when ``state: present``.
  * docker_swarm_service * do basic validation of ``publish`` option if specified (must be list of dicts).
  * docker_swarm_service * don't crash when ``publish`` is not specified.
  * docker_swarm_service * fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
  * docker_swarm_service * the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
  * ec2 * if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
  * fix DNSimple to ensure check works even when the number of records is larger than 100
  * get_url * return no change in check mode when checksum matches
  * inventory plugins * Fix creating groups from composed variables by getting the latest host variables
  * inventory_aws_ec2 * fix no_log indentation so AWS temporary credentials aren't displayed in tests
  * jenkins_plugin * Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
  * lvol * fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
  * mysql * MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
  * mysql * fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
  * mysql_user: match backticks, single and double quotes when checking user privileges.
  * onepassword_facts * Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
  * openssl_certificate * ``has_expired`` correctly checks if the certificate is expired or not
  * openssl_certificate * fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
  * openssl_certificate * make sure that extensions are actually present when their values should be checked.
  * openssl_csr * improve ``subject`` validation.
  * openssl_csr * improve error messages for invalid SANs.
  * play order is now applied under all circumstances, fixes
  * remote_management foreman * Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
  * rhsm_repository * handle systems without any repos
  * skip invalid plugin after warning in loader
  * urpmi module * fixed issue
  * win_certificate_store * Fix exception handling typo
  * win_chocolatey * Fix issue when parsing a beta Chocolatey install * https://github.com/ansible/ansible/issues/52331
  * win_chocolatey_source * fix bug where a Chocolatey source could not be disabled unless ``source`` was also set * https://github.com/ansible/ansible/issues/50133
  * win_domain * Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
  * win_domain * Fix when running without credential delegated authentication * https://github.com/ansible/ansible/issues/53182
  * win_file * Fix issue when managing hidden files and directories * https://github.com/ansible/ansible/issues/42466
  * winrm * attempt to recover from a WinRM send input failure if possible
  * zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
  New Plugins
  * vmware_vm_inventory * VMware Guest inventory source</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554379200">- Update to version 2.7.10
  Minor Changes
- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
  Bugfixes
- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
- foreman - fix Foreman returning host parameters
- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
- include_tasks - Fixed an unexpected exception if no file was given to include.
- openssl_certificate - fix ``state=absent``.
- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_psexec - Support executables with a space in the path
- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
- windows - Fixed various module utils that did not work with path that had glob like chars
- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1558526400">- Update to version 2.8.0
  Major changes:
  * Experimental support for Ansible Collections and content namespacing -
    Ansible content can now be packaged in a collection and addressed via
    namespaces. This allows for easier sharing, distribution, and installation
    of bundled modules/roles/plugins, and consistent rules for accessing
    specific content via namespaces.
  * Python interpreter discovery - The first time a Python module runs on a
    target, Ansible will attempt to discover the proper default Python
    interpreter to use for the target platform/version (instead of immediately
    defaulting to /usr/bin/python). You can override this behavior by
    setting ansible_python_interpreter or via config.
    (see https://github.com/ansible/ansible/pull/50163)
  * become - The deprecated CLI arguments for --sudo, --sudo-user,
  - -ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in
    favor of the more generic --become, --become-user, --become-method, and
  - -ask-become-pass.
  * become - become functionality has been migrated to a plugin architecture,
    to allow customization of become functionality and 3rd party become methods
    (https://github.com/ansible/ansible/pull/50991)
- addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837
  For the full changelog see /usr/share/doc/packages/ansible/changelogs or online:
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1559995200">- Update to version 2.8.1
  Full changelog is at /usr/share/doc/packages/ansible/changelogs/
  Bugfixes
  - -------
  - ACI - DO not encode query_string
  - ACI modules - Fix non-signature authentication
  - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading
  - Fix "Interface not found" errors when using eos_l2_interface with nonexistant
    interfaces configured
  - Fix cannot get credential when `source_auth` set to `credential_file`.
  - Fix netconf_config backup string issue
  - Fix privilege escalation support for the docker connection plugin when
    credentials need to be supplied (e.g. sudo with password).
  - Fix vyos cli prompt inspection
  - Fixed loading namespaced documentation fragments from collections.
  - Fixing bug came up after running cnos_vrf module against coverity.
  - Properly handle data importer failures on PVC creation, instead of timing out.
  - To fix the ios static route TC failure in CI
  - To fix the nios member module params
  - To fix the nios_zone module idempotency failure
  - add terminal initial prompt for initial connection
  - allow include_role to work with ansible command
  - allow python_requirements_facts to report on dependencies containing dashes
  - asa_config fix
  - azure_rm_roledefinition - fix a small error in build scope.
  - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network
    peering.
  - cgroup_perf_recap - When not using file_per_task, make sure we don't
    prematurely close the perf files
  - display underlying error when reporting an invalid ``tasks:`` block.
  - dnf - fix wildcard matching for state: absent
  - docker connection plugin - accept version ``dev`` as 'newest version' and
    print warning.
  - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available
    since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
  - docker_container - fix network creation when ``networks_cli_compatible`` is
    enabled.
  - docker_container - use docker API's ``restart`` instead of ``stop``/``start``
    to restart a container.
  - docker_image - if ``build`` was not specified, the wrong default for
    ``build.rm`` is used.
  - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the
    module failed.
  - docker_image - module failed when ``source: build`` was set but
    ``build.path`` options not specified.
  - docker_network module - fix idempotency when using ``aux_addresses`` in
    ``ipam_config``.
  - ec2_instance - make Name tag idempotent
  - eos: don't fail modules without become set, instead show message and continue
  - eos_config: check for session support when asked to 'diff_against: session'
  - eos_eapi: fix idempotency issues when vrf was unspecified.
  - fix bugs for ce - more info see
  - fix incorrect uses of to_native that should be to_text instead.
  - hcloud_volume - Fix idempotency when attaching a server to a volume.
  - ibm_storage - Added a check for null fields in ibm_storage utils module.
  - include_tasks - whitelist ``listen`` as a valid keyword
  - k8s - resource updates applied with force work correctly now
  - keep results subset also when not no_log.
  - meraki_switchport - improve reliability with native VLAN functionality.
  - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and
    clearing functionality
  - netapp_e_volumes - fix workload profileId indexing when no previous workload
    tags exist on the storage array.
  - nxos_acl some platforms/versions raise when no ACLs are present
  - nxos_facts fix &lt;https://github.com/ansible/ansible/pull/57009&gt;
  - nxos_file_copy fix passwordless workflow
  - nxos_interface Fix admin_state check for n6k
  - nxos_snmp_traps fix group all for N35 platforms
  - nxos_snmp_user fix platform fixes for get_snmp_user
  - nxos_vlan mode idempotence bug
  - nxos_vlan vlan names containing regex ctl chars should be escaped
  - nxos_vtp_* modules fix n6k issues
  - openssl_certificate - fix private key passphrase handling for
    ``cryptography`` backend.
  - openssl_pkcs12 - fixes crash when private key has a passphrase and the module
    is run a second time.
  - os_stack - Apply tags conditionally so that the module does not throw up an
    error when using an older distro of openstacksdk
  - pass correct loading context to persistent connections other than local
  - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux
  - postgresql - added initial SSL related tests
  - postgresql - added missing_required_libs, removed excess param mapping
  - postgresql - move connect_to_db and get_pg_version into
    module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514)
  - postgresql_db - add note to the documentation about state dump and the
    incorrect rc (https://github.com/ansible/ansible/pull/57297)
  - postgresql_db - fix for postgresql_db fails if stderr contains output
  - postgresql_ping - fixed a typo in the module documentation
  - preserve actual ssh error when we cannot connect.
  - route53_facts - the module did not advertise check mode support, causing it
    not to be run in check mode.
  - sysctl: the module now also checks the output of STDERR to report if values
    are correctly set (https://github.com/ansible/ansible/pull/55695)
  - ufw - correctly check status when logging is off
  - uri - always return a value for status even during failure
  - urls - Handle redirects properly for IPv6 address by not splitting on ``:``
    and rely on already parsed hostname and port values
  - vmware_vm_facts - fix the support with regular ESXi
  - vyos_interface fix &lt;https://github.com/ansible/ansible/pull/57169&gt;
  - we don't really need to template vars on definition as we do this on demand
    in templating.
  - win_acl - Fix qualifier parser when using UNC paths -
  - win_hostname - Fix non netbios compliant name handling
  - winrm - Fix issue when attempting to parse CLIXML on send input failure
  - xenserver_guest - fixed an issue where VM whould be powered off even though
    check mode is used if reconfiguration requires VM to be powered off.
  - xenserver_guest - proper error message is shown when maximum number of
    network interfaces is reached and multiple network interfaces are added at
    once.
  - yum - Fix false error message about autoremove not being supported
  - yum - fix failure when using ``update_cache`` standalone
  - yum - handle special "_none_" value for proxy in yum.conf and .repo files</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1565179200">- Update to version 2.8.3:
  Full changelog is packaged, but also at
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
- (bsc#1142690) Adds CVE-2019-10206-data-disclosure.patch fixing
  CVE-2019-10206: ansible-playbook -k and ansible cli tools
  prompt passwords by expanding them from templates as they could
  contain special characters. Passwords should be wrapped to
  prevent templates trigger and exposing them.
- (bsc#1144453) Adds CVE-2019-10217-gcp-modules-sensitive-fields.patch
  CVE-2019-10217: Fields managing sensitive data should be set as
  such by no_log feature. Some of these fields in GCP modules are
  not set properly. service_account_contents() which is common
  class for all gcp modules is not setting no_log to True. Any
  sensitive data managed by that function would be leak as an
  output when running ansible playbooks.</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1568376000">- Update to version 2.8.5:
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
- removed patches fixed upstream:
  + CVE-2019-10206-data-disclosure.patch
  + CVE-2019-10217-gcp-modules-sensitive-fields.patch</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1571832000">- Update to version 2.8.6:
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
  Included security fixes:
  * CVE-2019-14846: Fixed secrets disclosure on logs due to display is hardcoded
    to DEBUG level (bsc#1153452)
  * CVE-2019-14856: Fixed insufficient fix for CVE-2019-10206 (bsc#1154232)
  * CVE-2019-14858: Fixed data in the sub parameter fields that will not be masked
    and will be displayed when run with increased verbosity (bsc#1154231)</changelog>
  <changelog author="lars@linux-schulserver.de" date="1572177600">- include the sha checksum file in the source, which allows to verify
  the original sources</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1572609600">- Update to version 2.9.0:
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1572782400">- added file '/usr/bin/ansible-test' to spec file</changelog>
  <changelog author="lars@linux-schulserver.de - 2.9.1" date="1573819200">- update to version 2.9.1
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst
  + CVE-2019-14864: fixed Splunk and Sumologic callback plugins leak
    sensitive data in logs (boo#1154830)
- replace all #!/usr/bin/env lines to use #!/usr/bin/$1 directly</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1574164800">- split out ansible-test package for module developers</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1574337600">- Create system directories that Ansible defines as default locations
  in ansible/config/base.yml
- rephrase the summary line
- Disable shebang munging for specific paths. These files are data files.
  ansible-test munges the shebangs itself.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1575547200">- update to version 2.9.2
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1577620800">- sync with upstream spec file (especially for RHEL &amp; Fedora builds)
- ran spec-cleaner
- remove old SUSE targets (SLE-11, Leap 42.3 and below)
  This simplifies the spec file and makes building easier
- Additional required packages for building:
  + python-boto3 and python-botocore for Amazon EC2
  + python-jmespath for json queries
  + python-memcached for cloud modules and local caching of JSON
    formatted, per host records
  + python-redis for cloud modules and local caching of JSON
    formatted, per host records
  + python-requests for many web-based modules (cloud, network,
    netapp)
  =&gt; as the need for those packages depends on the usage of the
    tool, they are just recommended on openSUSE/SUSE machines
- made dependencies for gitlab, vmware and winrm modules configurable,
  as most of their dependencies are not (yet) available on current
  openSUSE/SUSE distributions
- exclude /usr/bin/pwsh from the automatic dependency generation,
  as the Windows Power Shell is not available (yet) on openSUSE/SUSE
- build additional docs and split up ansible-doc package;
  moving changelogs, contrib and example directories there
- prepare for building HTML documentation, but disable this per
  default for the moment, as not all package dependencies are available
  in openSUSE/SUSE (yet)
- package some test scripts with executable permissions</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1579176000">- update to version 2.9.3 (maintenance release)
  * security fixes
  - CVE-2019-14904 (solaris_zone module) (boo#1157968)
  - CVE-2019-14905 (nxos_file_copy module) (boo#1157969)
  * various bugfixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1580212800">- update to version 2.9.4 (maintenance release)
  fix in yum module</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1581595200">- update to version 2.9.5 (maintenance release)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1583409600">- update to version 2.9.6 (maintenance release)</changelog>
  <changelog author="lars@linux-schulserver.de - 2.9.6" date="1586174400">- create missing (empty) template and files directories for
  'ansible-galaxy init' during package build (fixes boo#1137479)
- require python-xml on python 2 systems (boo#1142542)</changelog>
</package>
<package pkgid="5eb924720d1cff80366422da80b128bfade35d437cb03cb23d10e308f4e481de" name="ansible" arch="src">
  <version epoch="0" ver="2.9.6" rel="lp151.2.7.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1552824000">- Update to version 2.7.9
  Minor Changes
  * Add missing import for ConnectionError in edge and routeros module_utils.
  * ``to_yaml`` filter updated to maintain formatting consistency when used
    with ``pyyaml`` versions 5.1 and later
    (https://github.com/ansible/ansible/pull/53772)
  * docker_image * set ``changed`` to ``false`` when using ``force: yes`` to
    tag or push an image that ends up being identical to one already present on
    the Docker host or Docker registry.
  * jenkins_plugin * Set new default value for the update_url parameter
    (https://github.com/ansible/ansible/issues/52086)
  Bugfixes
  * Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
  * Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
  * Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
  * Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
  * If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
  * allow nice error to work when auto plugin reads file w/o `plugin` field
  * ansible-doc * Fix traceback on providing arguemnt --all to ansible-doc command
  * azure_rm_virtualmachine_facts * fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
  * basic * modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
  * cloudscale * Fix compatibilty with Python3 in version 3.5 and lower.
  * convert input into text to ensure valid comparisons in nmap inventory plugin
  * dict2items * Allow dict2items to work with hostvars
  * dnsimple * fixed a KeyError exception related to record types handling.
  * docker_container * now returns warnings from docker daemon on container creation and updating.
  * docker_swarm * Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
  * docker_swarm * do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
  * docker_swarm * fixes idempotency for the ``ca_force_rotate`` option.
  * docker_swarm * improve Swarm detection.
  * docker_swarm * improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
  * docker_swarm * now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
  * docker_swarm * properly implement check mode (it did apply changes).
  * docker_swarm * the ``force`` option was ignored when ``state: present``.
  * docker_swarm_service * do basic validation of ``publish`` option if specified (must be list of dicts).
  * docker_swarm_service * don't crash when ``publish`` is not specified.
  * docker_swarm_service * fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
  * docker_swarm_service * the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
  * ec2 * if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
  * fix DNSimple to ensure check works even when the number of records is larger than 100
  * get_url * return no change in check mode when checksum matches
  * inventory plugins * Fix creating groups from composed variables by getting the latest host variables
  * inventory_aws_ec2 * fix no_log indentation so AWS temporary credentials aren't displayed in tests
  * jenkins_plugin * Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
  * lvol * fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
  * mysql * MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
  * mysql * fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
  * mysql_user: match backticks, single and double quotes when checking user privileges.
  * onepassword_facts * Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
  * openssl_certificate * ``has_expired`` correctly checks if the certificate is expired or not
  * openssl_certificate * fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
  * openssl_certificate * make sure that extensions are actually present when their values should be checked.
  * openssl_csr * improve ``subject`` validation.
  * openssl_csr * improve error messages for invalid SANs.
  * play order is now applied under all circumstances, fixes
  * remote_management foreman * Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
  * rhsm_repository * handle systems without any repos
  * skip invalid plugin after warning in loader
  * urpmi module * fixed issue
  * win_certificate_store * Fix exception handling typo
  * win_chocolatey * Fix issue when parsing a beta Chocolatey install * https://github.com/ansible/ansible/issues/52331
  * win_chocolatey_source * fix bug where a Chocolatey source could not be disabled unless ``source`` was also set * https://github.com/ansible/ansible/issues/50133
  * win_domain * Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
  * win_domain * Fix when running without credential delegated authentication * https://github.com/ansible/ansible/issues/53182
  * win_file * Fix issue when managing hidden files and directories * https://github.com/ansible/ansible/issues/42466
  * winrm * attempt to recover from a WinRM send input failure if possible
  * zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
  New Plugins
  * vmware_vm_inventory * VMware Guest inventory source</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554379200">- Update to version 2.7.10
  Minor Changes
- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
  Bugfixes
- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
- foreman - fix Foreman returning host parameters
- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
- include_tasks - Fixed an unexpected exception if no file was given to include.
- openssl_certificate - fix ``state=absent``.
- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_psexec - Support executables with a space in the path
- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
- windows - Fixed various module utils that did not work with path that had glob like chars
- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1558526400">- Update to version 2.8.0
  Major changes:
  * Experimental support for Ansible Collections and content namespacing -
    Ansible content can now be packaged in a collection and addressed via
    namespaces. This allows for easier sharing, distribution, and installation
    of bundled modules/roles/plugins, and consistent rules for accessing
    specific content via namespaces.
  * Python interpreter discovery - The first time a Python module runs on a
    target, Ansible will attempt to discover the proper default Python
    interpreter to use for the target platform/version (instead of immediately
    defaulting to /usr/bin/python). You can override this behavior by
    setting ansible_python_interpreter or via config.
    (see https://github.com/ansible/ansible/pull/50163)
  * become - The deprecated CLI arguments for --sudo, --sudo-user,
  - -ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in
    favor of the more generic --become, --become-user, --become-method, and
  - -ask-become-pass.
  * become - become functionality has been migrated to a plugin architecture,
    to allow customization of become functionality and 3rd party become methods
    (https://github.com/ansible/ansible/pull/50991)
- addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837
  For the full changelog see /usr/share/doc/packages/ansible/changelogs or online:
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1559995200">- Update to version 2.8.1
  Full changelog is at /usr/share/doc/packages/ansible/changelogs/
  Bugfixes
  - -------
  - ACI - DO not encode query_string
  - ACI modules - Fix non-signature authentication
  - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading
  - Fix "Interface not found" errors when using eos_l2_interface with nonexistant
    interfaces configured
  - Fix cannot get credential when `source_auth` set to `credential_file`.
  - Fix netconf_config backup string issue
  - Fix privilege escalation support for the docker connection plugin when
    credentials need to be supplied (e.g. sudo with password).
  - Fix vyos cli prompt inspection
  - Fixed loading namespaced documentation fragments from collections.
  - Fixing bug came up after running cnos_vrf module against coverity.
  - Properly handle data importer failures on PVC creation, instead of timing out.
  - To fix the ios static route TC failure in CI
  - To fix the nios member module params
  - To fix the nios_zone module idempotency failure
  - add terminal initial prompt for initial connection
  - allow include_role to work with ansible command
  - allow python_requirements_facts to report on dependencies containing dashes
  - asa_config fix
  - azure_rm_roledefinition - fix a small error in build scope.
  - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network
    peering.
  - cgroup_perf_recap - When not using file_per_task, make sure we don't
    prematurely close the perf files
  - display underlying error when reporting an invalid ``tasks:`` block.
  - dnf - fix wildcard matching for state: absent
  - docker connection plugin - accept version ``dev`` as 'newest version' and
    print warning.
  - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available
    since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
  - docker_container - fix network creation when ``networks_cli_compatible`` is
    enabled.
  - docker_container - use docker API's ``restart`` instead of ``stop``/``start``
    to restart a container.
  - docker_image - if ``build`` was not specified, the wrong default for
    ``build.rm`` is used.
  - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the
    module failed.
  - docker_image - module failed when ``source: build`` was set but
    ``build.path`` options not specified.
  - docker_network module - fix idempotency when using ``aux_addresses`` in
    ``ipam_config``.
  - ec2_instance - make Name tag idempotent
  - eos: don't fail modules without become set, instead show message and continue
  - eos_config: check for session support when asked to 'diff_against: session'
  - eos_eapi: fix idempotency issues when vrf was unspecified.
  - fix bugs for ce - more info see
  - fix incorrect uses of to_native that should be to_text instead.
  - hcloud_volume - Fix idempotency when attaching a server to a volume.
  - ibm_storage - Added a check for null fields in ibm_storage utils module.
  - include_tasks - whitelist ``listen`` as a valid keyword
  - k8s - resource updates applied with force work correctly now
  - keep results subset also when not no_log.
  - meraki_switchport - improve reliability with native VLAN functionality.
  - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and
    clearing functionality
  - netapp_e_volumes - fix workload profileId indexing when no previous workload
    tags exist on the storage array.
  - nxos_acl some platforms/versions raise when no ACLs are present
  - nxos_facts fix &lt;https://github.com/ansible/ansible/pull/57009&gt;
  - nxos_file_copy fix passwordless workflow
  - nxos_interface Fix admin_state check for n6k
  - nxos_snmp_traps fix group all for N35 platforms
  - nxos_snmp_user fix platform fixes for get_snmp_user
  - nxos_vlan mode idempotence bug
  - nxos_vlan vlan names containing regex ctl chars should be escaped
  - nxos_vtp_* modules fix n6k issues
  - openssl_certificate - fix private key passphrase handling for
    ``cryptography`` backend.
  - openssl_pkcs12 - fixes crash when private key has a passphrase and the module
    is run a second time.
  - os_stack - Apply tags conditionally so that the module does not throw up an
    error when using an older distro of openstacksdk
  - pass correct loading context to persistent connections other than local
  - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux
  - postgresql - added initial SSL related tests
  - postgresql - added missing_required_libs, removed excess param mapping
  - postgresql - move connect_to_db and get_pg_version into
    module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514)
  - postgresql_db - add note to the documentation about state dump and the
    incorrect rc (https://github.com/ansible/ansible/pull/57297)
  - postgresql_db - fix for postgresql_db fails if stderr contains output
  - postgresql_ping - fixed a typo in the module documentation
  - preserve actual ssh error when we cannot connect.
  - route53_facts - the module did not advertise check mode support, causing it
    not to be run in check mode.
  - sysctl: the module now also checks the output of STDERR to report if values
    are correctly set (https://github.com/ansible/ansible/pull/55695)
  - ufw - correctly check status when logging is off
  - uri - always return a value for status even during failure
  - urls - Handle redirects properly for IPv6 address by not splitting on ``:``
    and rely on already parsed hostname and port values
  - vmware_vm_facts - fix the support with regular ESXi
  - vyos_interface fix &lt;https://github.com/ansible/ansible/pull/57169&gt;
  - we don't really need to template vars on definition as we do this on demand
    in templating.
  - win_acl - Fix qualifier parser when using UNC paths -
  - win_hostname - Fix non netbios compliant name handling
  - winrm - Fix issue when attempting to parse CLIXML on send input failure
  - xenserver_guest - fixed an issue where VM whould be powered off even though
    check mode is used if reconfiguration requires VM to be powered off.
  - xenserver_guest - proper error message is shown when maximum number of
    network interfaces is reached and multiple network interfaces are added at
    once.
  - yum - Fix false error message about autoremove not being supported
  - yum - fix failure when using ``update_cache`` standalone
  - yum - handle special "_none_" value for proxy in yum.conf and .repo files</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1565179200">- Update to version 2.8.3:
  Full changelog is packaged, but also at
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
- (bsc#1142690) Adds CVE-2019-10206-data-disclosure.patch fixing
  CVE-2019-10206: ansible-playbook -k and ansible cli tools
  prompt passwords by expanding them from templates as they could
  contain special characters. Passwords should be wrapped to
  prevent templates trigger and exposing them.
- (bsc#1144453) Adds CVE-2019-10217-gcp-modules-sensitive-fields.patch
  CVE-2019-10217: Fields managing sensitive data should be set as
  such by no_log feature. Some of these fields in GCP modules are
  not set properly. service_account_contents() which is common
  class for all gcp modules is not setting no_log to True. Any
  sensitive data managed by that function would be leak as an
  output when running ansible playbooks.</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1568376000">- Update to version 2.8.5:
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
- removed patches fixed upstream:
  + CVE-2019-10206-data-disclosure.patch
  + CVE-2019-10217-gcp-modules-sensitive-fields.patch</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1571832000">- Update to version 2.8.6:
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
  Included security fixes:
  * CVE-2019-14846: Fixed secrets disclosure on logs due to display is hardcoded
    to DEBUG level (bsc#1153452)
  * CVE-2019-14856: Fixed insufficient fix for CVE-2019-10206 (bsc#1154232)
  * CVE-2019-14858: Fixed data in the sub parameter fields that will not be masked
    and will be displayed when run with increased verbosity (bsc#1154231)</changelog>
  <changelog author="lars@linux-schulserver.de" date="1572177600">- include the sha checksum file in the source, which allows to verify
  the original sources</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1572609600">- Update to version 2.9.0:
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1572782400">- added file '/usr/bin/ansible-test' to spec file</changelog>
  <changelog author="lars@linux-schulserver.de - 2.9.1" date="1573819200">- update to version 2.9.1
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst
  + CVE-2019-14864: fixed Splunk and Sumologic callback plugins leak
    sensitive data in logs (boo#1154830)
- replace all #!/usr/bin/env lines to use #!/usr/bin/$1 directly</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1574164800">- split out ansible-test package for module developers</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1574337600">- Create system directories that Ansible defines as default locations
  in ansible/config/base.yml
- rephrase the summary line
- Disable shebang munging for specific paths. These files are data files.
  ansible-test munges the shebangs itself.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1575547200">- update to version 2.9.2
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1577620800">- sync with upstream spec file (especially for RHEL &amp; Fedora builds)
- ran spec-cleaner
- remove old SUSE targets (SLE-11, Leap 42.3 and below)
  This simplifies the spec file and makes building easier
- Additional required packages for building:
  + python-boto3 and python-botocore for Amazon EC2
  + python-jmespath for json queries
  + python-memcached for cloud modules and local caching of JSON
    formatted, per host records
  + python-redis for cloud modules and local caching of JSON
    formatted, per host records
  + python-requests for many web-based modules (cloud, network,
    netapp)
  =&gt; as the need for those packages depends on the usage of the
    tool, they are just recommended on openSUSE/SUSE machines
- made dependencies for gitlab, vmware and winrm modules configurable,
  as most of their dependencies are not (yet) available on current
  openSUSE/SUSE distributions
- exclude /usr/bin/pwsh from the automatic dependency generation,
  as the Windows Power Shell is not available (yet) on openSUSE/SUSE
- build additional docs and split up ansible-doc package;
  moving changelogs, contrib and example directories there
- prepare for building HTML documentation, but disable this per
  default for the moment, as not all package dependencies are available
  in openSUSE/SUSE (yet)
- package some test scripts with executable permissions</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1579176000">- update to version 2.9.3 (maintenance release)
  * security fixes
  - CVE-2019-14904 (solaris_zone module) (boo#1157968)
  - CVE-2019-14905 (nxos_file_copy module) (boo#1157969)
  * various bugfixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1580212800">- update to version 2.9.4 (maintenance release)
  fix in yum module</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1581595200">- update to version 2.9.5 (maintenance release)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1583409600">- update to version 2.9.6 (maintenance release)</changelog>
  <changelog author="lars@linux-schulserver.de - 2.9.6" date="1586174400">- create missing (empty) template and files directories for
  'ansible-galaxy init' during package build (fixes boo#1137479)
- require python-xml on python 2 systems (boo#1142542)</changelog>
</package>
<package pkgid="b1cba7754d709f73bc9acf6873ebd10a0244f78bb5c7b35ac0cf53464ab1df7b" name="ansible-doc" arch="noarch">
  <version epoch="0" ver="2.9.6" rel="lp151.2.7.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1552824000">- Update to version 2.7.9
  Minor Changes
  * Add missing import for ConnectionError in edge and routeros module_utils.
  * ``to_yaml`` filter updated to maintain formatting consistency when used
    with ``pyyaml`` versions 5.1 and later
    (https://github.com/ansible/ansible/pull/53772)
  * docker_image * set ``changed`` to ``false`` when using ``force: yes`` to
    tag or push an image that ends up being identical to one already present on
    the Docker host or Docker registry.
  * jenkins_plugin * Set new default value for the update_url parameter
    (https://github.com/ansible/ansible/issues/52086)
  Bugfixes
  * Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
  * Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
  * Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
  * Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
  * If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
  * allow nice error to work when auto plugin reads file w/o `plugin` field
  * ansible-doc * Fix traceback on providing arguemnt --all to ansible-doc command
  * azure_rm_virtualmachine_facts * fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
  * basic * modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
  * cloudscale * Fix compatibilty with Python3 in version 3.5 and lower.
  * convert input into text to ensure valid comparisons in nmap inventory plugin
  * dict2items * Allow dict2items to work with hostvars
  * dnsimple * fixed a KeyError exception related to record types handling.
  * docker_container * now returns warnings from docker daemon on container creation and updating.
  * docker_swarm * Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
  * docker_swarm * do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
  * docker_swarm * fixes idempotency for the ``ca_force_rotate`` option.
  * docker_swarm * improve Swarm detection.
  * docker_swarm * improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
  * docker_swarm * now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
  * docker_swarm * properly implement check mode (it did apply changes).
  * docker_swarm * the ``force`` option was ignored when ``state: present``.
  * docker_swarm_service * do basic validation of ``publish`` option if specified (must be list of dicts).
  * docker_swarm_service * don't crash when ``publish`` is not specified.
  * docker_swarm_service * fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
  * docker_swarm_service * the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
  * ec2 * if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
  * fix DNSimple to ensure check works even when the number of records is larger than 100
  * get_url * return no change in check mode when checksum matches
  * inventory plugins * Fix creating groups from composed variables by getting the latest host variables
  * inventory_aws_ec2 * fix no_log indentation so AWS temporary credentials aren't displayed in tests
  * jenkins_plugin * Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
  * lvol * fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
  * mysql * MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
  * mysql * fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
  * mysql_user: match backticks, single and double quotes when checking user privileges.
  * onepassword_facts * Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
  * openssl_certificate * ``has_expired`` correctly checks if the certificate is expired or not
  * openssl_certificate * fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
  * openssl_certificate * make sure that extensions are actually present when their values should be checked.
  * openssl_csr * improve ``subject`` validation.
  * openssl_csr * improve error messages for invalid SANs.
  * play order is now applied under all circumstances, fixes
  * remote_management foreman * Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
  * rhsm_repository * handle systems without any repos
  * skip invalid plugin after warning in loader
  * urpmi module * fixed issue
  * win_certificate_store * Fix exception handling typo
  * win_chocolatey * Fix issue when parsing a beta Chocolatey install * https://github.com/ansible/ansible/issues/52331
  * win_chocolatey_source * fix bug where a Chocolatey source could not be disabled unless ``source`` was also set * https://github.com/ansible/ansible/issues/50133
  * win_domain * Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
  * win_domain * Fix when running without credential delegated authentication * https://github.com/ansible/ansible/issues/53182
  * win_file * Fix issue when managing hidden files and directories * https://github.com/ansible/ansible/issues/42466
  * winrm * attempt to recover from a WinRM send input failure if possible
  * zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
  New Plugins
  * vmware_vm_inventory * VMware Guest inventory source</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554379200">- Update to version 2.7.10
  Minor Changes
- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
  Bugfixes
- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
- foreman - fix Foreman returning host parameters
- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
- include_tasks - Fixed an unexpected exception if no file was given to include.
- openssl_certificate - fix ``state=absent``.
- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_psexec - Support executables with a space in the path
- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
- windows - Fixed various module utils that did not work with path that had glob like chars
- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1558526400">- Update to version 2.8.0
  Major changes:
  * Experimental support for Ansible Collections and content namespacing -
    Ansible content can now be packaged in a collection and addressed via
    namespaces. This allows for easier sharing, distribution, and installation
    of bundled modules/roles/plugins, and consistent rules for accessing
    specific content via namespaces.
  * Python interpreter discovery - The first time a Python module runs on a
    target, Ansible will attempt to discover the proper default Python
    interpreter to use for the target platform/version (instead of immediately
    defaulting to /usr/bin/python). You can override this behavior by
    setting ansible_python_interpreter or via config.
    (see https://github.com/ansible/ansible/pull/50163)
  * become - The deprecated CLI arguments for --sudo, --sudo-user,
  - -ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in
    favor of the more generic --become, --become-user, --become-method, and
  - -ask-become-pass.
  * become - become functionality has been migrated to a plugin architecture,
    to allow customization of become functionality and 3rd party become methods
    (https://github.com/ansible/ansible/pull/50991)
- addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837
  For the full changelog see /usr/share/doc/packages/ansible/changelogs or online:
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1559995200">- Update to version 2.8.1
  Full changelog is at /usr/share/doc/packages/ansible/changelogs/
  Bugfixes
  - -------
  - ACI - DO not encode query_string
  - ACI modules - Fix non-signature authentication
  - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading
  - Fix "Interface not found" errors when using eos_l2_interface with nonexistant
    interfaces configured
  - Fix cannot get credential when `source_auth` set to `credential_file`.
  - Fix netconf_config backup string issue
  - Fix privilege escalation support for the docker connection plugin when
    credentials need to be supplied (e.g. sudo with password).
  - Fix vyos cli prompt inspection
  - Fixed loading namespaced documentation fragments from collections.
  - Fixing bug came up after running cnos_vrf module against coverity.
  - Properly handle data importer failures on PVC creation, instead of timing out.
  - To fix the ios static route TC failure in CI
  - To fix the nios member module params
  - To fix the nios_zone module idempotency failure
  - add terminal initial prompt for initial connection
  - allow include_role to work with ansible command
  - allow python_requirements_facts to report on dependencies containing dashes
  - asa_config fix
  - azure_rm_roledefinition - fix a small error in build scope.
  - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network
    peering.
  - cgroup_perf_recap - When not using file_per_task, make sure we don't
    prematurely close the perf files
  - display underlying error when reporting an invalid ``tasks:`` block.
  - dnf - fix wildcard matching for state: absent
  - docker connection plugin - accept version ``dev`` as 'newest version' and
    print warning.
  - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available
    since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
  - docker_container - fix network creation when ``networks_cli_compatible`` is
    enabled.
  - docker_container - use docker API's ``restart`` instead of ``stop``/``start``
    to restart a container.
  - docker_image - if ``build`` was not specified, the wrong default for
    ``build.rm`` is used.
  - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the
    module failed.
  - docker_image - module failed when ``source: build`` was set but
    ``build.path`` options not specified.
  - docker_network module - fix idempotency when using ``aux_addresses`` in
    ``ipam_config``.
  - ec2_instance - make Name tag idempotent
  - eos: don't fail modules without become set, instead show message and continue
  - eos_config: check for session support when asked to 'diff_against: session'
  - eos_eapi: fix idempotency issues when vrf was unspecified.
  - fix bugs for ce - more info see
  - fix incorrect uses of to_native that should be to_text instead.
  - hcloud_volume - Fix idempotency when attaching a server to a volume.
  - ibm_storage - Added a check for null fields in ibm_storage utils module.
  - include_tasks - whitelist ``listen`` as a valid keyword
  - k8s - resource updates applied with force work correctly now
  - keep results subset also when not no_log.
  - meraki_switchport - improve reliability with native VLAN functionality.
  - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and
    clearing functionality
  - netapp_e_volumes - fix workload profileId indexing when no previous workload
    tags exist on the storage array.
  - nxos_acl some platforms/versions raise when no ACLs are present
  - nxos_facts fix &lt;https://github.com/ansible/ansible/pull/57009&gt;
  - nxos_file_copy fix passwordless workflow
  - nxos_interface Fix admin_state check for n6k
  - nxos_snmp_traps fix group all for N35 platforms
  - nxos_snmp_user fix platform fixes for get_snmp_user
  - nxos_vlan mode idempotence bug
  - nxos_vlan vlan names containing regex ctl chars should be escaped
  - nxos_vtp_* modules fix n6k issues
  - openssl_certificate - fix private key passphrase handling for
    ``cryptography`` backend.
  - openssl_pkcs12 - fixes crash when private key has a passphrase and the module
    is run a second time.
  - os_stack - Apply tags conditionally so that the module does not throw up an
    error when using an older distro of openstacksdk
  - pass correct loading context to persistent connections other than local
  - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux
  - postgresql - added initial SSL related tests
  - postgresql - added missing_required_libs, removed excess param mapping
  - postgresql - move connect_to_db and get_pg_version into
    module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514)
  - postgresql_db - add note to the documentation about state dump and the
    incorrect rc (https://github.com/ansible/ansible/pull/57297)
  - postgresql_db - fix for postgresql_db fails if stderr contains output
  - postgresql_ping - fixed a typo in the module documentation
  - preserve actual ssh error when we cannot connect.
  - route53_facts - the module did not advertise check mode support, causing it
    not to be run in check mode.
  - sysctl: the module now also checks the output of STDERR to report if values
    are correctly set (https://github.com/ansible/ansible/pull/55695)
  - ufw - correctly check status when logging is off
  - uri - always return a value for status even during failure
  - urls - Handle redirects properly for IPv6 address by not splitting on ``:``
    and rely on already parsed hostname and port values
  - vmware_vm_facts - fix the support with regular ESXi
  - vyos_interface fix &lt;https://github.com/ansible/ansible/pull/57169&gt;
  - we don't really need to template vars on definition as we do this on demand
    in templating.
  - win_acl - Fix qualifier parser when using UNC paths -
  - win_hostname - Fix non netbios compliant name handling
  - winrm - Fix issue when attempting to parse CLIXML on send input failure
  - xenserver_guest - fixed an issue where VM whould be powered off even though
    check mode is used if reconfiguration requires VM to be powered off.
  - xenserver_guest - proper error message is shown when maximum number of
    network interfaces is reached and multiple network interfaces are added at
    once.
  - yum - Fix false error message about autoremove not being supported
  - yum - fix failure when using ``update_cache`` standalone
  - yum - handle special "_none_" value for proxy in yum.conf and .repo files</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1565179200">- Update to version 2.8.3:
  Full changelog is packaged, but also at
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
- (bsc#1142690) Adds CVE-2019-10206-data-disclosure.patch fixing
  CVE-2019-10206: ansible-playbook -k and ansible cli tools
  prompt passwords by expanding them from templates as they could
  contain special characters. Passwords should be wrapped to
  prevent templates trigger and exposing them.
- (bsc#1144453) Adds CVE-2019-10217-gcp-modules-sensitive-fields.patch
  CVE-2019-10217: Fields managing sensitive data should be set as
  such by no_log feature. Some of these fields in GCP modules are
  not set properly. service_account_contents() which is common
  class for all gcp modules is not setting no_log to True. Any
  sensitive data managed by that function would be leak as an
  output when running ansible playbooks.</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1568376000">- Update to version 2.8.5:
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
- removed patches fixed upstream:
  + CVE-2019-10206-data-disclosure.patch
  + CVE-2019-10217-gcp-modules-sensitive-fields.patch</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1571832000">- Update to version 2.8.6:
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
  Included security fixes:
  * CVE-2019-14846: Fixed secrets disclosure on logs due to display is hardcoded
    to DEBUG level (bsc#1153452)
  * CVE-2019-14856: Fixed insufficient fix for CVE-2019-10206 (bsc#1154232)
  * CVE-2019-14858: Fixed data in the sub parameter fields that will not be masked
    and will be displayed when run with increased verbosity (bsc#1154231)</changelog>
  <changelog author="lars@linux-schulserver.de" date="1572177600">- include the sha checksum file in the source, which allows to verify
  the original sources</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1572609600">- Update to version 2.9.0:
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1572782400">- added file '/usr/bin/ansible-test' to spec file</changelog>
  <changelog author="lars@linux-schulserver.de - 2.9.1" date="1573819200">- update to version 2.9.1
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst
  + CVE-2019-14864: fixed Splunk and Sumologic callback plugins leak
    sensitive data in logs (boo#1154830)
- replace all #!/usr/bin/env lines to use #!/usr/bin/$1 directly</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1574164800">- split out ansible-test package for module developers</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1574337600">- Create system directories that Ansible defines as default locations
  in ansible/config/base.yml
- rephrase the summary line
- Disable shebang munging for specific paths. These files are data files.
  ansible-test munges the shebangs itself.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1575547200">- update to version 2.9.2
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1577620800">- sync with upstream spec file (especially for RHEL &amp; Fedora builds)
- ran spec-cleaner
- remove old SUSE targets (SLE-11, Leap 42.3 and below)
  This simplifies the spec file and makes building easier
- Additional required packages for building:
  + python-boto3 and python-botocore for Amazon EC2
  + python-jmespath for json queries
  + python-memcached for cloud modules and local caching of JSON
    formatted, per host records
  + python-redis for cloud modules and local caching of JSON
    formatted, per host records
  + python-requests for many web-based modules (cloud, network,
    netapp)
  =&gt; as the need for those packages depends on the usage of the
    tool, they are just recommended on openSUSE/SUSE machines
- made dependencies for gitlab, vmware and winrm modules configurable,
  as most of their dependencies are not (yet) available on current
  openSUSE/SUSE distributions
- exclude /usr/bin/pwsh from the automatic dependency generation,
  as the Windows Power Shell is not available (yet) on openSUSE/SUSE
- build additional docs and split up ansible-doc package;
  moving changelogs, contrib and example directories there
- prepare for building HTML documentation, but disable this per
  default for the moment, as not all package dependencies are available
  in openSUSE/SUSE (yet)
- package some test scripts with executable permissions</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1579176000">- update to version 2.9.3 (maintenance release)
  * security fixes
  - CVE-2019-14904 (solaris_zone module) (boo#1157968)
  - CVE-2019-14905 (nxos_file_copy module) (boo#1157969)
  * various bugfixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1580212800">- update to version 2.9.4 (maintenance release)
  fix in yum module</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1581595200">- update to version 2.9.5 (maintenance release)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1583409600">- update to version 2.9.6 (maintenance release)</changelog>
  <changelog author="lars@linux-schulserver.de - 2.9.6" date="1586174400">- create missing (empty) template and files directories for
  'ansible-galaxy init' during package build (fixes boo#1137479)
- require python-xml on python 2 systems (boo#1142542)</changelog>
</package>
<package pkgid="8d0f51170ca693e8793898cb0e10940fc2101ce40eb3a464591bc1493c617956" name="ansible-test" arch="noarch">
  <version epoch="0" ver="2.9.6" rel="lp151.2.7.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1552824000">- Update to version 2.7.9
  Minor Changes
  * Add missing import for ConnectionError in edge and routeros module_utils.
  * ``to_yaml`` filter updated to maintain formatting consistency when used
    with ``pyyaml`` versions 5.1 and later
    (https://github.com/ansible/ansible/pull/53772)
  * docker_image * set ``changed`` to ``false`` when using ``force: yes`` to
    tag or push an image that ends up being identical to one already present on
    the Docker host or Docker registry.
  * jenkins_plugin * Set new default value for the update_url parameter
    (https://github.com/ansible/ansible/issues/52086)
  Bugfixes
  * Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
  * Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
  * Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
  * Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
  * If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
  * allow nice error to work when auto plugin reads file w/o `plugin` field
  * ansible-doc * Fix traceback on providing arguemnt --all to ansible-doc command
  * azure_rm_virtualmachine_facts * fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
  * basic * modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
  * cloudscale * Fix compatibilty with Python3 in version 3.5 and lower.
  * convert input into text to ensure valid comparisons in nmap inventory plugin
  * dict2items * Allow dict2items to work with hostvars
  * dnsimple * fixed a KeyError exception related to record types handling.
  * docker_container * now returns warnings from docker daemon on container creation and updating.
  * docker_swarm * Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
  * docker_swarm * do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
  * docker_swarm * fixes idempotency for the ``ca_force_rotate`` option.
  * docker_swarm * improve Swarm detection.
  * docker_swarm * improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
  * docker_swarm * now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
  * docker_swarm * properly implement check mode (it did apply changes).
  * docker_swarm * the ``force`` option was ignored when ``state: present``.
  * docker_swarm_service * do basic validation of ``publish`` option if specified (must be list of dicts).
  * docker_swarm_service * don't crash when ``publish`` is not specified.
  * docker_swarm_service * fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
  * docker_swarm_service * the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
  * ec2 * if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
  * fix DNSimple to ensure check works even when the number of records is larger than 100
  * get_url * return no change in check mode when checksum matches
  * inventory plugins * Fix creating groups from composed variables by getting the latest host variables
  * inventory_aws_ec2 * fix no_log indentation so AWS temporary credentials aren't displayed in tests
  * jenkins_plugin * Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
  * lvol * fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
  * mysql * MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
  * mysql * fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
  * mysql_user: match backticks, single and double quotes when checking user privileges.
  * onepassword_facts * Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
  * openssl_certificate * ``has_expired`` correctly checks if the certificate is expired or not
  * openssl_certificate * fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
  * openssl_certificate * make sure that extensions are actually present when their values should be checked.
  * openssl_csr * improve ``subject`` validation.
  * openssl_csr * improve error messages for invalid SANs.
  * play order is now applied under all circumstances, fixes
  * remote_management foreman * Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
  * rhsm_repository * handle systems without any repos
  * skip invalid plugin after warning in loader
  * urpmi module * fixed issue
  * win_certificate_store * Fix exception handling typo
  * win_chocolatey * Fix issue when parsing a beta Chocolatey install * https://github.com/ansible/ansible/issues/52331
  * win_chocolatey_source * fix bug where a Chocolatey source could not be disabled unless ``source`` was also set * https://github.com/ansible/ansible/issues/50133
  * win_domain * Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
  * win_domain * Fix when running without credential delegated authentication * https://github.com/ansible/ansible/issues/53182
  * win_file * Fix issue when managing hidden files and directories * https://github.com/ansible/ansible/issues/42466
  * winrm * attempt to recover from a WinRM send input failure if possible
  * zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
  New Plugins
  * vmware_vm_inventory * VMware Guest inventory source</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554379200">- Update to version 2.7.10
  Minor Changes
- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
  Bugfixes
- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
- foreman - fix Foreman returning host parameters
- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
- include_tasks - Fixed an unexpected exception if no file was given to include.
- openssl_certificate - fix ``state=absent``.
- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_psexec - Support executables with a space in the path
- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
- windows - Fixed various module utils that did not work with path that had glob like chars
- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1558526400">- Update to version 2.8.0
  Major changes:
  * Experimental support for Ansible Collections and content namespacing -
    Ansible content can now be packaged in a collection and addressed via
    namespaces. This allows for easier sharing, distribution, and installation
    of bundled modules/roles/plugins, and consistent rules for accessing
    specific content via namespaces.
  * Python interpreter discovery - The first time a Python module runs on a
    target, Ansible will attempt to discover the proper default Python
    interpreter to use for the target platform/version (instead of immediately
    defaulting to /usr/bin/python). You can override this behavior by
    setting ansible_python_interpreter or via config.
    (see https://github.com/ansible/ansible/pull/50163)
  * become - The deprecated CLI arguments for --sudo, --sudo-user,
  - -ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in
    favor of the more generic --become, --become-user, --become-method, and
  - -ask-become-pass.
  * become - become functionality has been migrated to a plugin architecture,
    to allow customization of become functionality and 3rd party become methods
    (https://github.com/ansible/ansible/pull/50991)
- addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837
  For the full changelog see /usr/share/doc/packages/ansible/changelogs or online:
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1559995200">- Update to version 2.8.1
  Full changelog is at /usr/share/doc/packages/ansible/changelogs/
  Bugfixes
  - -------
  - ACI - DO not encode query_string
  - ACI modules - Fix non-signature authentication
  - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading
  - Fix "Interface not found" errors when using eos_l2_interface with nonexistant
    interfaces configured
  - Fix cannot get credential when `source_auth` set to `credential_file`.
  - Fix netconf_config backup string issue
  - Fix privilege escalation support for the docker connection plugin when
    credentials need to be supplied (e.g. sudo with password).
  - Fix vyos cli prompt inspection
  - Fixed loading namespaced documentation fragments from collections.
  - Fixing bug came up after running cnos_vrf module against coverity.
  - Properly handle data importer failures on PVC creation, instead of timing out.
  - To fix the ios static route TC failure in CI
  - To fix the nios member module params
  - To fix the nios_zone module idempotency failure
  - add terminal initial prompt for initial connection
  - allow include_role to work with ansible command
  - allow python_requirements_facts to report on dependencies containing dashes
  - asa_config fix
  - azure_rm_roledefinition - fix a small error in build scope.
  - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network
    peering.
  - cgroup_perf_recap - When not using file_per_task, make sure we don't
    prematurely close the perf files
  - display underlying error when reporting an invalid ``tasks:`` block.
  - dnf - fix wildcard matching for state: absent
  - docker connection plugin - accept version ``dev`` as 'newest version' and
    print warning.
  - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available
    since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
  - docker_container - fix network creation when ``networks_cli_compatible`` is
    enabled.
  - docker_container - use docker API's ``restart`` instead of ``stop``/``start``
    to restart a container.
  - docker_image - if ``build`` was not specified, the wrong default for
    ``build.rm`` is used.
  - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the
    module failed.
  - docker_image - module failed when ``source: build`` was set but
    ``build.path`` options not specified.
  - docker_network module - fix idempotency when using ``aux_addresses`` in
    ``ipam_config``.
  - ec2_instance - make Name tag idempotent
  - eos: don't fail modules without become set, instead show message and continue
  - eos_config: check for session support when asked to 'diff_against: session'
  - eos_eapi: fix idempotency issues when vrf was unspecified.
  - fix bugs for ce - more info see
  - fix incorrect uses of to_native that should be to_text instead.
  - hcloud_volume - Fix idempotency when attaching a server to a volume.
  - ibm_storage - Added a check for null fields in ibm_storage utils module.
  - include_tasks - whitelist ``listen`` as a valid keyword
  - k8s - resource updates applied with force work correctly now
  - keep results subset also when not no_log.
  - meraki_switchport - improve reliability with native VLAN functionality.
  - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and
    clearing functionality
  - netapp_e_volumes - fix workload profileId indexing when no previous workload
    tags exist on the storage array.
  - nxos_acl some platforms/versions raise when no ACLs are present
  - nxos_facts fix &lt;https://github.com/ansible/ansible/pull/57009&gt;
  - nxos_file_copy fix passwordless workflow
  - nxos_interface Fix admin_state check for n6k
  - nxos_snmp_traps fix group all for N35 platforms
  - nxos_snmp_user fix platform fixes for get_snmp_user
  - nxos_vlan mode idempotence bug
  - nxos_vlan vlan names containing regex ctl chars should be escaped
  - nxos_vtp_* modules fix n6k issues
  - openssl_certificate - fix private key passphrase handling for
    ``cryptography`` backend.
  - openssl_pkcs12 - fixes crash when private key has a passphrase and the module
    is run a second time.
  - os_stack - Apply tags conditionally so that the module does not throw up an
    error when using an older distro of openstacksdk
  - pass correct loading context to persistent connections other than local
  - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux
  - postgresql - added initial SSL related tests
  - postgresql - added missing_required_libs, removed excess param mapping
  - postgresql - move connect_to_db and get_pg_version into
    module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514)
  - postgresql_db - add note to the documentation about state dump and the
    incorrect rc (https://github.com/ansible/ansible/pull/57297)
  - postgresql_db - fix for postgresql_db fails if stderr contains output
  - postgresql_ping - fixed a typo in the module documentation
  - preserve actual ssh error when we cannot connect.
  - route53_facts - the module did not advertise check mode support, causing it
    not to be run in check mode.
  - sysctl: the module now also checks the output of STDERR to report if values
    are correctly set (https://github.com/ansible/ansible/pull/55695)
  - ufw - correctly check status when logging is off
  - uri - always return a value for status even during failure
  - urls - Handle redirects properly for IPv6 address by not splitting on ``:``
    and rely on already parsed hostname and port values
  - vmware_vm_facts - fix the support with regular ESXi
  - vyos_interface fix &lt;https://github.com/ansible/ansible/pull/57169&gt;
  - we don't really need to template vars on definition as we do this on demand
    in templating.
  - win_acl - Fix qualifier parser when using UNC paths -
  - win_hostname - Fix non netbios compliant name handling
  - winrm - Fix issue when attempting to parse CLIXML on send input failure
  - xenserver_guest - fixed an issue where VM whould be powered off even though
    check mode is used if reconfiguration requires VM to be powered off.
  - xenserver_guest - proper error message is shown when maximum number of
    network interfaces is reached and multiple network interfaces are added at
    once.
  - yum - Fix false error message about autoremove not being supported
  - yum - fix failure when using ``update_cache`` standalone
  - yum - handle special "_none_" value for proxy in yum.conf and .repo files</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1565179200">- Update to version 2.8.3:
  Full changelog is packaged, but also at
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
- (bsc#1142690) Adds CVE-2019-10206-data-disclosure.patch fixing
  CVE-2019-10206: ansible-playbook -k and ansible cli tools
  prompt passwords by expanding them from templates as they could
  contain special characters. Passwords should be wrapped to
  prevent templates trigger and exposing them.
- (bsc#1144453) Adds CVE-2019-10217-gcp-modules-sensitive-fields.patch
  CVE-2019-10217: Fields managing sensitive data should be set as
  such by no_log feature. Some of these fields in GCP modules are
  not set properly. service_account_contents() which is common
  class for all gcp modules is not setting no_log to True. Any
  sensitive data managed by that function would be leak as an
  output when running ansible playbooks.</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1568376000">- Update to version 2.8.5:
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
- removed patches fixed upstream:
  + CVE-2019-10206-data-disclosure.patch
  + CVE-2019-10217-gcp-modules-sensitive-fields.patch</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1571832000">- Update to version 2.8.6:
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst
  Included security fixes:
  * CVE-2019-14846: Fixed secrets disclosure on logs due to display is hardcoded
    to DEBUG level (bsc#1153452)
  * CVE-2019-14856: Fixed insufficient fix for CVE-2019-10206 (bsc#1154232)
  * CVE-2019-14858: Fixed data in the sub parameter fields that will not be masked
    and will be displayed when run with increased verbosity (bsc#1154231)</changelog>
  <changelog author="lars@linux-schulserver.de" date="1572177600">- include the sha checksum file in the source, which allows to verify
  the original sources</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1572609600">- Update to version 2.9.0:
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1572782400">- added file '/usr/bin/ansible-test' to spec file</changelog>
  <changelog author="lars@linux-schulserver.de - 2.9.1" date="1573819200">- update to version 2.9.1
  Full changelog is packaged at /usr/share/doc/packages/ansible/changelogs/
  and also available online at
  https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst
  + CVE-2019-14864: fixed Splunk and Sumologic callback plugins leak
    sensitive data in logs (boo#1154830)
- replace all #!/usr/bin/env lines to use #!/usr/bin/$1 directly</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1574164800">- split out ansible-test package for module developers</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1574337600">- Create system directories that Ansible defines as default locations
  in ansible/config/base.yml
- rephrase the summary line
- Disable shebang munging for specific paths. These files are data files.
  ansible-test munges the shebangs itself.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1575547200">- update to version 2.9.2
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1577620800">- sync with upstream spec file (especially for RHEL &amp; Fedora builds)
- ran spec-cleaner
- remove old SUSE targets (SLE-11, Leap 42.3 and below)
  This simplifies the spec file and makes building easier
- Additional required packages for building:
  + python-boto3 and python-botocore for Amazon EC2
  + python-jmespath for json queries
  + python-memcached for cloud modules and local caching of JSON
    formatted, per host records
  + python-redis for cloud modules and local caching of JSON
    formatted, per host records
  + python-requests for many web-based modules (cloud, network,
    netapp)
  =&gt; as the need for those packages depends on the usage of the
    tool, they are just recommended on openSUSE/SUSE machines
- made dependencies for gitlab, vmware and winrm modules configurable,
  as most of their dependencies are not (yet) available on current
  openSUSE/SUSE distributions
- exclude /usr/bin/pwsh from the automatic dependency generation,
  as the Windows Power Shell is not available (yet) on openSUSE/SUSE
- build additional docs and split up ansible-doc package;
  moving changelogs, contrib and example directories there
- prepare for building HTML documentation, but disable this per
  default for the moment, as not all package dependencies are available
  in openSUSE/SUSE (yet)
- package some test scripts with executable permissions</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1579176000">- update to version 2.9.3 (maintenance release)
  * security fixes
  - CVE-2019-14904 (solaris_zone module) (boo#1157968)
  - CVE-2019-14905 (nxos_file_copy module) (boo#1157969)
  * various bugfixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1580212800">- update to version 2.9.4 (maintenance release)
  fix in yum module</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1581595200">- update to version 2.9.5 (maintenance release)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1583409600">- update to version 2.9.6 (maintenance release)</changelog>
  <changelog author="lars@linux-schulserver.de - 2.9.6" date="1586174400">- create missing (empty) template and files directories for
  'ansible-galaxy init' during package build (fixes boo#1137479)
- require python-xml on python 2 systems (boo#1142542)</changelog>
</package>
<package pkgid="27133950c22e8108041d7623764c39a87a8023b35564c58cf7d79deb022436f8" name="ant" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="f0c43e51595d5b72d292d716bf336de3de66525c94b48a9da579c13b0c090f13" name="ant" arch="src">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="b8fe05098be547a0c254a22858359ce6915050c484e8dcfd390f4d08849fbfd2" name="ant-antlr" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="7b087473f07cd07e0d5a92528474c25869db5165997c6c35e268a3d999a95166" name="ant-antlr" arch="src">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="74cb5f20c4873ce950dd3e673eeb356b00b4f10674be39e0ac2aec1142f57fb4" name="ant-apache-bcel" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="c2ac5ca9dc7d350fbb84061ad298fa6140c44592f072e0e5361dc2d173d44fc9" name="ant-apache-bsf" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="28e5aad45c4553f076e2f6a9f3e8a37840b36a1e4a6ba657fd03dd371843371e" name="ant-apache-log4j" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="3502b1e67ddf6f1cc8053f6bd3dfaadca6ea4d907e99c8efc3a764e538973f8b" name="ant-apache-oro" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="adb61148776713c5235ce00c08296a76fda886b4b420ebe3cb6b522928e2c20e" name="ant-apache-regexp" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="3c29f1a6ff8f8b50ca183128f294a8d6d1e882ad2175150ccf48f24d9c15b6ef" name="ant-apache-resolver" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="47f3e5723cfe74d7da85a6749a2f795ce7c29ecae0aea6911f21e2a9f4cbbd2e" name="ant-apache-xalan2" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="cc3f9976cffa70e9801c947fe7fc824d6098370e2fb0e78f031bbaebcf3aea7b" name="ant-commons-logging" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="0831df6de44e8fd9152609e387b4cf5b889dcbbb59a090bd91d772c300422406" name="ant-commons-net" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="60c6e96725266b238c275bacdf49d3f0f535eda0fbf5088bcb2425cea5ecb586" name="ant-javamail" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="f54b8b57500ed29efee24295ed501e6458e3133d9b539f97bf03eed39fc3d796" name="ant-jdepend" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="9c5204b96aba86e1600a0b4ee4e886394e26a27f8d313b764099a8f4892acbcf" name="ant-jmf" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="002f1335ed11c3bcc9e009ad8f87f217d6523fe784de79374bd7dd4373ed252d" name="ant-jsch" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="b854c45e0244eb2d9216872551cefa14ef0577aa193e1d2da4cfa55ab3d288a1" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="25275ef8b6b906f8891558e97793a30935224e698b50610182c7818dea771777" name="ant-junit" arch="src">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="0056d9edf62093ee2240baf7a45550485733940ce1c835fdba9a08c266e6053d" name="ant-manual" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="b6bca7075a0f3940b39dae0a34d7d21e4edd9c626ad1d399b1f0a0b1a2551c6e" name="ant-scripts" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="e37696f46e5505feae2f58f37a7cf29aad0f5cce40127233ccacdc44c15704e1" name="ant-swing" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="86e4c23b0acdaab7f57c39071d4bdc919a896811bf3678f3dc4245abd52fb3cc" name="ant-testutil" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766400">- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588766401">- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]</changelog>
</package>
<package pkgid="4deaf97d315a836fa004398a20c743fc9bce36f0b2d5c305c2599e4b85801484" name="antlr" arch="src">
  <version epoch="0" ver="2.7.7" rel="lp151.9.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1204545600">- updated to 2.7.7
  * updated BaseAST.java to make the doWorkForAll method static. Same
    behaviour, except no ClassCastExceptions when sibling.getFirstChild()
    happens to return an AST that doesn't extend BaseAST.  Oliver Wong contributed
    the patch.
  * updated TokenStreamRewriteEngine.java to reflect bug fixes discovered
    in v3 counterpart.</changelog>
  <changelog author="tittiatcoke@opensuse.org" date="1282132800">- Ensure that the development files are build too. The package is now a build
  requirement for the KDESDK4 package.
- Removed the structure to build just the native version.</changelog>
  <changelog author="mvyskocil@suse.cz" date="1282219200">- enabled the python (python-antlr) and csharp (antlr-csharp) support
- moved jar files to new antlr-java package, which is required by main antlr
  one. This is to have jar files in noarch package
- do not use default make install, but install files manually with a
  compatibility links to /usr/share/antlr-2.7.7</changelog>
  <changelog author="mvyskocil@suse.cz" date="1282564800">- add missing java requires of antlr-java package</changelog>
  <changelog author="toddrme2178@gmail.com" date="1311249600">- Modify descriptions (fix for RPMLINT warnings)
- Check for duplicate files (fix for RPMLINT warnings)</changelog>
  <changelog author="mvyskocil@suse.com" date="1351684800">- examples files are now 0644 to beeing able to fdupes them properly (bnc#784670)</changelog>
  <changelog author="dmueller@suse.com" date="1373544000">- drop antlr-cshap, entirely unused and removes mono dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="darin@darins.net" date="1398772800">- supporess bytecode version check on SLE
- fix perms for SLES</changelog>
  <changelog author="darin@darins.net" date="1398859200">- Set buildarch on SLE_11 or the python subpackage is packaged
  as noarch when they need be arch specific.
  http://lists.opensuse.org/opensuse-packaging/2014-04/msg00055.html</changelog>
  <changelog author="tchvatal@suse.com" date="1404475200">- Cleanup with spec-cleaner and fix the sle11 build properly.</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Reduce dependencies a bit</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Drop the javadoc so we can be build with java bootstrapping reducing
  the cycle/failures</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- fixes necessary to compile with Java 9
  * set javac source and target to 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Require java-devel &gt;= 1.6 to build, because of the source and
  target level</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 [bsc#1068226, fate#323526]</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix build with RPM 4.14: a command that exits with error &gt; 0
  aborts the build (and grep not finding a string is retval 1).</changelog>
  <changelog author="tchvatal@suse.com" date="1515758400">- Add condition about python2 module, the rewrite happened in antlr4
  for python3 support and it is completely different than the antlr2
  * The python module is not used by any package in TW bsc#1068226</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1575979200">- Remove obsolete python2 compat symlinks [bsc#1158744]</changelog>
</package>
<package pkgid="c6b1c5e123a88a681c8f7271dc0894bb3c7d21ac7eb3e34c3bce1c54499bfdc5" name="antlr" arch="x86_64">
  <version epoch="0" ver="2.7.7" rel="lp151.9.3.1"/>
  <changelog author="tchvatal@suse.com" date="1404475200">- Cleanup with spec-cleaner and fix the sle11 build properly.</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Reduce dependencies a bit</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Drop the javadoc so we can be build with java bootstrapping reducing
  the cycle/failures</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- fixes necessary to compile with Java 9
  * set javac source and target to 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Require java-devel &gt;= 1.6 to build, because of the source and
  target level</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 [bsc#1068226, fate#323526]</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix build with RPM 4.14: a command that exits with error &gt; 0
  aborts the build (and grep not finding a string is retval 1).</changelog>
  <changelog author="tchvatal@suse.com" date="1515758400">- Add condition about python2 module, the rewrite happened in antlr4
  for python3 support and it is completely different than the antlr2
  * The python module is not used by any package in TW bsc#1068226</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1575979200">- Remove obsolete python2 compat symlinks [bsc#1158744]</changelog>
</package>
<package pkgid="477e051a96e029d85161f04253f6ffaae9241c7201bf1d51b8739aa48a4cc2dd" name="antlr-bootstrap" arch="noarch">
  <version epoch="0" ver="2.7.7" rel="lp151.9.3.1"/>
  <changelog author="dbornkessel@suse.de" date="1178280000">- added unzip to BuildRequires</changelog>
  <changelog author="adrian@suse.de" date="1201694400">- add Provides: antlr on sugggestion of dbornkessel</changelog>
  <changelog author="mvyskocil@suse.cz" date="1204545600">- updated to 2.7.7</changelog>
  <changelog author="mvyskocil@suse.cz" date="1282564800">- do not Provide antlr</changelog>
  <changelog author="mvyskocil@suse.cz" date="1283256000">- Do not install antlr.jar to avoid conflicts with a regular
  antlr-java packages. Packages using antlr-bootstrap needs to have
  antlr-bootstrap in their CLASSPATH</changelog>
  <changelog author="schwab@suse.de" date="1374062400">- Fix quoting of $</changelog>
  <changelog author="tchvatal@suse.com" date="1404475200">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Remove requirements of ecj-bootstrap and fastjar
  * use the gcj.jar that comes with gccN-java
  * use gjar-N instead of fastjar</changelog>
  <changelog author="fstrba@suse.com" date="1507550400">- Remove requirement of gcc-java all together and build with
  any java version that exists and is able to use source and target
  1.6</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
</package>
<package pkgid="4b0f9863611fddd131a6458943902bf01333d6327908d9ed91186d94e9018005" name="antlr-bootstrap" arch="src">
  <version epoch="0" ver="2.7.7" rel="lp151.9.3.1"/>
  <changelog author="dbornkessel@suse.de" date="1158580800">- created bootstrapping package</changelog>
  <changelog author="dbornkessel@suse.de" date="1158753600">- renamed antlr-bootstrap.jar to antlr.jar</changelog>
  <changelog author="ro@suse.de" date="1159358400">- added gcc-gij to BuildRequires</changelog>
  <changelog author="dbornkessel@suse.de" date="1160049600">- deleted
  antlr-2.7.6/examples/java/unicode.IDENTs/ShowString.java
  antlr-2.7.6/examples/java/unicode.IDENTs/StreamConverter.java
  from tar ball due to licensing issues (Bug #207621)</changelog>
  <changelog author="dbornkessel@suse.de" date="1160222400">- added check that checks whether deleted files ShowString.java and StreamConverter.java are really not in place</changelog>
  <changelog author="ro@suse.de" date="1160654400">- change buildreq to "&gt;=" for ecj-bootstrap</changelog>
  <changelog author="dbornkessel@suse.de" date="1163592000">- delete "Provides: antlr" ... packages that need the bootstrap package should have a hard require on it</changelog>
  <changelog author="dbornkessel@suse.de" date="1178280000">- added unzip to BuildRequires</changelog>
  <changelog author="adrian@suse.de" date="1201694400">- add Provides: antlr on sugggestion of dbornkessel</changelog>
  <changelog author="mvyskocil@suse.cz" date="1204545600">- updated to 2.7.7</changelog>
  <changelog author="mvyskocil@suse.cz" date="1282564800">- do not Provide antlr</changelog>
  <changelog author="mvyskocil@suse.cz" date="1283256000">- Do not install antlr.jar to avoid conflicts with a regular
  antlr-java packages. Packages using antlr-bootstrap needs to have
  antlr-bootstrap in their CLASSPATH</changelog>
  <changelog author="schwab@suse.de" date="1374062400">- Fix quoting of $</changelog>
  <changelog author="tchvatal@suse.com" date="1404475200">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Remove requirements of ecj-bootstrap and fastjar
  * use the gcj.jar that comes with gccN-java
  * use gjar-N instead of fastjar</changelog>
  <changelog author="fstrba@suse.com" date="1507550400">- Remove requirement of gcc-java all together and build with
  any java version that exists and is able to use source and target
  1.6</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
</package>
<package pkgid="0b2662df649e12eb827e792295920597590ab7e5e7a0f6c5b0dc99083b978c8a" name="antlr-devel" arch="x86_64">
  <version epoch="0" ver="2.7.7" rel="lp151.9.3.1"/>
  <changelog author="tchvatal@suse.com" date="1404475200">- Cleanup with spec-cleaner and fix the sle11 build properly.</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Reduce dependencies a bit</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Drop the javadoc so we can be build with java bootstrapping reducing
  the cycle/failures</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- fixes necessary to compile with Java 9
  * set javac source and target to 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Require java-devel &gt;= 1.6 to build, because of the source and
  target level</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 [bsc#1068226, fate#323526]</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix build with RPM 4.14: a command that exits with error &gt; 0
  aborts the build (and grep not finding a string is retval 1).</changelog>
  <changelog author="tchvatal@suse.com" date="1515758400">- Add condition about python2 module, the rewrite happened in antlr4
  for python3 support and it is completely different than the antlr2
  * The python module is not used by any package in TW bsc#1068226</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1575979200">- Remove obsolete python2 compat symlinks [bsc#1158744]</changelog>
</package>
<package pkgid="735fa5629e18c0c701f714d96e81a067c66a376a6d53a6bd379475c5590c032f" name="antlr-java" arch="noarch">
  <version epoch="0" ver="2.7.7" rel="lp151.9.3.1"/>
  <changelog author="tchvatal@suse.com" date="1404475200">- Cleanup with spec-cleaner and fix the sle11 build properly.</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Reduce dependencies a bit</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Drop the javadoc so we can be build with java bootstrapping reducing
  the cycle/failures</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- fixes necessary to compile with Java 9
  * set javac source and target to 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Require java-devel &gt;= 1.6 to build, because of the source and
  target level</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 [bsc#1068226, fate#323526]</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix build with RPM 4.14: a command that exits with error &gt; 0
  aborts the build (and grep not finding a string is retval 1).</changelog>
  <changelog author="tchvatal@suse.com" date="1515758400">- Add condition about python2 module, the rewrite happened in antlr4
  for python3 support and it is completely different than the antlr2
  * The python module is not used by any package in TW bsc#1068226</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1575979200">- Remove obsolete python2 compat symlinks [bsc#1158744]</changelog>
</package>
<package pkgid="6d19a0c3e2d46775dd1f2e8790969ee3b29f48eb84270d825f435d2d806e3858" name="antlr-manual" arch="noarch">
  <version epoch="0" ver="2.7.7" rel="lp151.9.3.1"/>
  <changelog author="tchvatal@suse.com" date="1404475200">- Cleanup with spec-cleaner and fix the sle11 build properly.</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Reduce dependencies a bit</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Drop the javadoc so we can be build with java bootstrapping reducing
  the cycle/failures</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- fixes necessary to compile with Java 9
  * set javac source and target to 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Require java-devel &gt;= 1.6 to build, because of the source and
  target level</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Explicitly require python2 [bsc#1068226, fate#323526]</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix build with RPM 4.14: a command that exits with error &gt; 0
  aborts the build (and grep not finding a string is retval 1).</changelog>
  <changelog author="tchvatal@suse.com" date="1515758400">- Add condition about python2 module, the rewrite happened in antlr4
  for python3 support and it is completely different than the antlr2
  * The python module is not used by any package in TW bsc#1068226</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1575979200">- Remove obsolete python2 compat symlinks [bsc#1158744]</changelog>
</package>
<package pkgid="002fd7710092d7770209d6b17eff981d7098f2d47e774395ea6999866a92a39b" name="apache-commons-beanutils" arch="noarch">
  <version epoch="0" ver="1.9.2" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1121688000">- Current version 1.7.0 from JPackage.org</changelog>
  <changelog author="jsmeix@suse.de" date="1122465600">- Adjustments in the spec file.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="mvyskocil@suse.cz" date="1333368000">- update to 1.8.3 and rename to apache- to follow the upstream
- fixes in this release
  * memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366
  * BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which
    uses WeakHashMap is not thread-safe
  * [BEANUTILS-371] Add constructors which have useColumnLabel parameter to
    ResultSetDynaClass and RowSetDynaClass
  * and a lot of other like NPE in BeanUtilsBean.setProperty()</changelog>
  <changelog author="dmacvicar@suse.de" date="1404734400">- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup bit with spec-cleaner</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * jdk9.patch
  - Specify java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1566388800">- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
  * Added apache-commons-beanutils-CVE-2019-10086.patch</changelog>
</package>
<package pkgid="8d48d0815c9a235d7a0385cbe2246c5be635ae6a87195063ae5da76895a1f90f" name="apache-commons-beanutils" arch="src">
  <version epoch="0" ver="1.9.2" rel="lp151.3.3.1"/>
  <changelog author="skh@suse.de" date="1094385600">- Initial package created with version 1.6.1 (JPackage 1.5)</changelog>
  <changelog author="skh@suse.de" date="1095336000">- Fix prerequires of javadoc subpackage</changelog>
  <changelog author="skh@suse.de" date="1108987200">- update to version 1.7.0
- don't use icecream</changelog>
  <changelog author="jsmeix@suse.de" date="1121688000">- Current version 1.7.0 from JPackage.org</changelog>
  <changelog author="jsmeix@suse.de" date="1122465600">- Adjustments in the spec file.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="mvyskocil@suse.cz" date="1333368000">- update to 1.8.3 and rename to apache- to follow the upstream
- fixes in this release
  * memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366
  * BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which
    uses WeakHashMap is not thread-safe
  * [BEANUTILS-371] Add constructors which have useColumnLabel parameter to
    ResultSetDynaClass and RowSetDynaClass
  * and a lot of other like NPE in BeanUtilsBean.setProperty()</changelog>
  <changelog author="dmacvicar@suse.de" date="1404734400">- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup bit with spec-cleaner</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * jdk9.patch
  - Specify java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1566388800">- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
  * Added apache-commons-beanutils-CVE-2019-10086.patch</changelog>
</package>
<package pkgid="bd79ca58ced5e78a13953db0534a69f856978d01892a87727e0a9bac0dcaf9f3" name="apache-commons-beanutils-javadoc" arch="noarch">
  <version epoch="0" ver="1.9.2" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1121688000">- Current version 1.7.0 from JPackage.org</changelog>
  <changelog author="jsmeix@suse.de" date="1122465600">- Adjustments in the spec file.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="mvyskocil@suse.cz" date="1333368000">- update to 1.8.3 and rename to apache- to follow the upstream
- fixes in this release
  * memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366
  * BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which
    uses WeakHashMap is not thread-safe
  * [BEANUTILS-371] Add constructors which have useColumnLabel parameter to
    ResultSetDynaClass and RowSetDynaClass
  * and a lot of other like NPE in BeanUtilsBean.setProperty()</changelog>
  <changelog author="dmacvicar@suse.de" date="1404734400">- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup bit with spec-cleaner</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * jdk9.patch
  - Specify java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1566388800">- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
  * Added apache-commons-beanutils-CVE-2019-10086.patch</changelog>
</package>
<package pkgid="19ef3d01b02829f993be6a9041b0688d2d5d32248f5c8a070130670cf7340030" name="apache-commons-httpclient" arch="noarch">
  <version epoch="0" ver="3.1" rel="lp151.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1359892800">- Initial release</changelog>
  <changelog author="mvyskocil@suse.com" date="1360843200">- fix bnc#803332: no ssl certificate hostname checking (CVE-2012-5783)
  * commons-httpclient-CVE-2012-5783.patch
- add jakarta- compat symlinks</changelog>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="4dc7467b022257739f45f084737e4c9b64447bc24b6c2d181304d64cc6d78d1d" name="apache-commons-httpclient" arch="src">
  <version epoch="0" ver="3.1" rel="lp151.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1359892800">- Initial release</changelog>
  <changelog author="mvyskocil@suse.com" date="1360843200">- fix bnc#803332: no ssl certificate hostname checking (CVE-2012-5783)
  * commons-httpclient-CVE-2012-5783.patch
- add jakarta- compat symlinks</changelog>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="791931b268c493b58907da1f226912ea0ddb89ed4cb5eda5be51132d88b31acf" name="apache-commons-httpclient-demo" arch="noarch">
  <version epoch="0" ver="3.1" rel="lp151.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1359892800">- Initial release</changelog>
  <changelog author="mvyskocil@suse.com" date="1360843200">- fix bnc#803332: no ssl certificate hostname checking (CVE-2012-5783)
  * commons-httpclient-CVE-2012-5783.patch
- add jakarta- compat symlinks</changelog>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="5a25f82bb8f225321ecad77a4ec9c1baaf0c27fc7d6b36a0a5c2368361bc44e8" name="apache-commons-httpclient-javadoc" arch="noarch">
  <version epoch="0" ver="3.1" rel="lp151.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1359892800">- Initial release</changelog>
  <changelog author="mvyskocil@suse.com" date="1360843200">- fix bnc#803332: no ssl certificate hostname checking (CVE-2012-5783)
  * commons-httpclient-CVE-2012-5783.patch
- add jakarta- compat symlinks</changelog>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="45752bd3187c76921f6cf0c8d1eca80896f81cf873b1119225b1d2ea6364e62f" name="apache-commons-httpclient-manual" arch="noarch">
  <version epoch="0" ver="3.1" rel="lp151.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1359892800">- Initial release</changelog>
  <changelog author="mvyskocil@suse.com" date="1360843200">- fix bnc#803332: no ssl certificate hostname checking (CVE-2012-5783)
  * commons-httpclient-CVE-2012-5783.patch
- add jakarta- compat symlinks</changelog>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="9dcf35992ee969f0720a2ee877b119a0e0502d57b91f5f1da08151c20e9d39ac" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="b74305d38fb790d8897bdc3793713792efbe7550f61509ec842c697ffabc0ae6" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="04e929cdcf28985e965ec41b3b92b3d0928bc7da4448f99200732a7a25be2f96" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="9559f5df4fb69588196f09f926ab72f427b09d33496dbfe2d32aaa1e0be77801" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="da2234f6d9a3b5f24b50cb10d2e950be13c7992c08a5ee7c7e06804a37e7df1c" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="f9df73cd93a7545a66ea5700fc5f91dafd27d18f45a92532ba5fc92960dadc2f" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="570bc51041e6c7a79a44b8baa05722e98d7d08a5c7ae6bcb048a8aa90a515c72" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="8a810acba3d3ba584dc49d0fc4a7b0d798fafc1126b15712c4366d71daf8532e" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="bba5aaf97e3d9eb2f77bbf57c6d4cc4959fd1c8b13d31390f5ba53d76846e0e8" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="7547c3ddb8d7b41755be25b4b0e5a3077e82b5ba36ad8ba19edab77b54cda3fd" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="cb0c2d5e963a568d49e5c51b0d615c8e7ad2e1025866182c5c4ad7a3f13039e2" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="43d53d22eb8e491b017c99144f9c09e4ef8aedb10c5f4aa456dac070e501c456" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="415cc4e2ce8fa85a15689bb8a61e0679711453829d77b352da1d12735f030ee7" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="33e48ffe7b4c1dcc1766336ebd538431ed94e1759d64ecff496a423129497585" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="c05072cad9b1832c74dab33fc02ad1f6090464b58eb4d0aeaf8deb6faeeef140" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="4e8f24b69a1d44bd6f5a85001e7ad261fee7bb663d0bd9df9c92b882bd44104f" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="7ece432a57c192e4ab20f9d60ae4c84f2ad44c659c3869899142db0d80b56d40" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="58378a20a00fffa87a789be7855f610dee3b6aa8e4e7236da2fdfe2d11b4263f" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="d8e7feb2b779720c6719cd861bf78074d989b3b040930e083537de62efc49b3a" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="06a8665578d58d6938f478461f95eadedaa2c052d66cec2f354f7ccc6a1bff1b" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="2d612ba3fde18114f5bda98a29909e055e531815061a5a35fd86a618964db1fe" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="8a7c061a761946c1af083b0a3dd46e53de744da4e3c5189bf8598e89db760e10" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="9b15003ad708f627dbdef18a0f403b5b2d8b381367ac886c5198292e6454442a" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="4208b05e0f68feb10e926ef883470f46bee8a00b96b2242095d930c134b57e35" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="b36e03fdb53c13b563b31519bd0c92f422a0455161fcbbd7d0d3202cf29c8e5d" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="609d7ba77dc9ac0cdff84f75837fd4f1fc23d6d2c26b6e33a4bc8bfd1d122c10" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="1014a6814be3c47a651f25978864e4bda660ebcbe2dc7cbefedce58a0635b2a4" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="35ba157badfdb320a9f91a9112a4a47ccdf7d2cca093551f1b3162e88de93052" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="d15c3d1a000fa7fddaa40ef574505ce6d481e33a267fa6630f02041a4e97f670" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="3bc39d26adce24cf1400b59e73d276516d0b041e1c3d3bb2deaf43984ca0cab9" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="3987c57f44d0760b665366a422ac3fcb09f4c6bad0f3d554f0b171bb92a9204a" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="56e710151ab3ba46672bc31a5191c76139ade63db8f127f2f44c8183529b5e67" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="74e0474cd806759d5e30b5e03e25e3ef386efb9baa230b0dac1e57443fb34429" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="05dfe9eb3bfc507c8e123ff962ab88a719b433aa42b43439dea04682b5ba017f" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="987ee32dc26e466dbf54171005b2d0626bfb86fa2878aae2febc79dec9d55164" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="0fe86dde0c944632e305a23decc29b7f6d87a257fc38330a393de107f8b7d5cc" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="214b14265d77d82992269ed6b14da255b6ccfcd3829126ce309da9b9d5cfab6f" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="a86938ce3d1759696557239b5731bfefd32bc260d3ce2ba09f422ac4d8ef5ae5" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="c7a7e72c6ade6ab2d40faa47e708dbc34a52a048af0c620a8d03e7b8e93b94fe" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="46d98c5d274a372f780520216e9f7e8603e5ee00b3d1c9b503ce8d32a67f1e0d" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="64cf22b85a83a20051dc55cfd0248c653f5a61584564e5e47c50365a91abf985" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="10de557cf7cd6e3f5f487df64c7d92bd26ee6066a5f9159cef8b597fd7bda8a9" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="695e26b3bee04cd22d74550d823f80471f3c3c56e2431ec4bc0bd0e76ab49d38" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="9fae09430b28fd0dea9b77146e60ed41b37ead564a61a9fe3001376357434b9e" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="03e6a62a84a134b92d50c6c42d44b9cad7bbd187986b43de7fba4bb4d064829b" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="6c5e0391a1f1c496888ecfe1ed4a125a679918f3b3da6af272aec53339c0bc9b" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="ff70b787e9328a7d41f5ae3b6178a822ce7ab0df16437fc8721872d2190c541d" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="b4a6d61184988585660dd327878a6745aa998790283e9a9e77eb87f298981924" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="8b331eeb6e42f8cf939487ba7332497f6655a00393ad9ed30763d72aff8bb464" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="4a0c5424aaeeec35e45ba1c95d291c0571837dd0893109dcd337d85bed30ab01" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="7ccb91fea5787b697d475c5797e0e8013980fce2730f8fff9f8ef6f9b41d28b7" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="a9c8e8ca93809e97f333b7a468200ad7806ea644811419007c7876ad68da486a" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="1f8622c9b0724f0faedfc22dc7d52e0726042bcc28bd6d36f0c32935bf1c13b2" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="7047a69298c452de82911c4ee6e408d6e309c9c6fb965e3020b03ec15ef9015e" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="00f4c27b177413f8081aab41736b3e5b2346928f7e92f67f719c89f00b5dda63" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="be4d8fc533f17de6017993a70676eae4cf8f2393f7c67b74e11d6bc55ba83876" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="71ea8112cc57cd01e3102ce208cd7301a288523968d47e9aeea6be6633ea3ee7" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="05882cab2c1c966e60fbc961cc208c60be8453ca3d03eb28999f4eb9dd37ee00" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="d591600a03aa444d6d121b1a515c1c3b2b2807c9e90ec7c966b52928db3e7918" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="95242ca0820f7663807a21b8d8a6570cafa6839374dc17cf4ddef09af7d64569" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="31fd8cbb05aa4888f5f5f4566e3b8636b342b255d55505f44da53579594450c0" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="d90fa0cc5af8097d88905c6009d6279bda88431398308eeba76054c0ed7898f6" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="0379e958c1b96a1cbcf9b9d589cc042c04f51a6e6a70d4a2c3b27d8fb4bafd04" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="8fffeef7aef5ce4489576ba304364e710f5ff2bc4d8d67da7d0424d1226235e1" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="338dd805beaa5a9763b047fdcfee9b2d61e6f65d411adf5c0ee260c122bb40e4" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="82eea90d27f4ea3d9abba8c6fd4e947841465b4bbfc8ce63b3b7e518423f95ff" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="b632f057c955c18b841ab04ac1053c3d433c67da8abb5965eba925dc3c26908c" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="d8a4bc44bcb7973c97f75780e379c9c84daa7bb4012e602bf421ad036ab2c12d" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="b745ffb123b7de9607322c2d821a69349aa7b6ec14607b27c37be2c80e57c327" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="0b619971024f189472c06aae97c19d967c8e22a3a163629485bc69fa792708f7" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="781c6c741b6b07f3eab764a7298197e5e76124a6d13da2c72d17e32356d3cb1c" name="apache2-mod_apparmor" arch="i586">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="9bf197821748b88a08b98a244fed080ddfb94f0f6cb8c995aacd7e7e3d998c24" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="644a117c3eeba2e30f7b5356d87469dda18950da31296854c6335659e9eaa8ed" name="apache2-mod_auth_kerb" arch="src">
  <version epoch="0" ver="5.4" rel="lp151.3.3.1"/>
  <changelog author="mc@suse.de" date="1147867200">- initial release</changelog>
  <changelog author="mc@suse.de" date="1158667200">- update to version 5.1</changelog>
  <changelog author="mc@suse.de" date="1166529600">- update to version 5.3</changelog>
  <changelog author="mc@suse.de" date="1189425600">- add mod_auth_kerb-init_creds_opt.dif</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1238155200">- update to 5.4:
  * implemented KrbServiceName Any to deal with multiple keytab
    entries for various browsers
  * implemented KrbLocalUserMapping i.e. to strip @REALM from
    username for further use
  * implemented already_succeeded function to avoid hammering the
    KDC with same auth requests in single connection
  * fixed threading issues
  * improved configure and Makefile scripts (mainly for BSD users)
  * fixed minor issues
- minor spec file style fixes
- added patch to fix compiler warnings
- removed mod_auth_kerb-init_creds_opt.dif, has been merged
  upstream</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1238500800">- build against heimdal on SLE 9
- added missing %changelog in spec file</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1238587200">- fixed warning fixing patch that was causing a "undefined symbol:
  cmp_gss_type" error at runtime</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1247832000">- add per-connection authentication caching, based on
  https://sourceforge.net/tracker/?func=detail&amp;aid=1891230&amp;group_id=51775&amp;atid=464526
  by &lt;jorgensen@lowtechsolutions.net&gt;, but made it configurable
  through the KrbCacheAuthentication directive (that is disabled
  by default, as it is to be seen as experimental)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1247832001">- add mod_auth_kerb.apache22.patch that adds Apache 2.2 authn
  provider support (authn_kerberos):
  https://sourceforge.net/tracker/?func=detail&amp;aid=2782088&amp;group_id=51775&amp;atid=464526</changelog>
  <changelog author="draht@suse.de" date="1342094400">- preparation of the package for submission against sle11-sp1,
  review of source and patches/changes, compilation warnings,
  licence and packaging. This is (FATE#313165) (ECO-FATE#313165)
  and [bnc#771265].</changelog>
  <changelog author="mc@suse.com" date="1365249600">- add support for apache 2.4
  mod_auth_kerb-5.4-apache24.patch
  http://sourceforge.net/tracker/?func=detail&amp;aid=3521787&amp;group_id=51775&amp;atid=464526
- new format for License</changelog>
  <changelog author="draht@suse.de" date="1396008000">- sles12 submission:
  * mod_auth_kerb.apache22.patch -&gt; mod_auth_kerb.apache22+.patch
    make apache 2.2 modifications unconditional, as they are
    required by apache 2.4, too.
    This immediately means that compiling this package against
    apache 2.0 would not work.
  * rework mod_auth_kerb-5.4-apache24.patch into
    mod_auth_kerb-api_changes_apache24.patch: adaption to apache
    2.4 API, in particular logging and remote IP reference struct
    members.</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="hguo@suse.com" date="1431345600">- Introduce upstream patches:
  * Support s4u2proxy operation.
  * Fix an issue that causes loss of delegation after first request on the connection.
  * Fix an issue that causes HTTP 500 error when user account name is longer than Kerberos principal name.
  * Consider authentication request successful when GSS_S_CONTINUE_NEEDED (multiple-exchange-request) is encountered.
  The existing patch for Apache2.4 compatibility has been re-aligned with the introduction of new patches.</changelog>
  <changelog author="kstreitova@suse.com" date="1432641600">- add new licenses:
  * MIT - for mit-internals.h file
  * ASL 2.0 - for 0101-mod_auth_kerb-5.4-s4u2proxy.patch</changelog>
  <changelog author="hguo@suse.com" date="1433332800">- Clean up of spec file:
  * Fix unrecognised license name (Apache 2.0).
  * Remove build dependencies and macros for building on unsupported SUSE distros.
  * Remove expired macro "debug_package".
  * Fix URL link of the package.
  * Remove unnecessary "INSTALL" document file from file list.</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1443009600">- test module with %apache_test_module_load</changelog>
  <changelog author="pgajdos@suse.com" date="1443787200">- fix build for 11sp3 (add BuildRoot:)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- add mod_auth_kerb-5.4-auth_segfault.patch to fix a segmentation
  fault in function authenticate_user_krb5pwd() when credentials
  are supplied using basic authentication [bsc#1142545]</changelog>
</package>
<package pkgid="55adc6263808bd206e05c2f6c28c30e778f2ca9e6c46078200dc16efef05469c" name="apache2-mod_auth_kerb" arch="x86_64">
  <version epoch="0" ver="5.4" rel="lp151.3.3.1"/>
  <changelog author="mc@suse.com" date="1365249600">- add support for apache 2.4
  mod_auth_kerb-5.4-apache24.patch
  http://sourceforge.net/tracker/?func=detail&amp;aid=3521787&amp;group_id=51775&amp;atid=464526
- new format for License</changelog>
  <changelog author="draht@suse.de" date="1396008000">- sles12 submission:
  * mod_auth_kerb.apache22.patch -&gt; mod_auth_kerb.apache22+.patch
    make apache 2.2 modifications unconditional, as they are
    required by apache 2.4, too.
    This immediately means that compiling this package against
    apache 2.0 would not work.
  * rework mod_auth_kerb-5.4-apache24.patch into
    mod_auth_kerb-api_changes_apache24.patch: adaption to apache
    2.4 API, in particular logging and remote IP reference struct
    members.</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="hguo@suse.com" date="1431345600">- Introduce upstream patches:
  * Support s4u2proxy operation.
  * Fix an issue that causes loss of delegation after first request on the connection.
  * Fix an issue that causes HTTP 500 error when user account name is longer than Kerberos principal name.
  * Consider authentication request successful when GSS_S_CONTINUE_NEEDED (multiple-exchange-request) is encountered.
  The existing patch for Apache2.4 compatibility has been re-aligned with the introduction of new patches.</changelog>
  <changelog author="kstreitova@suse.com" date="1432641600">- add new licenses:
  * MIT - for mit-internals.h file
  * ASL 2.0 - for 0101-mod_auth_kerb-5.4-s4u2proxy.patch</changelog>
  <changelog author="hguo@suse.com" date="1433332800">- Clean up of spec file:
  * Fix unrecognised license name (Apache 2.0).
  * Remove build dependencies and macros for building on unsupported SUSE distros.
  * Remove expired macro "debug_package".
  * Fix URL link of the package.
  * Remove unnecessary "INSTALL" document file from file list.</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1443009600">- test module with %apache_test_module_load</changelog>
  <changelog author="pgajdos@suse.com" date="1443787200">- fix build for 11sp3 (add BuildRoot:)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- add mod_auth_kerb-5.4-auth_segfault.patch to fix a segmentation
  fault in function authenticate_user_krb5pwd() when credentials
  are supplied using basic authentication [bsc#1142545]</changelog>
</package>
<package pkgid="e89f5a82e17d9966ed7694b5a3ddbe09e9d638bea4d5f23318fbfa32c23b2b18" name="apache2-mod_auth_openidc" arch="src">
  <version epoch="0" ver="2.3.8" rel="lp151.2.3.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
</package>
<package pkgid="8a9a7aecde084a3e16abd4273494912b89f27463dd4bc38f550929ebf2345f29" name="apache2-mod_auth_openidc" arch="x86_64">
  <version epoch="0" ver="2.3.8" rel="lp151.2.3.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
</package>
<package pkgid="b5d72c86fe96f5dc0903aebbd8bd1760dc72d833641249e494c7fdee8eaa5a2b" name="apache2-mod_auth_openidc" arch="src">
  <version epoch="0" ver="2.3.8" rel="lp151.2.6.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1583323200">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix
  open redirect issue that exists in URLs with a slash and
  backslash at the beginning [bsc#1164459], [CVE-2019-20479]</changelog>
</package>
<package pkgid="7cb9b4766e156728daf78ffc17720a3007ce98f508c7ec625807f7f2437adb4c" name="apache2-mod_auth_openidc" arch="x86_64">
  <version epoch="0" ver="2.3.8" rel="lp151.2.6.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1583323200">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix
  open redirect issue that exists in URLs with a slash and
  backslash at the beginning [bsc#1164459], [CVE-2019-20479]</changelog>
</package>
<package pkgid="de4697a3607987416af137ae4a435d236e78dd8e2cc1461e8ea13b1f05a59016" name="apache2-mod_jk" arch="src">
  <version epoch="0" ver="1.2.43" rel="lp151.4.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="dimstar@opensuse.org" date="1359374400">- Update to version 1.2.37:
  + Fix compatibility with apache 2.4
- Introduce apxs variable, based on apache_branch. With apache 2.4,
  apxs2 moved from %{_sbindir} to %{_bindir}.</changelog>
  <changelog author="tchvatal@suse.com" date="1401710400">- Version bump to 1.2.40 fixes bnc#880798:
  * Fix forwarding of chunked requests, which is broken in version 1.2.39. (rjung)
  * 56352: Fix regression in memory release. (mturk)
  * Fix status worker display of worker IP address after name or port was changed. (rjung)
  * 56297: Improve key hash function. Copied from APR. (rjung)
  * 55683: Remove quotes from quoted session cookies. (rjung)
  * 53542: ISAPI: Fix grammar in 503 error page. (rjung)
  * 55696: Crash on Mac OS X 10.9 during config parsing. (rjung)
  * Deprecate nt_service from Tomcat Connectors. (mturk)
  * 56133: Fix possible crash when a request fails during request body transfer to the back end and reply_timeout was set. Patch contributed by Hiroto Shimizu. (rjung)
  * Fix status worker not updating parameters for all members. (mturk)
  * 55853: HTTPD: Use the correct API for setting Content-Length. Patch contributed by areese yahoo-inc.com. (rjung)
  * Add IPV6 support for connection to webserver. New directive prefer_ipv6 has been added to control the hostname resolution and preserve backward compatibility. (mturk)
  * Add --disable-sock-cloexec to configure to disable use of SOCK_CLOEXEC (using FD_CLOEXEC + fnctl instead) so built modules will work with Linux kernels prior to 2.6.27. (timw)
  * Clean up config file parsing. Worker names are now restricted to 60 bytes. (rjung)
  * Allow to set a stickyness cookie in case a web framework breaks Tomcat's adding of the routing ID to the end of the JSESSIONID cookie. (rjung)
  * Use max_packet_size also for request body forwarding. (rjung)
  * Apache 2.4: By default forward logical client address as provided by mod_remoteip. When setting JkOptions ForwardPhysicalAddress mod_jk will instead forward the physical peer address. (rjung)
  * Minor documentation improvements. (rjung)</changelog>
  <changelog author="tchvatal@suse.com" date="1401710401">- Cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1415016000">- use apache rpm macros</changelog>
  <changelog author="pgajdos@suse.com" date="1416830400">- fix tomcat paths in jk.conf [bnc#742618]</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add asc signature file.
- Fix URL for homepage</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Drop the asc again to make dimstar happy</changelog>
  <changelog author="pgajdos@suse.com" date="1433419200">- access configuration conditional in jk.conf example</changelog>
  <changelog author="tchvatal@suse.com" date="1433419201">- Apply patch to fix bnc#927845 CVE-2014-8111 VUL-1: apache2-mod_jk: Tomcat
  mod_jk information leak due to incorrect JkMount/JkUnmount directives
  processing:
  * apache2-mod_jk-CVE-2014-8111.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1441800000">- test package with %apache_test_module_load</changelog>
  <changelog author="tchvatal@suse.com" date="1453291200">- Version update to 1.2.41:
  * remove merged patch apache2-mod_jk-CVE-2014-8111.patch
  * many small bugfixes all around:
    + http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Just depend on java-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1517486400">- Version update to 1.2.42:
  * Many small fixes
  * Optimalization for new gccs
  * Minor code cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1518523200">- Disable tests for now as the default profile is not working
  properly to load up and upstream should update the sample</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521115200">- Update to version 1.2.43 [bsc#1085220, CVE-2018-1323]
  * LB: Propagate load factor changes applied by the status worker
    to a load balancer sub worker correctly to all processes.
  * ISAPI: Align the make files for 32-bit and 64-bit builds.
  * Update config.guess and config.sub
  * Update PCRE bundled with the ISAPI redirector to 8.41.
  * Update the ISAPI redirector installation documentation to
    reflect the currently supported versions of Windows.
  * Align the normalization performed by the ISAPI redirector with
    that implemented by Tomcat.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1542283200">- Security fix: [bsc#1114612, CVE-2018-11759]
  * connector path traversal due to mishandled HTTP requests in httpd
  * Added patches:
  - apache2-mod_jk-1.2.43-lb_retries.patch (to introduce lb_retries)
  - apache2-mod_jk-1.2.43-CVE-2018-11759.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589198400">- Fix Aliases to be compatible with the tomcat example URLs [bsc#1167896]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589803200">- Update jk.conf: [bsc#1167896]
  * Specify the location of JkShmFile.
  * Update tomcat-webapps paths.</changelog>
</package>
<package pkgid="381d3a55398cbd515cd45046be5014f52f5a8ee6135a91ca21d4f06c8dd33e10" name="apache2-mod_jk" arch="x86_64">
  <version epoch="0" ver="1.2.43" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- use apache rpm macros</changelog>
  <changelog author="pgajdos@suse.com" date="1416830400">- fix tomcat paths in jk.conf [bnc#742618]</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add asc signature file.
- Fix URL for homepage</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Drop the asc again to make dimstar happy</changelog>
  <changelog author="pgajdos@suse.com" date="1433419200">- access configuration conditional in jk.conf example</changelog>
  <changelog author="tchvatal@suse.com" date="1433419201">- Apply patch to fix bnc#927845 CVE-2014-8111 VUL-1: apache2-mod_jk: Tomcat
  mod_jk information leak due to incorrect JkMount/JkUnmount directives
  processing:
  * apache2-mod_jk-CVE-2014-8111.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1441800000">- test package with %apache_test_module_load</changelog>
  <changelog author="tchvatal@suse.com" date="1453291200">- Version update to 1.2.41:
  * remove merged patch apache2-mod_jk-CVE-2014-8111.patch
  * many small bugfixes all around:
    + http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Just depend on java-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1517486400">- Version update to 1.2.42:
  * Many small fixes
  * Optimalization for new gccs
  * Minor code cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1518523200">- Disable tests for now as the default profile is not working
  properly to load up and upstream should update the sample</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521115200">- Update to version 1.2.43 [bsc#1085220, CVE-2018-1323]
  * LB: Propagate load factor changes applied by the status worker
    to a load balancer sub worker correctly to all processes.
  * ISAPI: Align the make files for 32-bit and 64-bit builds.
  * Update config.guess and config.sub
  * Update PCRE bundled with the ISAPI redirector to 8.41.
  * Update the ISAPI redirector installation documentation to
    reflect the currently supported versions of Windows.
  * Align the normalization performed by the ISAPI redirector with
    that implemented by Tomcat.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1542283200">- Security fix: [bsc#1114612, CVE-2018-11759]
  * connector path traversal due to mishandled HTTP requests in httpd
  * Added patches:
  - apache2-mod_jk-1.2.43-lb_retries.patch (to introduce lb_retries)
  - apache2-mod_jk-1.2.43-CVE-2018-11759.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589198400">- Fix Aliases to be compatible with the tomcat example URLs [bsc#1167896]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589803200">- Update jk.conf: [bsc#1167896]
  * Specify the location of JkShmFile.
  * Update tomcat-webapps paths.</changelog>
</package>
<package pkgid="9fedc7286cbf73b5040f51a50d0414f2d91d37e04c055cf5cee465189c1ae4cd" name="apache2-mod_nss" arch="src">
  <version epoch="0" ver="1.0.17" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1444824000">- mod_nss-httpd24.patch applied depending on %{apache_branch}
  instead of %{suse_version}, fixes build for sle11 with new apache</changelog>
  <changelog author="pgajdos@suse.com" date="1449835200">- %{apache_branch} converted to number</changelog>
  <changelog author="pgajdos@suse.com" date="1452600000">- %check: access syntax depends on %{apache_branch}</changelog>
  <changelog author="vcizek@suse.com" date="1457956800">- update to 1.0.13
  Update default ciphers to something more modern and secure
  Check for host and netstat commands in gencert before trying to use them
  Add server support for DHE ciphers
  Extract SAN from server/client certificates into env
  Fix memory leaks and other coding issues caught by clang analyzer
  Add support for Server Name Indication (SNI) (#1010751)
  Add support for SNI for reverse proxy connections
  Add RenegBufferSize? option
  Add support for TLS Session Tickets (RFC 5077)
  Fix logical AND support in OpenSSL cipher compatibility
  Correctly handle disabled ciphers (CVE-2015-5244)
  Implement a slew more OpenSSL cipher macros
  Fix a number of illegal memory accesses and memory leaks
  Support for SHA384 ciphers if they are available in NSS
  Add compatibility for mod_ssl-style cipher definitions (#862938)
  Add TLSv1.2-specific ciphers
  Completely remove support for SSLv2
  Add support for sqlite NSS databases (#1057650)
  Compare subject CN and VS hostname during server start up
  Add support for enabling TLS v1.2
  Don't enable SSL 3 by default (CVE-2014-3566)
  Fix CVE-2013-4566
  Move nss_pcache to /usr/libexec
  Support httpd 2.4+
- drop almost all our patches (upstream)
  * 0001-SNI-check-with-NameVirtualHosts.patch
  * mod_nss-CVE-2013-4566-NSSVerifyClient.diff
  * mod_nss-PK11_ListCerts_2.patch
  * mod_nss-add_support_for_enabling_TLS_v1.2.patch
  * mod_nss-array_overrun.patch
  * mod_nss-cipherlist_update_for_tls12-doc.diff
  * mod_nss-cipherlist_update_for_tls12.diff
  * mod_nss-clientauth.patch
  * mod_nss-compare_subject_CN_and_VS_hostname.patch
  * mod_nss-gencert.patch
  * mod_nss-httpd24.patch
  * mod_nss-lockpcache.patch
  * mod_nss-negotiate.patch
  * mod_nss-no_shutdown_if_not_init_2.patch
  * mod_nss-overlapping_memcpy.patch
  * mod_nss-pcachesignal.h
  * mod_nss-proxyvariables.patch
  * mod_nss-reseterror.patch
  * mod_nss-reverse_proxy_send_SNI.patch
  * mod_nss-reverseproxy.patch
  * mod_nss-sslmultiproxy.patch
  * mod_nss-tlsv1_1.patch
  * mod_nss-wouldblock.patch
  * update-ciphers.patch
- add automake and libtool to BuildRequires
- temporarily comment out %check</changelog>
  <changelog author="pgajdos@suse.com" date="1458129600">- fix test: add NSSPassPhraseDialog, point it to plain file</changelog>
  <changelog author="vcizek@suse.com" date="1458216000">- use a whitelist approach for keeping directives in the migration
  script (bsc#961907)
  * modify mod_nss_migrate.pl</changelog>
  <changelog author="vcizek@suse.com" date="1460808000">- update to 1.0.14 (fixes boo#973996)
  * OpenSSL ciphers stopped parsing at +, CVE-2016-3099
  * Created valgrind suppression files to ease debugging
  * Implement SSL_PPTYPE_FILTER to call executables to get
    the key password pins. Can be used to prompt with systemd.
  * Improvements to migrate.pl
- drop mod_nss_migrate.pl and use upstream migrate script instead
  * add mod_nss-migrate.patch</changelog>
  <changelog author="vcizek@suse.com" date="1469793600">- use systemd-ask-password to prompt for a certificate passphrase
  (bsc#972968)
  * drop obsolete mod_nss-bnc863518-reopen_dev_tty.diff</changelog>
  <changelog author="vcizek@suse.com" date="1473940800">- don't disable SSLV2, because it doesn't work with NSS 3.24
  (boo#993642)
  * add mod_nss-dont_disable_SSLV2.patch
- remove deprecated NSSSessionCacheTimeout option from mod_nss.conf.in
  (bsc#998176)
- change ownership of the gencert generated NSS database so apache
  can read it (bsc#998180)
  * add mod_nss-gencert-correct-ownership.patch
- use correct configuration path in mod_nss.conf.in (bsc#996282)
- remove %post migration code from the old alias directory
- generate dummy certificates if there aren't any in mod_nss.d
  (bsc#998183)</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Avoid changing permissions through symlinks</changelog>
  <changelog author="vcizek@suse.com" date="1508760000">- Use ss instead of the deprecated netstat in gencert (bsc#1064415)
  * add mod_nss-gencert_use_ss_instead_of_netstat.patch
- spec: cleanup and fix URLs</changelog>
  <changelog author="vcizek@suse.com" date="1512648000">- drop obsolete mod_nss-dont_disable_SSLV2.patch
  * bump up minimal NSS version to 3.25, which we now have everywhere
- Require iproute2 for ss, which is used by gencert to gather noise</changelog>
  <changelog author="vcizek@suse.com" date="1512993600">- Fix NSS database startup permission check (bsc#1057776)
  * add 0001-Handle-group-membership-when-testing-for-file-permis.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- buildrequire apr-devel instead of libapr1-devel
- buildrequire apr-util-devel instead of libapr-util1-devel</changelog>
  <changelog author="vcizek@suse.com" date="1520424000">- Update to 1.0.15
  * Try to auto-detect the NSS database format if not specified
  * Update nss_pcache.8 man page to drop directory and prefix
  * When a token is configured in password file only authenticate once
  * Return an error when NSSPassPhraseDialog is invalid
  * Move 3DES ciphers down from HIGH to MEDIUM to match OpenSSL 1.0.2k+
  * Add -Werror=implicit-function-declaration to CFLAGS
  * Handle group membership when testing for file permissions
  * NSS system-wide policy now disables SSLv3, don't use it in tests
  * Add missing error messages for libssl errors
  * Fix doc typo in SSL_[SERVER|CLIENT]_SAN_IPaddr env variable name
  * When including additional test config use specific extension
  * Fix the TLS Session ID cache
  * Make an invalid protocol setting fatal
  * Don't use same NSS db in nss_pcache as mod_nss, use NSS_NoDB_Init()
  * Add info log message when FIPS is enabled
  * Add AES-256 and drop DES, CAST128, SKIPJACK as wrapping key types
  * Fix removal of CR from PEM certificates
  * Add OCSP caching and timeout tuning knobs
  * Check the NSS database directory permissions as well as the files
    inside it for read access on startup.
  * Add in simple aliases for ciphers to fix those that
    don't follow the pattern (dhe_rsa_aes_128_sha256,
    dhe_rsa_aes_256_sha256) and those with typos
    (camelia_128_sha, camelia_256_sha)
  * Fix semaphore leak
  * Don't set remote user in fixup hook
  * Drop SSLv2 tests because it is completely disabled now
- drop 0001-Handle-group-membership-when-testing-for-file-permis.patch
  (upstream)
- add 0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch</changelog>
  <changelog author="vcizek@suse.com" date="1520510400">- Since the update to NSS 3.35, the default NSS certificate
  database format changed from Berkley DB to SQLite
- use %license tag</changelog>
  <changelog author="vcizek@suse.com" date="1521460800">- Update to 1.0.16
  * Fix up some broken cipher strings from a bad merge
- adjust distro detection, Tumbleweed has NSS 3.35, Leap 15 has 3.34
- drop 0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch
  (upstream)</changelog>
  <changelog author="vcizek@suse.com" date="1521460801">- Use fixed upstream 1.0.16 tarball
  * https://pagure.io/mod_nss/issue/44</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.0.17
  * Add TLSv1.3 support
  * Update documentation for TLS 1.3
  * Add TLS 1.3 support to the cipher tests
  * PEP-8 fixups
  * Change the default certificate database format to SQLite.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568116800">- Use a stronger password in gencert to pass the stricter tests in
  FIPS mode (bsc#1150133)
  * mod_nss-gencert_stronger_password.patch</changelog>
</package>
<package pkgid="016ede76548fb9be993f026e39d6fb8bd3dcbb135531ffc4e03da799245b1eec" name="apache2-mod_nss" arch="x86_64">
  <version epoch="0" ver="1.0.17" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1444824000">- mod_nss-httpd24.patch applied depending on %{apache_branch}
  instead of %{suse_version}, fixes build for sle11 with new apache</changelog>
  <changelog author="pgajdos@suse.com" date="1449835200">- %{apache_branch} converted to number</changelog>
  <changelog author="pgajdos@suse.com" date="1452600000">- %check: access syntax depends on %{apache_branch}</changelog>
  <changelog author="vcizek@suse.com" date="1457956800">- update to 1.0.13
  Update default ciphers to something more modern and secure
  Check for host and netstat commands in gencert before trying to use them
  Add server support for DHE ciphers
  Extract SAN from server/client certificates into env
  Fix memory leaks and other coding issues caught by clang analyzer
  Add support for Server Name Indication (SNI) (#1010751)
  Add support for SNI for reverse proxy connections
  Add RenegBufferSize? option
  Add support for TLS Session Tickets (RFC 5077)
  Fix logical AND support in OpenSSL cipher compatibility
  Correctly handle disabled ciphers (CVE-2015-5244)
  Implement a slew more OpenSSL cipher macros
  Fix a number of illegal memory accesses and memory leaks
  Support for SHA384 ciphers if they are available in NSS
  Add compatibility for mod_ssl-style cipher definitions (#862938)
  Add TLSv1.2-specific ciphers
  Completely remove support for SSLv2
  Add support for sqlite NSS databases (#1057650)
  Compare subject CN and VS hostname during server start up
  Add support for enabling TLS v1.2
  Don't enable SSL 3 by default (CVE-2014-3566)
  Fix CVE-2013-4566
  Move nss_pcache to /usr/libexec
  Support httpd 2.4+
- drop almost all our patches (upstream)
  * 0001-SNI-check-with-NameVirtualHosts.patch
  * mod_nss-CVE-2013-4566-NSSVerifyClient.diff
  * mod_nss-PK11_ListCerts_2.patch
  * mod_nss-add_support_for_enabling_TLS_v1.2.patch
  * mod_nss-array_overrun.patch
  * mod_nss-cipherlist_update_for_tls12-doc.diff
  * mod_nss-cipherlist_update_for_tls12.diff
  * mod_nss-clientauth.patch
  * mod_nss-compare_subject_CN_and_VS_hostname.patch
  * mod_nss-gencert.patch
  * mod_nss-httpd24.patch
  * mod_nss-lockpcache.patch
  * mod_nss-negotiate.patch
  * mod_nss-no_shutdown_if_not_init_2.patch
  * mod_nss-overlapping_memcpy.patch
  * mod_nss-pcachesignal.h
  * mod_nss-proxyvariables.patch
  * mod_nss-reseterror.patch
  * mod_nss-reverse_proxy_send_SNI.patch
  * mod_nss-reverseproxy.patch
  * mod_nss-sslmultiproxy.patch
  * mod_nss-tlsv1_1.patch
  * mod_nss-wouldblock.patch
  * update-ciphers.patch
- add automake and libtool to BuildRequires
- temporarily comment out %check</changelog>
  <changelog author="pgajdos@suse.com" date="1458129600">- fix test: add NSSPassPhraseDialog, point it to plain file</changelog>
  <changelog author="vcizek@suse.com" date="1458216000">- use a whitelist approach for keeping directives in the migration
  script (bsc#961907)
  * modify mod_nss_migrate.pl</changelog>
  <changelog author="vcizek@suse.com" date="1460808000">- update to 1.0.14 (fixes boo#973996)
  * OpenSSL ciphers stopped parsing at +, CVE-2016-3099
  * Created valgrind suppression files to ease debugging
  * Implement SSL_PPTYPE_FILTER to call executables to get
    the key password pins. Can be used to prompt with systemd.
  * Improvements to migrate.pl
- drop mod_nss_migrate.pl and use upstream migrate script instead
  * add mod_nss-migrate.patch</changelog>
  <changelog author="vcizek@suse.com" date="1469793600">- use systemd-ask-password to prompt for a certificate passphrase
  (bsc#972968)
  * drop obsolete mod_nss-bnc863518-reopen_dev_tty.diff</changelog>
  <changelog author="vcizek@suse.com" date="1473940800">- don't disable SSLV2, because it doesn't work with NSS 3.24
  (boo#993642)
  * add mod_nss-dont_disable_SSLV2.patch
- remove deprecated NSSSessionCacheTimeout option from mod_nss.conf.in
  (bsc#998176)
- change ownership of the gencert generated NSS database so apache
  can read it (bsc#998180)
  * add mod_nss-gencert-correct-ownership.patch
- use correct configuration path in mod_nss.conf.in (bsc#996282)
- remove %post migration code from the old alias directory
- generate dummy certificates if there aren't any in mod_nss.d
  (bsc#998183)</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Avoid changing permissions through symlinks</changelog>
  <changelog author="vcizek@suse.com" date="1508760000">- Use ss instead of the deprecated netstat in gencert (bsc#1064415)
  * add mod_nss-gencert_use_ss_instead_of_netstat.patch
- spec: cleanup and fix URLs</changelog>
  <changelog author="vcizek@suse.com" date="1512648000">- drop obsolete mod_nss-dont_disable_SSLV2.patch
  * bump up minimal NSS version to 3.25, which we now have everywhere
- Require iproute2 for ss, which is used by gencert to gather noise</changelog>
  <changelog author="vcizek@suse.com" date="1512993600">- Fix NSS database startup permission check (bsc#1057776)
  * add 0001-Handle-group-membership-when-testing-for-file-permis.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- buildrequire apr-devel instead of libapr1-devel
- buildrequire apr-util-devel instead of libapr-util1-devel</changelog>
  <changelog author="vcizek@suse.com" date="1520424000">- Update to 1.0.15
  * Try to auto-detect the NSS database format if not specified
  * Update nss_pcache.8 man page to drop directory and prefix
  * When a token is configured in password file only authenticate once
  * Return an error when NSSPassPhraseDialog is invalid
  * Move 3DES ciphers down from HIGH to MEDIUM to match OpenSSL 1.0.2k+
  * Add -Werror=implicit-function-declaration to CFLAGS
  * Handle group membership when testing for file permissions
  * NSS system-wide policy now disables SSLv3, don't use it in tests
  * Add missing error messages for libssl errors
  * Fix doc typo in SSL_[SERVER|CLIENT]_SAN_IPaddr env variable name
  * When including additional test config use specific extension
  * Fix the TLS Session ID cache
  * Make an invalid protocol setting fatal
  * Don't use same NSS db in nss_pcache as mod_nss, use NSS_NoDB_Init()
  * Add info log message when FIPS is enabled
  * Add AES-256 and drop DES, CAST128, SKIPJACK as wrapping key types
  * Fix removal of CR from PEM certificates
  * Add OCSP caching and timeout tuning knobs
  * Check the NSS database directory permissions as well as the files
    inside it for read access on startup.
  * Add in simple aliases for ciphers to fix those that
    don't follow the pattern (dhe_rsa_aes_128_sha256,
    dhe_rsa_aes_256_sha256) and those with typos
    (camelia_128_sha, camelia_256_sha)
  * Fix semaphore leak
  * Don't set remote user in fixup hook
  * Drop SSLv2 tests because it is completely disabled now
- drop 0001-Handle-group-membership-when-testing-for-file-permis.patch
  (upstream)
- add 0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch</changelog>
  <changelog author="vcizek@suse.com" date="1520510400">- Since the update to NSS 3.35, the default NSS certificate
  database format changed from Berkley DB to SQLite
- use %license tag</changelog>
  <changelog author="vcizek@suse.com" date="1521460800">- Update to 1.0.16
  * Fix up some broken cipher strings from a bad merge
- adjust distro detection, Tumbleweed has NSS 3.35, Leap 15 has 3.34
- drop 0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch
  (upstream)</changelog>
  <changelog author="vcizek@suse.com" date="1521460801">- Use fixed upstream 1.0.16 tarball
  * https://pagure.io/mod_nss/issue/44</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.0.17
  * Add TLSv1.3 support
  * Update documentation for TLS 1.3
  * Add TLS 1.3 support to the cipher tests
  * PEP-8 fixups
  * Change the default certificate database format to SQLite.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568116800">- Use a stronger password in gencert to pass the stricter tests in
  FIPS mode (bsc#1150133)
  * mod_nss-gencert_stronger_password.patch</changelog>
</package>
<package pkgid="ebe4da32929acf079dbdcb530467847a60f5332c6ab2485cf09d939bee8431ac" name="apache2-mod_perl" arch="src">
  <version epoch="0" ver="2.0.11" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1338465600">- update to 2.0.6
  +Set the -apxs argument correctly when building from mod_perl.
  [Steve Hay]
  +Doc spelling fix
  [Nicholas Bamber]
  +Add Apache-Test 1.34 dependency.
  [Phred]</changelog>
  <changelog author="coolo@suse.com" date="1349956800">- buildrequire netcfg explicitly</changelog>
  <changelog author="dimstar@opensuse.org" date="1365249600">- Update to version 2.0.7+svn1448242 (http24 branch):
  + Fix build with Apache 2.4.
- Update to version 2.0.7:
  + Fix breakage caused by removal of PL_uid et al from perl 5.16.0.
- Drop patch-PL_uid.diff: fixed upstream.
- Adjust extra.conf setup for the test suite: include the
  nescessary modules needed to have a valid configuration for the
  test server: access_compat_module, authn_core_module,
  authz_core_module and unixd_module.</changelog>
  <changelog author="coolo@suse.com" date="1372161600">- update to version 2.0.8 (http24 branch as used by debian):
  Perl 5.16.3's fix for a rehash-based DoS makes it more difficult to invoke
  the workaround for the old hash collision attack, which breaks mod_perl's
  t/perl/hash_attack.t. Patch from rt.cpan.org #83916 improves the fix
  previously applied as revision 1455340. [Zefram]
  On Perl 5.17.6 and above, hash seeding has changed, and HvREHASH has
  disappeared. Patch to update mod_perl accordingly from rt.cpan.org #83921.
  [Zefram]
  Restore build with Perl 5.8.1, 5.8.2 etc: take care to use
  $Config{useithreads} rather than $Config{usethreads}, and supply definitions
  of Newx and Newxz as necessary. [Steve Hay]
  On Perl 5.17.9, t/apache/read2.t fails because an "uninitialized value"
  warning is generated for the buffer being autovivified. This is because
  the sv_setpvn() that's meant to vivify the buffer doesn't perform set
  magic; the warning is generated by the immediately following SvPV_force().
  Patch to fix this from rt.cpan.org #83922. [Zefram]
  Fix t/perl/hash_attack.t to work with Perl 5.14.4, 5.16.3 etc, which
  contain a fix for CVE-2013-1667 (memory exhaustion with arbitrary hash
  keys). This resolves rt.perl.org #116863, from where the patch was taken.
  [Hugo van der Sanden]
  use APR::Finfo instead of Perl's stat() in ModPerl::RegistryCooker to
  generate HTTP code 404 even if the requested filename contains newlines
  [Torsten]
- disable patch lfs-perl-5.14.patch as it no longer applies, but
  I can't find out if it's still need for ppc64 or if upstream's
  changes are good enough</changelog>
  <changelog author="ro@suse.de" date="1373976000">- change testsuite setup to fix build on factory:
  - do not load access_compat_module as it is builtin
  - do not load unixd_module as it is builtin</changelog>
  <changelog author="coolo@suse.com" date="1375704000">- add avoid-broken-provides.diff to avoid package providing
  HTTP::Request::Common, which it does not (only for testing)</changelog>
  <changelog author="vcizek@suse.com" date="1405944000">- Linux::Pid is required by Apache2-SizeLimit (bnc#888117)</changelog>
  <changelog author="vcizek@suse.com" date="1410264000">- adapt test configuration for apache24 to fix build
  * use the new access control mechanisms from apache24
  * added apache24-mod_authz_host.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1410955200">- Changed access control statements in config file to use
  mod_authz_host (bnc#897005)</changelog>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="tjcw@physics.org" date="1435320000">- turn off inlining for functions which need to be real symbols because they
  are called in a DSO
  * added inline.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1438084800">- updated to 2.0.9: see Changes for details
  * dropped patches:
  - lfs-perl-5.14.patch
  - apache2-mod_perl-2.0.4-tests.diff
  - apache24-mod_authz_host.patch</changelog>
  <changelog author="schwab@suse.de" date="1438689600">- Force gnu89 inline semantics
- Disable tests only in QEMU user-space builds
- inline.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1439467200">- Remove apache2 packaging bug workaround</changelog>
  <changelog author="vcizek@suse.com" date="1450267200">- fix mod_perl with perl 5.22 (boo#945195)
  * add mod_perl-add_support_for_perl_5.22.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1475496000">- Remove unused icon and shorten the description a bit 1-2 migration
  is quite irelevant in these days
- Move tests to %check  phase
- Use proper group for devel subpackage</changelog>
  <changelog author="astieger@suse.com" date="1483099200">- update to 2.0.10:
  * Automatically select the appropriate c89 option when modperl is
    being built with either gcc 5 or clang
  * Fix non-threaded Perl 5.22.x build and tests
  * Add support for Perl 5.22.x
    drop upstreamed mod_perl-add_support_for_perl_5.22.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531828800">- restore process name after sv_setpv_mg() call [bsc#1091625]
  + apache2-mod_perl-prctl-short-name.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573905600">- Apache mod_perl 2.0.11:
  * CVE-2011-2767: Arbitrary Perl code execution in the context of
    the user account via a user-owned .htaccess (boo#1156944)</changelog>
</package>
<package pkgid="3cc63696efbadad87af387a6704869627fccdfb516eb2969bc933b95ba990ef5" name="apache2-mod_perl" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="tjcw@physics.org" date="1435320000">- turn off inlining for functions which need to be real symbols because they
  are called in a DSO
  * added inline.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1438084800">- updated to 2.0.9: see Changes for details
  * dropped patches:
  - lfs-perl-5.14.patch
  - apache2-mod_perl-2.0.4-tests.diff
  - apache24-mod_authz_host.patch</changelog>
  <changelog author="schwab@suse.de" date="1438689600">- Force gnu89 inline semantics
- Disable tests only in QEMU user-space builds
- inline.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1439467200">- Remove apache2 packaging bug workaround</changelog>
  <changelog author="vcizek@suse.com" date="1450267200">- fix mod_perl with perl 5.22 (boo#945195)
  * add mod_perl-add_support_for_perl_5.22.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1475496000">- Remove unused icon and shorten the description a bit 1-2 migration
  is quite irelevant in these days
- Move tests to %check  phase
- Use proper group for devel subpackage</changelog>
  <changelog author="astieger@suse.com" date="1483099200">- update to 2.0.10:
  * Automatically select the appropriate c89 option when modperl is
    being built with either gcc 5 or clang
  * Fix non-threaded Perl 5.22.x build and tests
  * Add support for Perl 5.22.x
    drop upstreamed mod_perl-add_support_for_perl_5.22.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531828800">- restore process name after sv_setpv_mg() call [bsc#1091625]
  + apache2-mod_perl-prctl-short-name.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573905600">- Apache mod_perl 2.0.11:
  * CVE-2011-2767: Arbitrary Perl code execution in the context of
    the user account via a user-owned .htaccess (boo#1156944)</changelog>
</package>
<package pkgid="d4a4fa09ae0da638c91b873cca6172d19dfbb57ca7a22d56044d9d4dcbb84a0d" name="apache2-mod_perl-devel" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="tjcw@physics.org" date="1435320000">- turn off inlining for functions which need to be real symbols because they
  are called in a DSO
  * added inline.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1438084800">- updated to 2.0.9: see Changes for details
  * dropped patches:
  - lfs-perl-5.14.patch
  - apache2-mod_perl-2.0.4-tests.diff
  - apache24-mod_authz_host.patch</changelog>
  <changelog author="schwab@suse.de" date="1438689600">- Force gnu89 inline semantics
- Disable tests only in QEMU user-space builds
- inline.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1439467200">- Remove apache2 packaging bug workaround</changelog>
  <changelog author="vcizek@suse.com" date="1450267200">- fix mod_perl with perl 5.22 (boo#945195)
  * add mod_perl-add_support_for_perl_5.22.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1475496000">- Remove unused icon and shorten the description a bit 1-2 migration
  is quite irelevant in these days
- Move tests to %check  phase
- Use proper group for devel subpackage</changelog>
  <changelog author="astieger@suse.com" date="1483099200">- update to 2.0.10:
  * Automatically select the appropriate c89 option when modperl is
    being built with either gcc 5 or clang
  * Fix non-threaded Perl 5.22.x build and tests
  * Add support for Perl 5.22.x
    drop upstreamed mod_perl-add_support_for_perl_5.22.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531828800">- restore process name after sv_setpv_mg() call [bsc#1091625]
  + apache2-mod_perl-prctl-short-name.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573905600">- Apache mod_perl 2.0.11:
  * CVE-2011-2767: Arbitrary Perl code execution in the context of
    the user account via a user-owned .htaccess (boo#1156944)</changelog>
</package>
<package pkgid="c3948322f82f7ff7f8cb7d2daa1282512ee3bb1367f122fe7da32b5f9fe9cfbf" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.12.1"/>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
</package>
<package pkgid="e1316e63e39e375927951c1a8a385fa400c91863d17927b6c933456987288a4f" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.12.1"/>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
</package>
<package pkgid="463ae32608f5ae6ba7138b09daa552596170383d8ac2ffa206a1c97d08b8d8fc" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.13.1"/>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
</package>
<package pkgid="437cbd3de2e52686e3ba8105e7710bdecf7ef7ab18927c13cdb34a4076c5068e" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.13.1"/>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
</package>
<package pkgid="923d9853b21013acabda01bdc244a4936e00f6b24c6f6d319d256f6ba78d2fbe" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.19.2"/>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1577966400">- security update
- added patches
  CVE-2019-11045 [bsc#1159923]
  + php7-CVE-2019-11045.patch
  CVE-2019-11046 [bsc#1159924]
  + php7-CVE-2019-11046.patch
  CVE-2019-11047 [bsc#1159922]
  + php7-CVE-2019-11047.patch
  CVE-2019-11050 [bsc#1159927]
  + php7-CVE-2019-11050.patch</changelog>
</package>
<package pkgid="05098cf7bfa87ebca7ee4cf0a47490fec864af23331586e0659c329faef58324" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.19.2"/>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1577966400">- security update
- added patches
  CVE-2019-11045 [bsc#1159923]
  + php7-CVE-2019-11045.patch
  CVE-2019-11046 [bsc#1159924]
  + php7-CVE-2019-11046.patch
  CVE-2019-11047 [bsc#1159922]
  + php7-CVE-2019-11047.patch
  CVE-2019-11050 [bsc#1159927]
  + php7-CVE-2019-11050.patch</changelog>
</package>
<package pkgid="452ff52447c78610b58f2ab040a704e863e9d634dca3ba6d8ddc74afe861d230" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.22.1"/>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1577966400">- security update
- added patches
  CVE-2019-11045 [bsc#1159923]
  + php7-CVE-2019-11045.patch
  CVE-2019-11046 [bsc#1159924]
  + php7-CVE-2019-11046.patch
  CVE-2019-11047 [bsc#1159922]
  + php7-CVE-2019-11047.patch
  CVE-2019-11050 [bsc#1159927]
  + php7-CVE-2019-11050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
</package>
<package pkgid="0b54e1d4c2c72a156cad8cd368f98416b0efb2620bf9e23b39ac5f3fdc98404d" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.22.1"/>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1577966400">- security update
- added patches
  CVE-2019-11045 [bsc#1159923]
  + php7-CVE-2019-11045.patch
  CVE-2019-11046 [bsc#1159924]
  + php7-CVE-2019-11046.patch
  CVE-2019-11047 [bsc#1159922]
  + php7-CVE-2019-11047.patch
  CVE-2019-11050 [bsc#1159927]
  + php7-CVE-2019-11050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
</package>
<package pkgid="b683e77f6517f39b14412596931e7c33d5b8ed8f8c8237e856d50be867deca45" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.25.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1577966400">- security update
- added patches
  CVE-2019-11045 [bsc#1159923]
  + php7-CVE-2019-11045.patch
  CVE-2019-11046 [bsc#1159924]
  + php7-CVE-2019-11046.patch
  CVE-2019-11047 [bsc#1159922]
  + php7-CVE-2019-11047.patch
  CVE-2019-11050 [bsc#1159927]
  + php7-CVE-2019-11050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
</package>
<package pkgid="7bc9e26818287c2a8636b47fe7f3f4e469e94540e089dc60a8d9557e3bc5590a" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.25.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1577966400">- security update
- added patches
  CVE-2019-11045 [bsc#1159923]
  + php7-CVE-2019-11045.patch
  CVE-2019-11046 [bsc#1159924]
  + php7-CVE-2019-11046.patch
  CVE-2019-11047 [bsc#1159922]
  + php7-CVE-2019-11047.patch
  CVE-2019-11050 [bsc#1159927]
  + php7-CVE-2019-11050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
</package>
<package pkgid="1b11635b2a8cb6071161087c37ba487085cac3064c8f0f08cf5183cffebdcdbb" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.28.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1577966400">- security update
- added patches
  CVE-2019-11045 [bsc#1159923]
  + php7-CVE-2019-11045.patch
  CVE-2019-11046 [bsc#1159924]
  + php7-CVE-2019-11046.patch
  CVE-2019-11047 [bsc#1159922]
  + php7-CVE-2019-11047.patch
  CVE-2019-11050 [bsc#1159927]
  + php7-CVE-2019-11050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
</package>
<package pkgid="310ef27e0e56558b9f89a1d43dd26f187d0177e9c0bb44d8d6e34791d204ee17" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.28.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1577966400">- security update
- added patches
  CVE-2019-11045 [bsc#1159923]
  + php7-CVE-2019-11045.patch
  CVE-2019-11046 [bsc#1159924]
  + php7-CVE-2019-11046.patch
  CVE-2019-11047 [bsc#1159922]
  + php7-CVE-2019-11047.patch
  CVE-2019-11050 [bsc#1159927]
  + php7-CVE-2019-11050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
</package>
<package pkgid="f06e802353c1bd893d612bd82375f933df307721ae5b6ca831c8509f5a3c026e" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="8e211b6d6f7ea12e13afa2e8585f9f15ef4a225cf74658aa7d5d42b630c88523" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="94e1bef7f42043d1055d713e64afcfed20e671b72c2b6cb35f0c8b342037f7b7" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.32.1"/>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1577966400">- security update
- added patches
  CVE-2019-11045 [bsc#1159923]
  + php7-CVE-2019-11045.patch
  CVE-2019-11046 [bsc#1159924]
  + php7-CVE-2019-11046.patch
  CVE-2019-11047 [bsc#1159922]
  + php7-CVE-2019-11047.patch
  CVE-2019-11050 [bsc#1159927]
  + php7-CVE-2019-11050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
</package>
<package pkgid="1576dfdb4e8596404a398e5e43d139d1d14b67f8083a21afc3b2e1545ff6771a" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.36.7"/>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1577966400">- security update
- added patches
  CVE-2019-11045 [bsc#1159923]
  + php7-CVE-2019-11045.patch
  CVE-2019-11046 [bsc#1159924]
  + php7-CVE-2019-11046.patch
  CVE-2019-11047 [bsc#1159922]
  + php7-CVE-2019-11047.patch
  CVE-2019-11050 [bsc#1159927]
  + php7-CVE-2019-11050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="00ff809100c17cf61d5920adfa1611e321acdb5a5213a6dbd293c2a9bb95a42f" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="b222a78d3bfd3556e533256e5446b5ddc1cdfd97bfde7cea3f2c3e0ed7e28b40" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="dfc8fa908d5190f774296e5de3794bca10c4df94becf35e2fae30df9400f56a7" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
</package>
<package pkgid="a1450a3cd7484b2edfef1b0322197146e2ba803459be3723bcfbfbe908ea13b0" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
</package>
<package pkgid="92e3f8172fc0b8041942ab403fcbc1b18ba165f15559433cfe28c51e31107d29" name="apache2-mod_uwsgi" arch="x86_64">
  <version epoch="0" ver="2.0.18" rel="lp151.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1498305600">- Add reproducible.patch to override build date to make build more reproducible
- sort list of plugins</changelog>
  <changelog author="jengelh@inai.de" date="1508328000">- Trim filler wording from description.</changelog>
  <changelog author="sven@uebelacker.net" date="1509019200">- Update to 2.0.15: [2017-03-30]
  * workaround for the holy allocator for avoiding crashes with newrelic (see
    Issues notes)
  * avoid time overflow in request logs during (even minimal) clock skew
  * fixed python logger with python3
  * fixed catch-exceptions with python3
  * backported ?don?t clone $env-&gt;{?psgix.io?} on ?PSGI cancel??
  * added support for authentication in the redis logger
  * added the spinningfifo action hook to the core
  * fixed compilation with php 7.1 (?????? ???????????)
  * correctly returns error code 22 in lazy_apps + master_mode
  * fixed compilation for OpenSSL 1.1 (Riccardo Magliocchetti)
  * Add a ?skip-atexit-teardown option to skip perl/python teardown (Ævar
    Arnfjörð Bjarmason)
  * fixed static file serving over https-socket
- building now php7 plugin via php7-embed package for Factory/Tumbleweed
- removing uwsgi-1.9.13-emperor_pg-Wformat.patch</changelog>
  <changelog author="sven@uebelacker.net" date="1510228800">- creating /run/uwsgi for sockets via systemd service now</changelog>
  <changelog author="i@marguerite.su" date="1512907200">- fix a leaf problem found by repo-checker
  * uwsgi-python3 can't be install because it requires python-base = 3.6
    which should be python3-base</changelog>
  <changelog author="michael@stroeder.com" date="1518955200">- removed obsolete reproducible.patch
- Update to 2.0.16:
  * [CVE-2018-6758] Stack-based buffer overflow in
    core/utils.c:uwsgi_expand_path()
  * Backported early_post_jail plugin hook (Bjørnar Ness)
  * Fixed ipv6 suupport for http-socket (James Brown)
  * Enable execinfo on DragonFly BSD (Aaron LI)
  * Fix inet_ntop buffer size (Orivej Desh)
  * Add worker running time metrics (Serge/yasek)
  * Backported safe-pidfile, safe-pidfile2 (Nate Coraor)
  * Stop using libxml2 by default on osx
  * Fixed uwsgi_kvlist_parse signature
  * Backport http range fixes from master (Curtis Maloney, Sokolov Yura)
  * relicensed mod_proxy_uwsgi to Apache 2.0
  * logging: Add ${millis} support to json encode
  * plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti)
  * Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte)
  * Allow to override build date (Bernhard M. Wiedemann)
  * Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer)
  * Added uwsgi_resolve_ip for redis host (ahmbas)
  * plugins/gevent: Fix signal handlers (Maslov Alexander)
  * Write x509 DER to the uwsgi buffer (Paul Tagliamonte)
  * plugin/http: Fix compilation (Melvyn Sopacua)
  * Fixed emperor throttling system (Jeremy Hiatt)
  * Fix application loading without Plack after excluding ?.? from @INC in new Perl versions (Anton Petrusevich)
  * Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov)
  * Build System: support k_minor has a _xxx suffix (TOGO Li)
  * Fixed drop-after-* options (Robert DeRose)
  * Add mule_send_msg success indicator (Josh Tiras)
  * Properly check item size in uwsgi_queue_push (Josh Tiras)
  * FastRouter / HTTP Router can now have a ?fallback? key configured
  * HTTP Router now supports post-buffer, just like FastRouter
  * Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode)
  * Add support for Brotli (.br) with ?static-gzip
  * Back-ported HTTP/1.1 support (?http11-socket) from 2.1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519732800">- Update License tag to SPDX 3 version:
  Apache-2.0 AND GPL-2.0-only WITH GCC-exception-2.0.</changelog>
  <changelog author="jfunk@funktronics.ca" date="1523880000">- Update to 2.0.17:
  * The Emperor throttling subsystem does not make use anymore of blocking
    functions, like usleep(), this should fix stats serving and should improve
    vassals startup time
  * [Security/PHP] enforce DOCUMENT_ROOT check when using --php-docroot to
    avoid directory traversal (Marios Nicolaides)
  * added --shutdown-sockets to improve graceful shutdowns (Andrew Wason)</changelog>
  <changelog author="jfunk@funktronics.ca" date="1523880001">- Disable apache2-mod_proxy_uwsgi on Leap 15 since upstream Apache includes
  the module now</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524052800">- Handle aarch64 arch</changelog>
  <changelog author="michael@stroeder.com" date="1524571200">- Require Apache 2.4.33 for Leap 15 and Tumbleweed
  because otherwise mod_proxy_uwsgi is not available (bsc#1090695)</changelog>
  <changelog author="jfunk@funktronics.ca" date="1527768000">- Don't create a /run directory for Apache on startup. It fails if Apache is
  not installed and sockets are defined per-application anyway (bnc#1082002)
- Fix broken build dependency on Leap 15</changelog>
  <changelog author="michael@stroeder.com" date="1531137600">- update to upstream release 2.0.17.1
  * Fixed memory leak in HTTPS_CLIENT_CERTIFICATE
  * TLSv1 is now disabled by default
  * Improved daemons throttle system
  * Add ?secs? log formatting variable
  * Improved snprintf() usage to be OpenBSD-friendly
  * Improved glibc crypt/crypt_r management
  * Fixed websocket pong timeout check
  * Add the ?License? classifier to setup.py
  * Add support for php user.ini
  * Official support for Python 3.7</changelog>
  <changelog author="jfunk@funktronics.ca" date="1532347200">- Work around missing include dir in glusterfs pkg-config</changelog>
  <changelog author="michael@stroeder.com" date="1533211200">- Trimmed package description</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1549713600">- HTTPS URL for source
- update to upstream release 2.0.18
  * Fixed support for Python 3.7
  * Allow to use autoport (socket :0) with custom socket backlog
  * pyuwsgi ported to python3
  * pyuwsgi packages fixes
  * pyuwsginossl build configuration for building pyuwsgi without ssl support
  * Fix unix socket inheritance after reload on FreeBSD
  * Fix crashes with --wsgi-env-behavior=holy (#1950)
  * Fix invalid free in python plugin (#1942)
  * Fix compilation warnings with gcc-8 (#1819)
  * Fix spooler python references
  * Don't generate build warnings in systemd_logger
  * Fix segmentation fault during worker shutdown (#1651)</changelog>
  <changelog author="James Oakley &lt;jfunk@funktronics.ca&gt;" date="1552737600">- Add patch uwsgi-2.0.18-postgresql-config.patch to use pkg-config
  instead of pg_config as it was removed in postgres11-devel</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1556625600">- Fix systemd kill signal (uwsgi does not die on SIGTERM)
- Add reload command to systemd service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="pgajdos@suse.com" date="1583755200">- disable geoip plugin [bsc#1156199]</changelog>
</package>
<package pkgid="0f6ec972ac5dbb37f3d4d74f638991af30d1cd3cfc7be4adc087689fb7a885dc" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="1622f33574eaad2caaf8da230accea37a38760963ef6041f20ed1dba7c9b2423" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="1e829c268fa4ccb3203dceabaa09d6935565e8977e0d9393bd8c7aa3d18bfefe" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="53dcb6ea6a00176e80bc6d61058368a69f6675df946a73aa56a084a3218add32" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="537d7c8d9e9604afb8df98bc90e586cf71a0f2303eed1832b4e6ffe4fe52a31e" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="55d2fd484f0f8499e2819877580dc132bf03b80aae087e59d01006fcb5fe3c81" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="99a669cd25ca7f8feacbd3d7bfe934f555ee7d087c71c47c3997e61a217bf90f" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="b642c2be12ea4dd8701d3f83035db91f1e64841d6fde0e50a66e1bc38fc91ea1" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="36dbcb3bd7e89614e6ff23db7214b6ba8f6169cacbbfbb9e9e579be5b0473db2" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="b289ab328cdbac675eae8498480fd1df1929cc609f0ca7671868b10f737d8a6a" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="c577cbc29b873bb25c67d2c44136454e596817e410266ad13a80ab746c8efa8d" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="67d3fa254aa082d90b663ae309e907d352c4cd8f908ef270c04545178464b24b" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="2597be96a0af052fb7c19977bbb68d2e781d84c2df3445773ca505e9ca14f913" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="97732c468dc0414f282e4e2753131bd64faae85b7008d54261baaea1060acfbc" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="f36414a0df37289524ece2c04159db2e8181e97edaa1d4562870b34c85a90888" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="1478b56c43a8a233c0323a252b3a572043c1f8b16126b79d920d8c2de2f7ce93" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="1b3ddfcf5e6d4673492aa5d9749b59b972458728f0bcbe7772b801b83a6ba497" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="b930c5f53486e4377ae16d6506a46c88a6aba296d3dfac46c729782baaac90eb" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="a5b09d2cc7bca930016d0fae18dd3c7e9c077e197babac5b6d06dbabe6add1d9" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="d7eaedae01180840e37630b5e48673c0e80ce3f0501d373bfc239f1b50aaa141" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="bc4d1e8bdf99c72afc12319c39f811465ca98576f00b745160d0a5937af99ed7" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="90066860bd0dbfc1830814ae211761ab6470ff91e6e405c322bf58d45a146975" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="a9fdd4b7cfa93385390f239da20110dc2a9dcca8f78b8c71995e06c47a1fa748" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="778adf1d259158eeb67e138cd7fe5eb79d737147f1e12251f66d11b42a61e098" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="5755d051aacd5711ebeb6355c03e51f0491834842f43953e099555789c7107a7" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="a99c76e901788a20ef7015ff036d03c812c11d1c3ae0d80dd2c768d358564d30" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="3d5622f55d50f61e774d1f34c9bbb16728d55ad4956bf087440da789469aae53" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="ce960aa7cf37e1b1b76537a4f1f8891af3a40e2a03da2dd44734778b9c82fab8" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="bf8d673632eebaa628efc2845c879ce260e274ec687c78c85dc7cba1fadf3af7" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="fe701c469738269af2b8aec776678fa9443d5b021fe06a7c54f8b843718a2402" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.12.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
</package>
<package pkgid="6e249676a88ad63081870bb75c4232385d1468086355aa93c0eec74ccc861f22" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="f51518452a6288b10a501d53d6915593d247921f5f214d6c8a6393b910ad72aa" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.15.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="7ba33bbccaa4eb48c1a0c40d8cd632766e83d5960238fcb2ec1e81fd2f586354" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="8d6ecc0571419eee3f1cef06b34cdbc79c78deb25850978103e8610066005fc9" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.18.1"/>
  <changelog author="pgajdos@suse.com" date="1521460800">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="218b7aac4d7a16d3ad4ac914330b1ae819c836747a593856b45f6e43f47cd516" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="671299802bcb2c08cc9cf452ac102e1165c6435a1f2569df19997bf732a8f5a2" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.21.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="28f926b3df4ae27a3fc739b569f1e2a34592ec4d96b6205278cf2c9a7a278769" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="d8e97503ac23b2e185b68b0c0c449ff50daeabb655fe82e0804248bcc2337ad0" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="f4aefde26aa0fc01aa5a65cd4c40410dda45c1ec0eba4f15d4619d1cc3290c01" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="ff084e4601bfb257611704299daa9f18af05cbce2ff4e3863ff47a38f6f7eb87" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="2f7400a6ce3948bfb11b930f123c81512df91059fe46d562f5bc82189bdf17be" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="5e905250a4bf308504af077923dd5a1f45f35bfc9ad6a76f1a59f28403643647" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.9.1"/>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
</package>
<package pkgid="27ba972c3bc2417e601d6c6a1cde9df033ac05501067f26b59bb91416cf80bb3" name="apparmor" arch="src">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="33d51ccbb6c361d33e37a2ea053a304fa68777065dc87e434683ba23a0a55c3c" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="b2c6625fb92c5b0264282f9bfb8728052b8d6b5936fb9fdf76d29e4c9be23d4a" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="972b7b047abc48c74a489c751ff11dc2749447717cd3a3fec62b4bbccadb5e52" name="apparmor-parser" arch="i586">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="522aaaafaf75c8c1155f6e46ac40a83aea2433efdf138195e5b9b89b40f9adda" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="d4f4610f6a48012507a86162b9f343d41d411e7d39f3bf7c8db189f44e758590" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="a9887355e9449ac3485ae40983205f15b10faddd96c94ca3c689a72318a7fc2a" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="7fc06afe1ff96b78fe79d0594268728c983f386808d6f7c3287f050da78b85ff" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="c470ebb8377f3ab30a1ebc99468e8de7939853477c23f41409235c5fa5a4400f" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="f6aca1e736e29d50da1782c55b33143cd5849d81ba7ee74c45ed79a40af572a7" name="apr" arch="src">
  <version epoch="0" ver="1.6.3" rel="lp151.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1403524800">- Move plain .so file from devel package to fix tomcat intercation.
  bnc#881700</changelog>
  <changelog author="tchvatal@suse.com" date="1403524801">- Single thread for tests.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1408449600">- 0004-Backport-r1593600-from-1.6.patch memory leak apr_pvsprintf()
- 0005-Backport-r1593612-from-1.6.patch Missing error codes in apr_error_string()
- 0007-backport-r1604596-1604598-from-trunk.patch memory corruption in apr_skiplist
- 0009-Merge-r1610854-from-trunk.patch posix semaphore must handle EINTR.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- apr-use-getrandom.patch Use the new getrandom() system call
  in apr_generate_random_bytes() if the system call number
  is defined and if the call is sucessful, fallback if otherwise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1425729600">- apr-use-getrandom.patch: Update, if getrandom blocks, fallback
  to the old codepath, restoring old always non-blocking behaviour
  in practice it blocks only at boottime when the entropy pool
  has not been fully initialized, this delays the startup
  of apache for example.
  * Use SYS_getrandom constant instead of the "internal"
  __NR_getrandom</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1425816000">- No longer use --enable-allocator-uses-mmap but the default
  which is using malloc, this feature exists to reduce
  fragmentation but this is currently at the expense of:
  * Loosing all malloc sanity checks.
  * mmap and munmap are expensive operations when using
    at lot of threads (like in apache worker,event)
  * It will waste memory, even more on archs that have big
    page sizes.
- If there are fragmentation or performance problems in glibc
  malloc, the library has to be fixed instead.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1430654400">- apr 1.5.2
  * apr_escape: Correctly calculate the size of the returned string in
  apr_escape_path and set the correct return value in case we actually
  escape the string
  * apr_poll(cb): fix error paths returned values and leaks.
  * apr_skiplist: Optimize the number of allocations by reusing pooled or
  malloc()ed nodes for the lifetime of the skiplist.
  * apr_skiplist: Fix possible multiple-free() on the same value in
  apr_skiplist_remove_all()
  (obsoletes 0007-backport-r1604596-1604598-from-trunk.patch)
  * apr_global_mutex/apr_proc_mutex: Resolve failures with the
  POSIX sem implementation in environments which receive signals.
  (obsoletes 0009-Merge-r1610854-from-trunk.patch)
  * drop already included or no longer needed patches:
    0004-Backport-r1593600-from-1.6.patch
    0005-Backport-r1593612-from-1.6.patch
    0007-backport-r1604596-1604598-from-trunk.patch
    0009-Merge-r1610854-from-trunk.patch
    string-compare.diff</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1430654401">- remove baselibs.conf that osc rejects now with message:
  ERROR: 'arch' referenced in baselibs.conf is not being built
  ERROR: 'ppc' referenced in baselibs.conf is not being built
  ERROR: 'package' referenced in baselibs.conf is not being built
  ERROR: 'arch' referenced in baselibs.conf is not being built
  ERROR: 'ppc' referenced in baselibs.conf is not being built
  ERROR: 'package' referenced in baselibs.conf is not being built</changelog>
  <changelog author="mpluskal@suse.com" date="1443528000">- Add gpg signature</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1462363200">- 0017-Merge-r1733694-r1733708-from-trunk.patch and
  0018-apr_proc_mutex-unix-backport-r1733775-from-trunk-par.patch
  Refcount shared mutexes usage to avoid
  destruction while still is use by some processes, this fixes
  apache graceful-restart sometimes leaving processes in
  "Gracefully finishing" state forever.
- apr-proc-mutex-map-anon.patch use MAP_ANON instead of mmap'ing
  /dev/zero.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497441600">- define READDIR_IS_THREAD_SAFE, because it is. Avoid
  using obsolete and potentially dangerous readdir_r.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- apr 1.6.2
  * apr_allocator: Provide apr_allocator_align()
  * apr_file_io: Add apr_file_pipe_create_pools()
  * Add APR_SO_FREEBIND option for apr_socket_opt_set.
  * apr_skiplist: Add apr_skiplist_addne*()
  * Added Unix domain socket support.
  * See http://www.apache.org/dist/apr/CHANGES-APR-1.6 for
    a full list of changes.
- Drop patches from upstream:
  * 0017-Merge-r1733694-r1733708-from-trunk.patch
  * 0018-apr_proc_mutex-unix-backport-r1733775-from-trunk-par.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Rename package</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Replace vision statement in %description with feature list.
  Fix RPM groups.
- Drop --with-pic which is only useful for static libs.</changelog>
  <changelog author="mpluskal@suse.com" date="1508155200">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Do not require python for building - its not needed anyways
  (fate#323526)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516708800">- ignore PowerPC transient test failures</changelog>
  <changelog author="mliska@suse.cz" date="1524052800">- Add gcc8-integer-overflow.patch to handle an undefined
  behavior (boo#1090085).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1525953600">- Version 1.6.3:
  * apr_file_trunc: Truncating a buffered file could add unexpected
  data after the truncate position. PR 51017.
  * apr_file_trunc: Fix an issue where reading from a buffered file
  after truncate could return stale data from the buffer.
  * apr_ipsubnet_create() now fails for an empty input string.
- fixes [bsc#1092981]</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- added patches
  increase timeout to fix random failure of testsuite [bsc#1151059]
  + apr-test-sendfile-timeout.patch</changelog>
</package>
<package pkgid="221c6c354242ccc551a9828cd252ab157864dc8b22ef38f432269b9119a43834" name="apr-devel" arch="i586">
  <version epoch="0" ver="1.6.3" rel="lp151.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- apr-use-getrandom.patch Use the new getrandom() system call
  in apr_generate_random_bytes() if the system call number
  is defined and if the call is sucessful, fallback if otherwise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1425729600">- apr-use-getrandom.patch: Update, if getrandom blocks, fallback
  to the old codepath, restoring old always non-blocking behaviour
  in practice it blocks only at boottime when the entropy pool
  has not been fully initialized, this delays the startup
  of apache for example.
  * Use SYS_getrandom constant instead of the "internal"
  __NR_getrandom</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1425816000">- No longer use --enable-allocator-uses-mmap but the default
  which is using malloc, this feature exists to reduce
  fragmentation but this is currently at the expense of:
  * Loosing all malloc sanity checks.
  * mmap and munmap are expensive operations when using
    at lot of threads (like in apache worker,event)
  * It will waste memory, even more on archs that have big
    page sizes.
- If there are fragmentation or performance problems in glibc
  malloc, the library has to be fixed instead.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1430654400">- apr 1.5.2
  * apr_escape: Correctly calculate the size of the returned string in
  apr_escape_path and set the correct return value in case we actually
  escape the string
  * apr_poll(cb): fix error paths returned values and leaks.
  * apr_skiplist: Optimize the number of allocations by reusing pooled or
  malloc()ed nodes for the lifetime of the skiplist.
  * apr_skiplist: Fix possible multiple-free() on the same value in
  apr_skiplist_remove_all()
  (obsoletes 0007-backport-r1604596-1604598-from-trunk.patch)
  * apr_global_mutex/apr_proc_mutex: Resolve failures with the
  POSIX sem implementation in environments which receive signals.
  (obsoletes 0009-Merge-r1610854-from-trunk.patch)
  * drop already included or no longer needed patches:
    0004-Backport-r1593600-from-1.6.patch
    0005-Backport-r1593612-from-1.6.patch
    0007-backport-r1604596-1604598-from-trunk.patch
    0009-Merge-r1610854-from-trunk.patch
    string-compare.diff</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1430654401">- remove baselibs.conf that osc rejects now with message:
  ERROR: 'arch' referenced in baselibs.conf is not being built
  ERROR: 'ppc' referenced in baselibs.conf is not being built
  ERROR: 'package' referenced in baselibs.conf is not being built
  ERROR: 'arch' referenced in baselibs.conf is not being built
  ERROR: 'ppc' referenced in baselibs.conf is not being built
  ERROR: 'package' referenced in baselibs.conf is not being built</changelog>
  <changelog author="mpluskal@suse.com" date="1443528000">- Add gpg signature</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1462363200">- 0017-Merge-r1733694-r1733708-from-trunk.patch and
  0018-apr_proc_mutex-unix-backport-r1733775-from-trunk-par.patch
  Refcount shared mutexes usage to avoid
  destruction while still is use by some processes, this fixes
  apache graceful-restart sometimes leaving processes in
  "Gracefully finishing" state forever.
- apr-proc-mutex-map-anon.patch use MAP_ANON instead of mmap'ing
  /dev/zero.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497441600">- define READDIR_IS_THREAD_SAFE, because it is. Avoid
  using obsolete and potentially dangerous readdir_r.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- apr 1.6.2
  * apr_allocator: Provide apr_allocator_align()
  * apr_file_io: Add apr_file_pipe_create_pools()
  * Add APR_SO_FREEBIND option for apr_socket_opt_set.
  * apr_skiplist: Add apr_skiplist_addne*()
  * Added Unix domain socket support.
  * See http://www.apache.org/dist/apr/CHANGES-APR-1.6 for
    a full list of changes.
- Drop patches from upstream:
  * 0017-Merge-r1733694-r1733708-from-trunk.patch
  * 0018-apr_proc_mutex-unix-backport-r1733775-from-trunk-par.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Rename package</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Replace vision statement in %description with feature list.
  Fix RPM groups.
- Drop --with-pic which is only useful for static libs.</changelog>
  <changelog author="mpluskal@suse.com" date="1508155200">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Do not require python for building - its not needed anyways
  (fate#323526)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516708800">- ignore PowerPC transient test failures</changelog>
  <changelog author="mliska@suse.cz" date="1524052800">- Add gcc8-integer-overflow.patch to handle an undefined
  behavior (boo#1090085).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1525953600">- Version 1.6.3:
  * apr_file_trunc: Truncating a buffered file could add unexpected
  data after the truncate position. PR 51017.
  * apr_file_trunc: Fix an issue where reading from a buffered file
  after truncate could return stale data from the buffer.
  * apr_ipsubnet_create() now fails for an empty input string.
- fixes [bsc#1092981]</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- added patches
  increase timeout to fix random failure of testsuite [bsc#1151059]
  + apr-test-sendfile-timeout.patch</changelog>
</package>
<package pkgid="57896340b5267834bf2814fefa152d284ee8223dc0948322e1c4e6acd1b19e28" name="apr-devel" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="lp151.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- apr-use-getrandom.patch Use the new getrandom() system call
  in apr_generate_random_bytes() if the system call number
  is defined and if the call is sucessful, fallback if otherwise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1425729600">- apr-use-getrandom.patch: Update, if getrandom blocks, fallback
  to the old codepath, restoring old always non-blocking behaviour
  in practice it blocks only at boottime when the entropy pool
  has not been fully initialized, this delays the startup
  of apache for example.
  * Use SYS_getrandom constant instead of the "internal"
  __NR_getrandom</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1425816000">- No longer use --enable-allocator-uses-mmap but the default
  which is using malloc, this feature exists to reduce
  fragmentation but this is currently at the expense of:
  * Loosing all malloc sanity checks.
  * mmap and munmap are expensive operations when using
    at lot of threads (like in apache worker,event)
  * It will waste memory, even more on archs that have big
    page sizes.
- If there are fragmentation or performance problems in glibc
  malloc, the library has to be fixed instead.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1430654400">- apr 1.5.2
  * apr_escape: Correctly calculate the size of the returned string in
  apr_escape_path and set the correct return value in case we actually
  escape the string
  * apr_poll(cb): fix error paths returned values and leaks.
  * apr_skiplist: Optimize the number of allocations by reusing pooled or
  malloc()ed nodes for the lifetime of the skiplist.
  * apr_skiplist: Fix possible multiple-free() on the same value in
  apr_skiplist_remove_all()
  (obsoletes 0007-backport-r1604596-1604598-from-trunk.patch)
  * apr_global_mutex/apr_proc_mutex: Resolve failures with the
  POSIX sem implementation in environments which receive signals.
  (obsoletes 0009-Merge-r1610854-from-trunk.patch)
  * drop already included or no longer needed patches:
    0004-Backport-r1593600-from-1.6.patch
    0005-Backport-r1593612-from-1.6.patch
    0007-backport-r1604596-1604598-from-trunk.patch
    0009-Merge-r1610854-from-trunk.patch
    string-compare.diff</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1430654401">- remove baselibs.conf that osc rejects now with message:
  ERROR: 'arch' referenced in baselibs.conf is not being built
  ERROR: 'ppc' referenced in baselibs.conf is not being built
  ERROR: 'package' referenced in baselibs.conf is not being built
  ERROR: 'arch' referenced in baselibs.conf is not being built
  ERROR: 'ppc' referenced in baselibs.conf is not being built
  ERROR: 'package' referenced in baselibs.conf is not being built</changelog>
  <changelog author="mpluskal@suse.com" date="1443528000">- Add gpg signature</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1462363200">- 0017-Merge-r1733694-r1733708-from-trunk.patch and
  0018-apr_proc_mutex-unix-backport-r1733775-from-trunk-par.patch
  Refcount shared mutexes usage to avoid
  destruction while still is use by some processes, this fixes
  apache graceful-restart sometimes leaving processes in
  "Gracefully finishing" state forever.
- apr-proc-mutex-map-anon.patch use MAP_ANON instead of mmap'ing
  /dev/zero.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497441600">- define READDIR_IS_THREAD_SAFE, because it is. Avoid
  using obsolete and potentially dangerous readdir_r.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- apr 1.6.2
  * apr_allocator: Provide apr_allocator_align()
  * apr_file_io: Add apr_file_pipe_create_pools()
  * Add APR_SO_FREEBIND option for apr_socket_opt_set.
  * apr_skiplist: Add apr_skiplist_addne*()
  * Added Unix domain socket support.
  * See http://www.apache.org/dist/apr/CHANGES-APR-1.6 for
    a full list of changes.
- Drop patches from upstream:
  * 0017-Merge-r1733694-r1733708-from-trunk.patch
  * 0018-apr_proc_mutex-unix-backport-r1733775-from-trunk-par.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Rename package</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Replace vision statement in %description with feature list.
  Fix RPM groups.
- Drop --with-pic which is only useful for static libs.</changelog>
  <changelog author="mpluskal@suse.com" date="1508155200">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Do not require python for building - its not needed anyways
  (fate#323526)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516708800">- ignore PowerPC transient test failures</changelog>
  <changelog author="mliska@suse.cz" date="1524052800">- Add gcc8-integer-overflow.patch to handle an undefined
  behavior (boo#1090085).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1525953600">- Version 1.6.3:
  * apr_file_trunc: Truncating a buffered file could add unexpected
  data after the truncate position. PR 51017.
  * apr_file_trunc: Fix an issue where reading from a buffered file
  after truncate could return stale data from the buffer.
  * apr_ipsubnet_create() now fails for an empty input string.
- fixes [bsc#1092981]</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- added patches
  increase timeout to fix random failure of testsuite [bsc#1151059]
  + apr-test-sendfile-timeout.patch</changelog>
</package>
<package pkgid="3eaee08c2a12ff1a7b32c47f628b2558611d6b475dbcc5442ea75ab59a50c500" name="apr-util" arch="src">
  <version epoch="0" ver="1.6.1" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
  <changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410955200">- version 1.5.4
  * MySQL driver: Fix incorrect handling of bad parameter.
  * apr_crypto_get_driver(): Fix invalid storage reference on error path.
- docs: Tell doxygen not to store timestamps in files.</changelog>
  <changelog author="tchvatal@suse.com" date="1413460800">- Clean up with spec-cleaner
- Kill support of sle10 and sle9
- Remove unused configure switches</changelog>
  <changelog author="coolo@suse.com" date="1413633600">- fix requires after spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1444737600">- require postgresql-devel version at least 9.1.0 to fix build for
  SLE-11-SP4</changelog>
  <changelog author="pgajdos@suse.com" date="1454587200">- require postgresql-devel less then 9.4 to fix build on SLE_12
  and SLE_12_SP1</changelog>
  <changelog author="pgajdos@suse.com" date="1460030400">- require just posgresql-devel everywhere, it seems to work now</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- APR-util 1.6.0
  * Update MySQL build to stop using libmysqlclient_r
  * apr_siphash: Implement keyed hash function SipHash
  * apr_buckets: Add apr_bucket_file_set_buf_size()
  * apr_crypto: avoid excessive iteration in bcrypt hash.
  * apr_xml_to_text: Add style APR_XML_X2T_PARSED.
  * see http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 for
  extra details</changelog>
  <changelog author="mpluskal@suse.com" date="1499860800">- Rename package to apr-util
- Drop baselib.conf as it does not target any supported
  architecture</changelog>
  <changelog author="jengelh@inai.de" date="1500292800">- Replace unusual *.?a match by *.la.
- Fix RPM groups, diversify summaries.</changelog>
  <changelog author="mpluskal@suse.com" date="1508241600">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="kstreitova@suse.com" date="1510056000">- APR-util 1.6.1
  * apr_crypto: Fix compatibility with LibreSSL. PR 61596.
  * sdbm: better database/page validation to fail cleanly when
    corrupted [bsc#1064990], CVE-2017-12618</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Add apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2.</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- extend apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2. [bsc#1094754]</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568203200">- Add missing zlib-devel build dependency which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1
  (bsc#1149792)</changelog>
</package>
<package pkgid="6cdf1f12038ef36eb545ecdd764b9c67d6fb8b958c8b3d8c65fad074410df5fe" name="apr-util-devel" arch="i586">
  <version epoch="0" ver="1.6.1" rel="lp151.5.3.1"/>
  <changelog author="tchvatal@suse.com" date="1413460800">- Clean up with spec-cleaner
- Kill support of sle10 and sle9
- Remove unused configure switches</changelog>
  <changelog author="coolo@suse.com" date="1413633600">- fix requires after spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1444737600">- require postgresql-devel version at least 9.1.0 to fix build for
  SLE-11-SP4</changelog>
  <changelog author="pgajdos@suse.com" date="1454587200">- require postgresql-devel less then 9.4 to fix build on SLE_12
  and SLE_12_SP1</changelog>
  <changelog author="pgajdos@suse.com" date="1460030400">- require just posgresql-devel everywhere, it seems to work now</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- APR-util 1.6.0
  * Update MySQL build to stop using libmysqlclient_r
  * apr_siphash: Implement keyed hash function SipHash
  * apr_buckets: Add apr_bucket_file_set_buf_size()
  * apr_crypto: avoid excessive iteration in bcrypt hash.
  * apr_xml_to_text: Add style APR_XML_X2T_PARSED.
  * see http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 for
  extra details</changelog>
  <changelog author="mpluskal@suse.com" date="1499860800">- Rename package to apr-util
- Drop baselib.conf as it does not target any supported
  architecture</changelog>
  <changelog author="jengelh@inai.de" date="1500292800">- Replace unusual *.?a match by *.la.
- Fix RPM groups, diversify summaries.</changelog>
  <changelog author="mpluskal@suse.com" date="1508241600">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="kstreitova@suse.com" date="1510056000">- APR-util 1.6.1
  * apr_crypto: Fix compatibility with LibreSSL. PR 61596.
  * sdbm: better database/page validation to fail cleanly when
    corrupted [bsc#1064990], CVE-2017-12618</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Add apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2.</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- extend apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2. [bsc#1094754]</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568203200">- Add missing zlib-devel build dependency which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1
  (bsc#1149792)</changelog>
</package>
<package pkgid="d6c5ee82c8c6fef87987b9011cfbefee527b450e30150dbaa31b7af1abb06fde" name="apr-util-devel" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="lp151.5.3.1"/>
  <changelog author="tchvatal@suse.com" date="1413460800">- Clean up with spec-cleaner
- Kill support of sle10 and sle9
- Remove unused configure switches</changelog>
  <changelog author="coolo@suse.com" date="1413633600">- fix requires after spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1444737600">- require postgresql-devel version at least 9.1.0 to fix build for
  SLE-11-SP4</changelog>
  <changelog author="pgajdos@suse.com" date="1454587200">- require postgresql-devel less then 9.4 to fix build on SLE_12
  and SLE_12_SP1</changelog>
  <changelog author="pgajdos@suse.com" date="1460030400">- require just posgresql-devel everywhere, it seems to work now</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- APR-util 1.6.0
  * Update MySQL build to stop using libmysqlclient_r
  * apr_siphash: Implement keyed hash function SipHash
  * apr_buckets: Add apr_bucket_file_set_buf_size()
  * apr_crypto: avoid excessive iteration in bcrypt hash.
  * apr_xml_to_text: Add style APR_XML_X2T_PARSED.
  * see http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 for
  extra details</changelog>
  <changelog author="mpluskal@suse.com" date="1499860800">- Rename package to apr-util
- Drop baselib.conf as it does not target any supported
  architecture</changelog>
  <changelog author="jengelh@inai.de" date="1500292800">- Replace unusual *.?a match by *.la.
- Fix RPM groups, diversify summaries.</changelog>
  <changelog author="mpluskal@suse.com" date="1508241600">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="kstreitova@suse.com" date="1510056000">- APR-util 1.6.1
  * apr_crypto: Fix compatibility with LibreSSL. PR 61596.
  * sdbm: better database/page validation to fail cleanly when
    corrupted [bsc#1064990], CVE-2017-12618</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Add apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2.</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- extend apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2. [bsc#1094754]</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568203200">- Add missing zlib-devel build dependency which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1
  (bsc#1149792)</changelog>
</package>
<package pkgid="88ef675020f10b7ca51c02ecbd6bd96affc843e31bf4caa5aeb5febb7c506486" name="apt-cacher-ng" arch="src">
  <version epoch="0" ver="3.1" rel="lp151.3.3.1"/>
  <changelog author="mchandras@suse.de" date="1494936000">- Initial commit</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Trim description. Use regular %setup call for all unpacking.</changelog>
  <changelog author="mchandras@suse.de" date="1512475200">- Version bump to 3.1
  * Hide credentials in acngtool in some corner cases
  * Dropped references to distkill.pl script which was superseeded by acngtool
  * Made default PassThroughPattern setting stricter
  * Mirror database update
  * Avoid expiration failure when some index files are missing
- Fix logrotate file installation</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Use more of cmake macros
- Use pkgconfig style dependencies</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1579262400">- add CVE-2020-5202.patch: fixes bsc#1157706, CVE-2020-5202. A local user
  account that managed to listen on localhost:3142 before the actual
  apt-cacher-ng systemd service did could have intercepted client traffic sent
  by e.g. root via the cron job /etc/cron.daily/apt-cacher-ng, possibly
  including authentication credentials.</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1579521600">- fix CVE-2019-18899 (bsc#1157703): the systemd service configuration in
  apt-cacher-ng.service did run apt-cacher-ng as root while /run/apt-cacher-ng
  was created for the apt-cacher-ng user via systemd-tmpfiles. A compromised
  apt-cacher-ng could have performed symlink attacks in /run/apt-cacher-ng to
  cause writes to privileged file system locations by root. Furthermore the
  socket path /run/apt-cacher-ng/socket could have been replaced by an
  attacker owned socket, thereby allowing him to hijack privileged client
  connections to apt-cacher-ng. Additional unexplored security issues could
  have been possible.
  To fix this use the upstream service file with correct privilege drop
  configuration. During update the ownership of /var/log/apt-cacher-ng and
  /var/cache/apt-cacher-ng as well as a possibly already running apt-cacher-ng
  instance (files in /run/apt-cacher-ng) need to be fixed in %pre, %post.</changelog>
</package>
<package pkgid="49aef2a6721cd7d735ab1f7e68f9f9285cde7162af9178ea803b27e5faa0bce8" name="apt-cacher-ng" arch="x86_64">
  <version epoch="0" ver="3.1" rel="lp151.3.3.1"/>
  <changelog author="mchandras@suse.de" date="1494936000">- Initial commit</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Trim description. Use regular %setup call for all unpacking.</changelog>
  <changelog author="mchandras@suse.de" date="1512475200">- Version bump to 3.1
  * Hide credentials in acngtool in some corner cases
  * Dropped references to distkill.pl script which was superseeded by acngtool
  * Made default PassThroughPattern setting stricter
  * Mirror database update
  * Avoid expiration failure when some index files are missing
- Fix logrotate file installation</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Use more of cmake macros
- Use pkgconfig style dependencies</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1579262400">- add CVE-2020-5202.patch: fixes bsc#1157706, CVE-2020-5202. A local user
  account that managed to listen on localhost:3142 before the actual
  apt-cacher-ng systemd service did could have intercepted client traffic sent
  by e.g. root via the cron job /etc/cron.daily/apt-cacher-ng, possibly
  including authentication credentials.</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1579521600">- fix CVE-2019-18899 (bsc#1157703): the systemd service configuration in
  apt-cacher-ng.service did run apt-cacher-ng as root while /run/apt-cacher-ng
  was created for the apt-cacher-ng user via systemd-tmpfiles. A compromised
  apt-cacher-ng could have performed symlink attacks in /run/apt-cacher-ng to
  cause writes to privileged file system locations by root. Furthermore the
  socket path /run/apt-cacher-ng/socket could have been replaced by an
  attacker owned socket, thereby allowing him to hijack privileged client
  connections to apt-cacher-ng. Additional unexplored security issues could
  have been possible.
  To fix this use the upstream service file with correct privilege drop
  configuration. During update the ownership of /var/log/apt-cacher-ng and
  /var/cache/apt-cacher-ng as well as a possibly already running apt-cacher-ng
  instance (files in /run/apt-cacher-ng) need to be fixed in %pre, %post.</changelog>
</package>
<package pkgid="20e724f09d46519247af81abe80a58c5a076fcd1aef17acf0c8ad3500c215054" name="arc" arch="src">
  <version epoch="0" ver="5.21q" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1511870400">- Initial changelog entry for version 5.21p (imported from
  home:AndreasSchwab)</changelog>
  <changelog author="mpluskal@suse.com" date="1517313600">- Switch to github source
- Update to version 5.21q</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546948800">- Make use of license %macro
- Applied spec-cleaner
- Added patches:
  * arc-5.21p-directory-traversel.patch: Fixes a directory traversal
    vulnerability (CVE-2015-9275 bsc#1121032)
  * arc-5.21p-fix-arcdie.patch: Fixed a crash on 64 bit machines when arcdie
    gets called with more than 1 variable argument
  * arc-5.21p-hdrv1-read-fix.patch: Fixed version 1 arc header reading</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1577275200">- Add Conflicts: arcanist</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579262400">- Cleanup package</changelog>
</package>
<package pkgid="e02dbf7e9d6ea94a2abc1e1a4a06e3d8a989dfaece6b5170ce2b1ec88aa8f5ce" name="arc" arch="x86_64">
  <version epoch="0" ver="5.21q" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1511870400">- Initial changelog entry for version 5.21p (imported from
  home:AndreasSchwab)</changelog>
  <changelog author="mpluskal@suse.com" date="1517313600">- Switch to github source
- Update to version 5.21q</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546948800">- Make use of license %macro
- Applied spec-cleaner
- Added patches:
  * arc-5.21p-directory-traversel.patch: Fixes a directory traversal
    vulnerability (CVE-2015-9275 bsc#1121032)
  * arc-5.21p-fix-arcdie.patch: Fixed a crash on 64 bit machines when arcdie
    gets called with more than 1 variable argument
  * arc-5.21p-hdrv1-read-fix.patch: Fixed version 1 arc header reading</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1577275200">- Add Conflicts: arcanist</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579262400">- Cleanup package</changelog>
</package>
<package pkgid="ae1ae43cfe5ae22938117733c2f0afbdf5e8bdb43b40c2c4cba9af52809f3fb1" name="ark" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Drop custom mimetypes
  * Enable targets generation in the bin subfolder of the build dir
  * Remove unnecessary moc includes
  * Don't override Job signals
  * LoadJob: check result in onFinished()
  * Rework kill logic (kde#389290)
  * libzip: implement killing TestJob
  * Stop emitting result() after doKill()
  * Add apidox to cancelled() signal
  * Fix apidox copy-paste bug
  * Fix valgrind uninitialised warnings
  * Fix mismatched new[] / delete[] valgrind warning
  * Drop dead code
  * Add apidox for waitForFinishedSignal()
  * Remove obsolete reviewboardrc file
  * Update apidox of extractFiles()
  * Add apidox for ReadWriteArchiveInterface::addFiles()
  * Fix threading issue
  * Fix stale comment</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * libzipplugin: Add missing &lt;memory&gt; header</changelog>
  <changelog author="kstreitova@suse.com" date="1526558400">- Switch from "Recommends: p7zip" to "Recommends: p7zip-full" as
  Ark needs 7z executable that is now packaged in the p7zip-full
  package [bsc#899627]</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- Fix broken Recommends: p7zip-full, p7zip-full is only available on
  TW and contains the executables from the former p7zip package.</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * libzip: fix extraction of folders without zip entry (kde#394542)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * clizip: fix list after adding files to encrypted archive
  * Stop ignoring compression options when dropping files (kde#396579)
  * Make CI happy (I hope:))
  * More strict compile flags
  * cliinterface: restore old working directory after extraction (kde#395939)
  * libarchive: restore old working directory after extraction
  * Add checks for expected working dir in the extraction tests
  * cliinterface: make m_operationMode protected
  * Revert "cliinterface: simplify cleanUpExtracting() usage"
  * libarchive: cleanup blank lines
  * libarchive: rename counter variables
  * libarchive: move variables closer to usage
  * cliinterface: simplify cleanUpExtracting() usage
  * Do not duplicate work of KAboutData::setupCommandLine()
  * flatpak: enable graphics acceleration
  * flatpak: drop QT_QPA_PLATFORM=flatpak</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't show comment message widget after clearing the comment view
  * libzip: use ZIP_FL_ENC_RAW for comments</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix bzip main page</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Downgrade warning to debug.</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Disable Compress menu on remote URLs
  * Show 'Extract' menu on archives without extension (kde#399806)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Add donation url to appdata
  * clizip: Insert break statement
  * Bump minimum Qt version to 5.8
  * Get rid of gcc warnings
  * Fix zstd autotest on Jenkins
  * Remove extra semicolon
  * Add caption to the screenshot
  * Add a missing end parenthesis
  * Update copyright year
  * Add support for Zstd-compressed Tar-archives
  * libzipplugin: Simplify registration of progress callbacks
  * Introduce default value for OperationMode enum
  * Use Ark part only when mime type exactly matches a supported type (kde#398531)
  * Use KDEFrameworkCompilerSettings
  * Silence up false positive EBN check and fix some typos
  * Use lambdas instead of QSignalMapper
  * [CompressFileItemAction] Don't offer for non-local URLs
  * Add new option (-m) to man page
  * Add --mimetypes command line option
- Refreshed patches:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links
- Refreshed patches:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Remember part URL to delete the tempfile even if the user used save as. (kde#402529)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix loading of tar.zst archives (kde#404464)
  * cli7ztest: add failing test case for zip folders with RDA attributes</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
</package>
<package pkgid="ff20ca444992c2a259ca3894571dcad7fe19f6a9c46bef2a7588c08c2ddc3ea9" name="ark" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Drop custom mimetypes
  * Enable targets generation in the bin subfolder of the build dir
  * Remove unnecessary moc includes
  * Don't override Job signals
  * LoadJob: check result in onFinished()
  * Rework kill logic (kde#389290)
  * libzip: implement killing TestJob
  * Stop emitting result() after doKill()
  * Add apidox to cancelled() signal
  * Fix apidox copy-paste bug
  * Fix valgrind uninitialised warnings
  * Fix mismatched new[] / delete[] valgrind warning
  * Drop dead code
  * Add apidox for waitForFinishedSignal()
  * Remove obsolete reviewboardrc file
  * Update apidox of extractFiles()
  * Add apidox for ReadWriteArchiveInterface::addFiles()
  * Fix threading issue
  * Fix stale comment</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * libzipplugin: Add missing &lt;memory&gt; header</changelog>
  <changelog author="kstreitova@suse.com" date="1526558400">- Switch from "Recommends: p7zip" to "Recommends: p7zip-full" as
  Ark needs 7z executable that is now packaged in the p7zip-full
  package [bsc#899627]</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- Fix broken Recommends: p7zip-full, p7zip-full is only available on
  TW and contains the executables from the former p7zip package.</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * libzip: fix extraction of folders without zip entry (kde#394542)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * clizip: fix list after adding files to encrypted archive
  * Stop ignoring compression options when dropping files (kde#396579)
  * Make CI happy (I hope:))
  * More strict compile flags
  * cliinterface: restore old working directory after extraction (kde#395939)
  * libarchive: restore old working directory after extraction
  * Add checks for expected working dir in the extraction tests
  * cliinterface: make m_operationMode protected
  * Revert "cliinterface: simplify cleanUpExtracting() usage"
  * libarchive: cleanup blank lines
  * libarchive: rename counter variables
  * libarchive: move variables closer to usage
  * cliinterface: simplify cleanUpExtracting() usage
  * Do not duplicate work of KAboutData::setupCommandLine()
  * flatpak: enable graphics acceleration
  * flatpak: drop QT_QPA_PLATFORM=flatpak</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't show comment message widget after clearing the comment view
  * libzip: use ZIP_FL_ENC_RAW for comments</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix bzip main page</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Downgrade warning to debug.</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Disable Compress menu on remote URLs
  * Show 'Extract' menu on archives without extension (kde#399806)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Add donation url to appdata
  * clizip: Insert break statement
  * Bump minimum Qt version to 5.8
  * Get rid of gcc warnings
  * Fix zstd autotest on Jenkins
  * Remove extra semicolon
  * Add caption to the screenshot
  * Add a missing end parenthesis
  * Update copyright year
  * Add support for Zstd-compressed Tar-archives
  * libzipplugin: Simplify registration of progress callbacks
  * Introduce default value for OperationMode enum
  * Use Ark part only when mime type exactly matches a supported type (kde#398531)
  * Use KDEFrameworkCompilerSettings
  * Silence up false positive EBN check and fix some typos
  * Use lambdas instead of QSignalMapper
  * [CompressFileItemAction] Don't offer for non-local URLs
  * Add new option (-m) to man page
  * Add --mimetypes command line option
- Refreshed patches:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links
- Refreshed patches:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Remember part URL to delete the tempfile even if the user used save as. (kde#402529)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix loading of tar.zst archives (kde#404464)
  * cli7ztest: add failing test case for zip folders with RDA attributes</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
</package>
<package pkgid="8f0fd46556f3f45049c43b1b5df02fdcf2da256f6c5e90eac4f5dea5004b9331" name="ark" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * libzipplugin: Add missing &lt;memory&gt; header</changelog>
  <changelog author="kstreitova@suse.com" date="1526558400">- Switch from "Recommends: p7zip" to "Recommends: p7zip-full" as
  Ark needs 7z executable that is now packaged in the p7zip-full
  package [bsc#899627]</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- Fix broken Recommends: p7zip-full, p7zip-full is only available on
  TW and contains the executables from the former p7zip package.</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * libzip: fix extraction of folders without zip entry (kde#394542)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * clizip: fix list after adding files to encrypted archive
  * Stop ignoring compression options when dropping files (kde#396579)
  * Make CI happy (I hope:))
  * More strict compile flags
  * cliinterface: restore old working directory after extraction (kde#395939)
  * libarchive: restore old working directory after extraction
  * Add checks for expected working dir in the extraction tests
  * cliinterface: make m_operationMode protected
  * Revert "cliinterface: simplify cleanUpExtracting() usage"
  * libarchive: cleanup blank lines
  * libarchive: rename counter variables
  * libarchive: move variables closer to usage
  * cliinterface: simplify cleanUpExtracting() usage
  * Do not duplicate work of KAboutData::setupCommandLine()
  * flatpak: enable graphics acceleration
  * flatpak: drop QT_QPA_PLATFORM=flatpak</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't show comment message widget after clearing the comment view
  * libzip: use ZIP_FL_ENC_RAW for comments</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix bzip main page</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Downgrade warning to debug.</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Disable Compress menu on remote URLs
  * Show 'Extract' menu on archives without extension (kde#399806)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Add donation url to appdata
  * clizip: Insert break statement
  * Bump minimum Qt version to 5.8
  * Get rid of gcc warnings
  * Fix zstd autotest on Jenkins
  * Remove extra semicolon
  * Add caption to the screenshot
  * Add a missing end parenthesis
  * Update copyright year
  * Add support for Zstd-compressed Tar-archives
  * libzipplugin: Simplify registration of progress callbacks
  * Introduce default value for OperationMode enum
  * Use Ark part only when mime type exactly matches a supported type (kde#398531)
  * Use KDEFrameworkCompilerSettings
  * Silence up false positive EBN check and fix some typos
  * Use lambdas instead of QSignalMapper
  * [CompressFileItemAction] Don't offer for non-local URLs
  * Add new option (-m) to man page
  * Add --mimetypes command line option
- Refreshed patches:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links
- Refreshed patches:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Remember part URL to delete the tempfile even if the user used save as. (kde#402529)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix loading of tar.zst archives (kde#404464)
  * cli7ztest: add failing test case for zip folders with RDA attributes</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1598529600">- Add patch to prevent path traversal (boo#1175857, CVE-2020-24654):
  * 0001-Pass-the-ARCHIVE_EXTRACT_SECURE_SYMLINKS-flag-to-lib.patch</changelog>
</package>
<package pkgid="dd3be57e3d304f4e08737ffd7a8d9d0875d6f5149e85ff8dfc31d504a5709afd" name="ark" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * libzipplugin: Add missing &lt;memory&gt; header</changelog>
  <changelog author="kstreitova@suse.com" date="1526558400">- Switch from "Recommends: p7zip" to "Recommends: p7zip-full" as
  Ark needs 7z executable that is now packaged in the p7zip-full
  package [bsc#899627]</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- Fix broken Recommends: p7zip-full, p7zip-full is only available on
  TW and contains the executables from the former p7zip package.</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * libzip: fix extraction of folders without zip entry (kde#394542)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * clizip: fix list after adding files to encrypted archive
  * Stop ignoring compression options when dropping files (kde#396579)
  * Make CI happy (I hope:))
  * More strict compile flags
  * cliinterface: restore old working directory after extraction (kde#395939)
  * libarchive: restore old working directory after extraction
  * Add checks for expected working dir in the extraction tests
  * cliinterface: make m_operationMode protected
  * Revert "cliinterface: simplify cleanUpExtracting() usage"
  * libarchive: cleanup blank lines
  * libarchive: rename counter variables
  * libarchive: move variables closer to usage
  * cliinterface: simplify cleanUpExtracting() usage
  * Do not duplicate work of KAboutData::setupCommandLine()
  * flatpak: enable graphics acceleration
  * flatpak: drop QT_QPA_PLATFORM=flatpak</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't show comment message widget after clearing the comment view
  * libzip: use ZIP_FL_ENC_RAW for comments</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix bzip main page</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Downgrade warning to debug.</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Disable Compress menu on remote URLs
  * Show 'Extract' menu on archives without extension (kde#399806)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Add donation url to appdata
  * clizip: Insert break statement
  * Bump minimum Qt version to 5.8
  * Get rid of gcc warnings
  * Fix zstd autotest on Jenkins
  * Remove extra semicolon
  * Add caption to the screenshot
  * Add a missing end parenthesis
  * Update copyright year
  * Add support for Zstd-compressed Tar-archives
  * libzipplugin: Simplify registration of progress callbacks
  * Introduce default value for OperationMode enum
  * Use Ark part only when mime type exactly matches a supported type (kde#398531)
  * Use KDEFrameworkCompilerSettings
  * Silence up false positive EBN check and fix some typos
  * Use lambdas instead of QSignalMapper
  * [CompressFileItemAction] Don't offer for non-local URLs
  * Add new option (-m) to man page
  * Add --mimetypes command line option
- Refreshed patches:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links
- Refreshed patches:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Remember part URL to delete the tempfile even if the user used save as. (kde#402529)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix loading of tar.zst archives (kde#404464)
  * cli7ztest: add failing test case for zip folders with RDA attributes</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1598529600">- Add patch to prevent path traversal (boo#1175857, CVE-2020-24654):
  * 0001-Pass-the-ARCHIVE_EXTRACT_SECURE_SYMLINKS-flag-to-lib.patch</changelog>
</package>
<package pkgid="63696c6156a0873f3e6b6369d991a9708bc30bfa22cca6b3ef874630614f6552" name="ark-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Drop custom mimetypes
  * Enable targets generation in the bin subfolder of the build dir
  * Remove unnecessary moc includes
  * Don't override Job signals
  * LoadJob: check result in onFinished()
  * Rework kill logic (kde#389290)
  * libzip: implement killing TestJob
  * Stop emitting result() after doKill()
  * Add apidox to cancelled() signal
  * Fix apidox copy-paste bug
  * Fix valgrind uninitialised warnings
  * Fix mismatched new[] / delete[] valgrind warning
  * Drop dead code
  * Add apidox for waitForFinishedSignal()
  * Remove obsolete reviewboardrc file
  * Update apidox of extractFiles()
  * Add apidox for ReadWriteArchiveInterface::addFiles()
  * Fix threading issue
  * Fix stale comment</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * libzipplugin: Add missing &lt;memory&gt; header</changelog>
  <changelog author="kstreitova@suse.com" date="1526558400">- Switch from "Recommends: p7zip" to "Recommends: p7zip-full" as
  Ark needs 7z executable that is now packaged in the p7zip-full
  package [bsc#899627]</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- Fix broken Recommends: p7zip-full, p7zip-full is only available on
  TW and contains the executables from the former p7zip package.</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * libzip: fix extraction of folders without zip entry (kde#394542)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * clizip: fix list after adding files to encrypted archive
  * Stop ignoring compression options when dropping files (kde#396579)
  * Make CI happy (I hope:))
  * More strict compile flags
  * cliinterface: restore old working directory after extraction (kde#395939)
  * libarchive: restore old working directory after extraction
  * Add checks for expected working dir in the extraction tests
  * cliinterface: make m_operationMode protected
  * Revert "cliinterface: simplify cleanUpExtracting() usage"
  * libarchive: cleanup blank lines
  * libarchive: rename counter variables
  * libarchive: move variables closer to usage
  * cliinterface: simplify cleanUpExtracting() usage
  * Do not duplicate work of KAboutData::setupCommandLine()
  * flatpak: enable graphics acceleration
  * flatpak: drop QT_QPA_PLATFORM=flatpak</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't show comment message widget after clearing the comment view
  * libzip: use ZIP_FL_ENC_RAW for comments</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix bzip main page</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Downgrade warning to debug.</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Disable Compress menu on remote URLs
  * Show 'Extract' menu on archives without extension (kde#399806)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Add donation url to appdata
  * clizip: Insert break statement
  * Bump minimum Qt version to 5.8
  * Get rid of gcc warnings
  * Fix zstd autotest on Jenkins
  * Remove extra semicolon
  * Add caption to the screenshot
  * Add a missing end parenthesis
  * Update copyright year
  * Add support for Zstd-compressed Tar-archives
  * libzipplugin: Simplify registration of progress callbacks
  * Introduce default value for OperationMode enum
  * Use Ark part only when mime type exactly matches a supported type (kde#398531)
  * Use KDEFrameworkCompilerSettings
  * Silence up false positive EBN check and fix some typos
  * Use lambdas instead of QSignalMapper
  * [CompressFileItemAction] Don't offer for non-local URLs
  * Add new option (-m) to man page
  * Add --mimetypes command line option
- Refreshed patches:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links
- Refreshed patches:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Remember part URL to delete the tempfile even if the user used save as. (kde#402529)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix loading of tar.zst archives (kde#404464)
  * cli7ztest: add failing test case for zip folders with RDA attributes</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
</package>
<package pkgid="553a0e51584f2f88c6d57d1d8b32fa8b2eda399620eef54080d5c0995c5ef77f" name="ark-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * libzipplugin: Add missing &lt;memory&gt; header</changelog>
  <changelog author="kstreitova@suse.com" date="1526558400">- Switch from "Recommends: p7zip" to "Recommends: p7zip-full" as
  Ark needs 7z executable that is now packaged in the p7zip-full
  package [bsc#899627]</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530273600">- Fix broken Recommends: p7zip-full, p7zip-full is only available on
  TW and contains the executables from the former p7zip package.</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * libzip: fix extraction of folders without zip entry (kde#394542)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * clizip: fix list after adding files to encrypted archive
  * Stop ignoring compression options when dropping files (kde#396579)
  * Make CI happy (I hope:))
  * More strict compile flags
  * cliinterface: restore old working directory after extraction (kde#395939)
  * libarchive: restore old working directory after extraction
  * Add checks for expected working dir in the extraction tests
  * cliinterface: make m_operationMode protected
  * Revert "cliinterface: simplify cleanUpExtracting() usage"
  * libarchive: cleanup blank lines
  * libarchive: rename counter variables
  * libarchive: move variables closer to usage
  * cliinterface: simplify cleanUpExtracting() usage
  * Do not duplicate work of KAboutData::setupCommandLine()
  * flatpak: enable graphics acceleration
  * flatpak: drop QT_QPA_PLATFORM=flatpak</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't show comment message widget after clearing the comment view
  * libzip: use ZIP_FL_ENC_RAW for comments</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix bzip main page</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Downgrade warning to debug.</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Disable Compress menu on remote URLs
  * Show 'Extract' menu on archives without extension (kde#399806)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Add donation url to appdata
  * clizip: Insert break statement
  * Bump minimum Qt version to 5.8
  * Get rid of gcc warnings
  * Fix zstd autotest on Jenkins
  * Remove extra semicolon
  * Add caption to the screenshot
  * Add a missing end parenthesis
  * Update copyright year
  * Add support for Zstd-compressed Tar-archives
  * libzipplugin: Simplify registration of progress callbacks
  * Introduce default value for OperationMode enum
  * Use Ark part only when mime type exactly matches a supported type (kde#398531)
  * Use KDEFrameworkCompilerSettings
  * Silence up false positive EBN check and fix some typos
  * Use lambdas instead of QSignalMapper
  * [CompressFileItemAction] Don't offer for non-local URLs
  * Add new option (-m) to man page
  * Add --mimetypes command line option
- Refreshed patches:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links
- Refreshed patches:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Remember part URL to delete the tempfile even if the user used save as. (kde#402529)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix loading of tar.zst archives (kde#404464)
  * cli7ztest: add failing test case for zip folders with RDA attributes</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1598529600">- Add patch to prevent path traversal (boo#1175857, CVE-2020-24654):
  * 0001-Pass-the-ARCHIVE_EXTRACT_SECURE_SYMLINKS-flag-to-lib.patch</changelog>
</package>
<package pkgid="6898ff5981e6d7f3e1708cb266d669bb0439f4070b7db6556038ef14aeb62c6a" name="armagetron" arch="src">
  <version epoch="0" ver="0.2.8.3.5" rel="lp151.3.3.1"/>
  <changelog author="dominique-obs@leuenberger.net" date="1241524800">- Update to version 0.2.8.2.1
- Fix the package to actually work (bnc#331629)</changelog>
  <changelog author="coolo@novell.com" date="1244203200">- fix usage of strchr</changelog>
  <changelog author="pth@suse.de" date="1244462400">- Rename dominique's patch and make it include cstring not string.h
- use %{_datadir} instead of /usr/share.
- Backport fixes regarding conversions from string constants to
  char* and type-punning from 0.2.8.3_rc2.</changelog>
  <changelog author="prusnak@suse.cz" date="1247227200">- /usr/games, /usr/share/games -&gt; /usr/bin, /usr/share</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1304942400">- Add gcc46_add_default_ctors.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Update to version 0.2.8.3.2:
  + Various security and bug fixes
  + For a full list of changes see NEWS file.
- Drop patches that have been fixed upstream:
  + armagetronad-0.2.8.2.1-no_type_punning.patch
  + armagetronad-0.2.8.2.1-string_const.patch
  + armagetronad-missing_headers.patch
  + gcc46_add_default_ctors.patch
- Add armagetron-configure.patch: Change detection of libpng.</changelog>
  <changelog author="coolo@suse.com" date="1347969600">- add explicit buildrequire for pkgconfig(glu)</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Change the file system layout: have the icon in /usr/share/pixmap
  as being the REAL file instead of being the symlink. This works
  around a current flaw in appstream-builder, which does not follow
  symlinks when extracting/finding icons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427630400">- Update to version 0.2.8.3.3:
  + security fix: do not read ahead of the beginning of network
    buffer.
  + security fix: don't attribute network errors from processing
    random packets to the connection to the server.
  + security fix: while at it, don't process random packets unless
    they may be important.
  + fix for potential crash with friend list filtering.
  + intel driver compatibility.
  + fix for rare crash with sound lock.
  + fix for camera turning for bizarre axis configurations.
- Install appdata.xml in order to be shown in AppStream based
  software centers.
- Drop armagetron-configure.patch: fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1459944000">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="rpm@fthiessen.de" date="1467115200">- Fixed build on Tumbleweed
- Some cleanup
- Added fix-segv.patch to fix segfault after starting a new game</changelog>
  <changelog author="jengelh@inai.de" date="1467201600">- Replace ancient package names</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470312000">- bypass boo#927268 for PowerPC clang failing if fstack-protector</changelog>
  <changelog author="kieltux@gmail.com" date="1475755200">- Some cleanup:
  * removed BuildRequires: kdelibs3-devel (fixes build for
    openSUSE Leap 42.1 and Leap 42.2).
  * added some BuildRequires.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- renamed: armagetron_add.tar.gz -&gt; armagetron_add.tar.bz2</changelog>
  <changelog author="meissner@suse.com" date="1494072001">- armagetron-fix-build.patch: do not integer compare a pointer against an integer</changelog>
  <changelog author="wbauer@tmo.at" date="1523102400">- Update to version 0.2.8.3.4:
  * Two issues that surfaced when compiling with gcc 6 were fixed
- Drop armagetron-fix-build.patch, merged upstream</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1563969600">- Disable LTO to fix Factory build
- Enable PIE
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 0.2.8.3.5. No changelog.
- Drop fix-segv.patch. Merged upstream.</changelog>
</package>
<package pkgid="6ca8e30a9710b2b2b769fd2c42c3b84e4b44286f0f9ce372bb3e8047b0212f49" name="armagetron" arch="x86_64">
  <version epoch="0" ver="0.2.8.3.5" rel="lp151.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Change the file system layout: have the icon in /usr/share/pixmap
  as being the REAL file instead of being the symlink. This works
  around a current flaw in appstream-builder, which does not follow
  symlinks when extracting/finding icons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427630400">- Update to version 0.2.8.3.3:
  + security fix: do not read ahead of the beginning of network
    buffer.
  + security fix: don't attribute network errors from processing
    random packets to the connection to the server.
  + security fix: while at it, don't process random packets unless
    they may be important.
  + fix for potential crash with friend list filtering.
  + intel driver compatibility.
  + fix for rare crash with sound lock.
  + fix for camera turning for bizarre axis configurations.
- Install appdata.xml in order to be shown in AppStream based
  software centers.
- Drop armagetron-configure.patch: fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1459944000">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="rpm@fthiessen.de" date="1467115200">- Fixed build on Tumbleweed
- Some cleanup
- Added fix-segv.patch to fix segfault after starting a new game</changelog>
  <changelog author="jengelh@inai.de" date="1467201600">- Replace ancient package names</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470312000">- bypass boo#927268 for PowerPC clang failing if fstack-protector</changelog>
  <changelog author="kieltux@gmail.com" date="1475755200">- Some cleanup:
  * removed BuildRequires: kdelibs3-devel (fixes build for
    openSUSE Leap 42.1 and Leap 42.2).
  * added some BuildRequires.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- renamed: armagetron_add.tar.gz -&gt; armagetron_add.tar.bz2</changelog>
  <changelog author="meissner@suse.com" date="1494072001">- armagetron-fix-build.patch: do not integer compare a pointer against an integer</changelog>
  <changelog author="wbauer@tmo.at" date="1523102400">- Update to version 0.2.8.3.4:
  * Two issues that surfaced when compiling with gcc 6 were fixed
- Drop armagetron-fix-build.patch, merged upstream</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1563969600">- Disable LTO to fix Factory build
- Enable PIE
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 0.2.8.3.5. No changelog.
- Drop fix-segv.patch. Merged upstream.</changelog>
</package>
<package pkgid="2d1d6f75fb827d6be9dfb24a7e3fc1f4c5aac96d1f2c9a25e3a809bd1c86e416" name="arp-scan" arch="src">
  <version epoch="0" ver="1.9.6" rel="lp151.3.3.1"/>
  <changelog author="bitshuffler #suse@irc.freenode.org" date="1237550400">- Initial RPM</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1299499200">- update to 1.8:
  * the IEEE OUI and IAB files were updated
  * support was added for trailer ARP replies
  * support for LLC/SNAP packets with the 802.1Q tag was added
  * full help output is no longer displayed for usage errors
  * the license was changed from GPL v2 to v3
  * a DoS warning was added to the manpage and help output
  * new arp fingerprints were added
  * gcc compiler security options were enabled
  * the Perl scripts were modified to work on systems where the perl executable
    is not in /usr/bin
  * various minor bugfixes and improvements were made</changelog>
  <changelog author="mpluskal@suse.com" date="1431000000">- Update to 1.9
- Cleanup spec file with spec-cleaner
- Update project url
- Use url for source</changelog>
  <changelog author="mpluskal@suse.com" date="1431000001">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1455451200">- Update project and download url</changelog>
  <changelog author="meissner@suse.com" date="1462968000">- arp-scan-avoid-crash.patch: avoid crash when trying capture as
  user (bsc#978596)</changelog>
  <changelog author="mpluskal@suse.com" date="1526904000">- Cleanup spec file with spec-cleaner
- Adjust dependencies</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551787200">- Update to version 1.9.5:
  * Updated IEEE OUI and IAB MAC/Vendor files.
  * Added new --plain (-x) option to surpress printing of header
    and footer text, and only display one output line for each
    responding host.
  * Use LWP::UserAgent instead of LWP::Simple in get-oui and
    get-iab to enable the raw content to be obtained, which avoids
    Unicode/UTF-8 issues.
  * Added arp-finherprint patterns for WIZnet W5100 and Cisco IOS
    15.0.
- Drop no longer needed arp-scan-avoid-crash.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1572004800">- Update to version 1.9.6 (boo#1154552):
  * Use libpcap function pcap_set_immediate_mode() instead of ioctl
    calls to ensure packets are delivered immediately. This means
    that arp-scan now requires libpcap 1.5.0 or later and will
    not work with earlier libpcap versions</changelog>
</package>
<package pkgid="1034bc679d3ef40399b01e8dda09f9152de006a243b4315d54d5720ad873d0f2" name="arp-scan" arch="x86_64">
  <version epoch="0" ver="1.9.6" rel="lp151.3.3.1"/>
  <changelog author="bitshuffler #suse@irc.freenode.org" date="1237550400">- Initial RPM</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1299499200">- update to 1.8:
  * the IEEE OUI and IAB files were updated
  * support was added for trailer ARP replies
  * support for LLC/SNAP packets with the 802.1Q tag was added
  * full help output is no longer displayed for usage errors
  * the license was changed from GPL v2 to v3
  * a DoS warning was added to the manpage and help output
  * new arp fingerprints were added
  * gcc compiler security options were enabled
  * the Perl scripts were modified to work on systems where the perl executable
    is not in /usr/bin
  * various minor bugfixes and improvements were made</changelog>
  <changelog author="mpluskal@suse.com" date="1431000000">- Update to 1.9
- Cleanup spec file with spec-cleaner
- Update project url
- Use url for source</changelog>
  <changelog author="mpluskal@suse.com" date="1431000001">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1455451200">- Update project and download url</changelog>
  <changelog author="meissner@suse.com" date="1462968000">- arp-scan-avoid-crash.patch: avoid crash when trying capture as
  user (bsc#978596)</changelog>
  <changelog author="mpluskal@suse.com" date="1526904000">- Cleanup spec file with spec-cleaner
- Adjust dependencies</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551787200">- Update to version 1.9.5:
  * Updated IEEE OUI and IAB MAC/Vendor files.
  * Added new --plain (-x) option to surpress printing of header
    and footer text, and only display one output line for each
    responding host.
  * Use LWP::UserAgent instead of LWP::Simple in get-oui and
    get-iab to enable the raw content to be obtained, which avoids
    Unicode/UTF-8 issues.
  * Added arp-finherprint patterns for WIZnet W5100 and Cisco IOS
    15.0.
- Drop no longer needed arp-scan-avoid-crash.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1572004800">- Update to version 1.9.6 (boo#1154552):
  * Use libpcap function pcap_set_immediate_mode() instead of ioctl
    calls to ensure packets are delivered immediately. This means
    that arp-scan now requires libpcap 1.5.0 or later and will
    not work with earlier libpcap versions</changelog>
</package>
<package pkgid="1bc4b4b2839f4f390fc9690433a4ece0ba13c3e32bb828d96d0b99db2f6919af" name="aspell-af" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="0e134e38f114a277b87071544b9520885ec1210733936980a0c397352f59685b" name="aspell-agal" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="1bb70b9ba100304ab092b92c8462e078f5bdc0f7240955998579e37661a1715d" name="aspell-am" arch="x86_64">
  <version epoch="0" ver="0.03.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="9eb4e378a08661491720512e482b198bc14a9801a955b6a13bd89e7eaa2fa21c" name="aspell-ar" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="6b588375c3bf2c3455cbbbee987972801e706d57de02511e9f9c852e765ad636" name="aspell-ast" arch="x86_64">
  <version epoch="0" ver="0.01" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="f713bfa6b871881bcf0e5d9d8162939fd1dedbf8f01cfe3a08309dbab5d3cbf4" name="aspell-az" arch="x86_64">
  <version epoch="0" ver="0.02" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="523359d6ff796b78e2530ad1e11642fb6dd2be31d044b46c46098145e9b0de62" name="aspell-be" arch="x86_64">
  <version epoch="0" ver="0.01" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="ca876a90cf8e2e758a1eb36f8e4199de3b7b3fe5902c24f2a1722dfe76689f80" name="aspell-bg" arch="x86_64">
  <version epoch="0" ver="4.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="bcc020cf53b28ba8615dded41d46419cfd4b9c1523bad2e3e0b8c34d9eb28f53" name="aspell-bn" arch="x86_64">
  <version epoch="0" ver="0.01.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="430a987cf6d21e08be742b410c1f1e54eb747d9b9e84db8da641f1b6b7de3024" name="aspell-br" arch="x86_64">
  <version epoch="0" ver="0.50.2" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="5d802ec7132f947fc66984e26ece46261a3f49f2ea73c64f42db3cc4adcb1c22" name="aspell-ca" arch="x86_64">
  <version epoch="0" ver="0.60.1.20090722" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="f5fca641a795562e84ba8f706e3089f5023855bc3069597e5324e4b0706ea30f" name="aspell-cs" arch="x86_64">
  <version epoch="0" ver="0.60.0.20040614" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="b7f1c49085f1bc7938fb3e0af6b2b56533851696cf42ced1cf568e15428228af" name="aspell-csb" arch="x86_64">
  <version epoch="0" ver="0.02.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="0cbfadeaaa4f7f7e143f57054ab3ebc7556be91b9543068e8e5ed426839e5e19" name="aspell-cy" arch="x86_64">
  <version epoch="0" ver="0.50.3" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="3fd86db37aa86ab251534ada8bb62dde84a4411ce70eb772649d220fae3e491b" name="aspell-da" arch="x86_64">
  <version epoch="0" ver="1.6.20" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="cd1049d6e79eeded8fa69353b87cd767a32f9791c283186d39eead75b0ce02b0" name="aspell-de" arch="x86_64">
  <version epoch="0" ver="20161207.7.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="5d48f040151beae21d50fbea6493aeb1df3e1dfa7d24de834f0b9712f658d1da" name="aspell-dictionaries" arch="src">
  <version epoch="0" ver="0.50.6" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.cz" date="1284379200">- fixed url in aspell-pl [bnc#638655]
- updated dictionary: pl 20100913</changelog>
  <changelog author="pgajdos@novell.com" date="1286798400">- fixed locale provides for aspell-et [bnc#645093]</changelog>
  <changelog author="pgajdos@suse.cz" date="1290427200">- updated aspell-pl to 20101122</changelog>
  <changelog author="meissner@suse.de" date="1305806400">- disabled aspell-no, as it is obsoleted by aspell-nb</changelog>
  <changelog author="pgajdos@novell.com" date="1306238400">- added Kannada dictionary, version 0.01-1</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1327492800">- Updated aspell-el to version 0.08.
- Spec file updates:
  * Changes based on spec-cleaner run.
  * Unified summaries and descriptions for all subpackages.
  * The version numbering for aspell-el was changed so an Obsoletes: entry was
    added for the old version.
  * Added a Conflict between aspell-hi and aspell-mr subpackages since they
    both provide u-deva.cmap and u-deva.cset files.
  * Fixed the following rpmlint warnings for some subpackages:
  - wrong-file-end-of-line-encoding
  - zero-length
  - install-file-in-docs</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1328184000">- Changed version of aspell-el to 0.50.3+0.08 to fix package upgrades. Removed
  the Obsoletes: entry which doesn't work.</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- fixed licenses [bnc#745038]</changelog>
  <changelog author="pgajdos@suse.com" date="1332936000">- fixed aspell-pt_BR summary and description [bnc#754392]</changelog>
  <changelog author="coolo@suse.com" date="1338811200">- fix encoding of -nds description</changelog>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="55ea583163612a2b980b0a9392bcd59f57e65cce0ea05ad0aea2a2e2d6331a82" name="aspell-el" arch="x86_64">
  <version epoch="0" ver="0.50.3+0.08" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="6e789a19319c476cda0b5c992a4f2e299cb0b0a7a5a5f3fe6c5b6171507a6aae" name="aspell-eo" arch="x86_64">
  <version epoch="0" ver="2.1.20000225" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="83d4d5fa69f93246d792cfd5753f7f256bb5de8a173bbd6e161a8f3a26324e57" name="aspell-es" arch="x86_64">
  <version epoch="0" ver="1.11.2" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="a958ddc8731beaf3c81b26aa8a7bb74ceb406e8f4c2718cc5337e146554778bf" name="aspell-et" arch="x86_64">
  <version epoch="0" ver="0.1.21" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="4f8282d27d6d644de0c313c74e35ed5a52d23e226c4d763db2f61f98bf9619c4" name="aspell-fa" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="fefb9128563a312913a59190fff5b746f7774a92e1b5cae9768e65bdb5cff6fa" name="aspell-fi" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="402db50d719406db3f4bad8a7726441fdec94455aaeee23ac8fc62a47d5fe89b" name="aspell-fo" arch="x86_64">
  <version epoch="0" ver="0.2.16" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="5870b9105c216916e3627029260c3c78f66407f611f5f789db5190b0380691c4" name="aspell-fr" arch="x86_64">
  <version epoch="0" ver="0.50.3" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="d6efb8f598065056339aa6c0510e709d8e7ed05eb1c4b1c8130a990fd1f74547" name="aspell-fy" arch="x86_64">
  <version epoch="0" ver="0.12" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="2c5e6832c31e4136a8a136a46010d7dd57bb0dd3dbf2f79622793db55b8e9878" name="aspell-ga" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="932f9dd28a170207993a286d9c5cd0f3e954534f180dcf8595cd6fc118127b7b" name="aspell-gd" arch="x86_64">
  <version epoch="0" ver="0.7.1.1.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="fe57a226fdefbe9a140e08e95c93a3b94a89622b72f294ea91b02973ba6dad0e" name="aspell-gl" arch="x86_64">
  <version epoch="0" ver="0.50a" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="776edbac81a338031fffa9b08a84513a824073aa3990cf88e8de4896808668c1" name="aspell-grc" arch="x86_64">
  <version epoch="0" ver="0.02.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="d70f0af200a41f2be561738fc65408922f9e7a1934fdf9e4447d37c79eea072a" name="aspell-gu" arch="x86_64">
  <version epoch="0" ver="0.03" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="8620c245c8ab610837ca0191b2d38c6a4b3e677d168d2d99b66f3bcdc688dd74" name="aspell-gv" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="637b48b733fb45292a4aac0e421c0be2bf890e4d3697d10cba5e5ba18c967726" name="aspell-he" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="aed277f68faf4d5188134cca8e40d442d66c21b604a3bf26e9d15db5b5b65319" name="aspell-hi" arch="x86_64">
  <version epoch="0" ver="0.02" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="d65d3ffcc6aa4562bc7cde978c83fc3cababcd4c6d5be9ec76881a72f6653dda" name="aspell-hil" arch="x86_64">
  <version epoch="0" ver="0.11" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="d45426e0f5095ceab44b5fce278f9eb1686bc8a205427a73511844132631ad00" name="aspell-hr" arch="x86_64">
  <version epoch="0" ver="0.51.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="61b9647440d2bcc6cb87798d1e415dcf3f783938a96d8a41443403593f14d94b" name="aspell-hsb" arch="x86_64">
  <version epoch="0" ver="0.02.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="247752a7827a5f60e0a5438f9cf4623d37ae54bcfebb958b34b5b1fdfa01875b" name="aspell-hu" arch="x86_64">
  <version epoch="0" ver="0.99.4.2" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="d0bef1beccf7f47aa78ce3651f4d5782c321587440caa61a87ff8f89e9506cfe" name="aspell-hus" arch="x86_64">
  <version epoch="0" ver="0.03.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="9681efd6f7f9933625bb99c24628c89b18cb8cb148c06009cb5894000dceeed0" name="aspell-hy" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="ff049b0a7ad37da571598d5f2a336edde07f8e7193c1c9efdb106152eee18872" name="aspell-ia" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="ce07a5e9c8b78a14053416b4c5a5290ce439dd5f64d9abc35046a05468b9e1cf" name="aspell-id" arch="x86_64">
  <version epoch="0" ver="1.2" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="f3e7330b58f3a8676f64dfaeb663318d7a972f60992aa91385cd35efa9b3f862" name="aspell-is" arch="x86_64">
  <version epoch="0" ver="0.51.10" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="2b67319a96163f973027c063f5e639460d113e95306f1dc3eb4b9caf3bd674e4" name="aspell-it" arch="x86_64">
  <version epoch="0" ver="2.2_20050523" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="72c64703e587482f6f9598dc57dd65088698aaba6adb414fb14536f4bde2ca8b" name="aspell-kn" arch="x86_64">
  <version epoch="0" ver="0.01.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="268dd37472a8f9e3dba830a3eba12200ff54c027fcd201f3439de4593da116e6" name="aspell-ku" arch="x86_64">
  <version epoch="0" ver="0.20.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="0fd007e2382f97ffe8110be29084395b191b20f9f9c514bf259a724fb99fe9f8" name="aspell-ky" arch="x86_64">
  <version epoch="0" ver="0.01.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="804a1473c2e75e86c8e16955ad626c9a4071b485713953b0552ffe4ef5359b94" name="aspell-la" arch="x86_64">
  <version epoch="0" ver="20020503" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="1c86e6f99b7c0f52bd839826aba8bde993af49bd683704acd2fc1245ea344afc" name="aspell-lt" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="2a5d5d1fa0de0d71ebaca6b5b58156c0f7c303af8dd9d49e3b462e4e662847ae" name="aspell-lv" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="1ddb8d31bd27c402b1ff324f56f4ba2df400c847510308fd82d864e9556d70ff" name="aspell-mg" arch="x86_64">
  <version epoch="0" ver="20040807" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="c1902fb29cde2d70a50e48170c0ff786e5ca748601a23978827ef0a70debc84e" name="aspell-mi" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="ee1b9225c85044a39a90dd9f3c1c71f65ebe85159d51fa87bc5aeab47a0ec8ad" name="aspell-mk" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="76b8f8b7a392c2313900a8f0b00491512cfd668cb2ae5bd01716a0b93173ced1" name="aspell-ml" arch="x86_64">
  <version epoch="0" ver="0.03" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="ad0c00031b7f2e83ddf7d9083f8cbf75dd3c4bd3caa11621528bcee9915a8e70" name="aspell-mn" arch="x86_64">
  <version epoch="0" ver="0.06.2" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="c042b8984e6b713fa4870df8bdd510ba9a8263db7d62f2c3b9328b48f58fb042" name="aspell-mr" arch="x86_64">
  <version epoch="0" ver="0.10" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="b735766d0e9cf52ec3b9d6fdea63441a8873259c68220e25cda78fdf56707985" name="aspell-ms" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="d4bffa9de062f61bc0c6037f131302a748b32ac77122eb0688761198303c3654" name="aspell-mt" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="15d6e23dafb65df548482ffc22e319ae89cfb416524e80c0409b9e1a60b8ae5c" name="aspell-nb" arch="x86_64">
  <version epoch="0" ver="0.50.10" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="507c654aa024f18a1eba42a2b246b994240aa60d271de9afb20de831a7a479cc" name="aspell-nds" arch="x86_64">
  <version epoch="0" ver="0.01" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="76a0d96973cac068238403dbf33a07e86a067f37725b6e3067ff2e43e49397c9" name="aspell-nl" arch="x86_64">
  <version epoch="0" ver="1.00.7" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="01a0231343611d1b1822859092481d82742dea07a6cd72eef5edd8dc08b5f6e9" name="aspell-nn" arch="x86_64">
  <version epoch="0" ver="0.50.11" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="d1f8011857fe11a4792b22ba5ad3d1f0a4ace9714739be191529cec3a8df9fe9" name="aspell-ny" arch="x86_64">
  <version epoch="0" ver="0.01" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="15ac0276e2d5a9f407d287fc605aaaea7dfbd1a7aa28e998e85518e0ae4a9032" name="aspell-or" arch="x86_64">
  <version epoch="0" ver="0.03" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="65115f8ebbd5a82fc392abe0d659032ecce214d10af863b7cf701ba622f0648e" name="aspell-pa" arch="x86_64">
  <version epoch="0" ver="0.01" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="5b9e5071eb4ea573e5f67cf02c85506e603603392fb00de49996f982a4d5e861" name="aspell-pl" arch="x86_64">
  <version epoch="0" ver="0.60.2015.04.28" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="c203ee6d623ae0144f56f02815f9aaff4ec4124f903bbab942b5dbbb57e80497" name="aspell-pt_BR" arch="x86_64">
  <version epoch="0" ver="20131030.12.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="d2c68d88b312f5ff23e421bf593b8696a4bbe8621b49e06247e95deb74081094" name="aspell-pt_PT" arch="x86_64">
  <version epoch="0" ver="20190329" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="b9e5627f94b6d13cf70541c87ac8871f044f0feb6792c23987d8180555246ad0" name="aspell-qu" arch="x86_64">
  <version epoch="0" ver="0.02" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="1ae31daa2c7c566cc32951460e67db86a6ca1274727649a13dfc2fdfd04196ad" name="aspell-ro" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="972f7e261a078dbb4dc9b9aa5d7c4fe535bd8536c9731e84042c090dc5945ceb" name="aspell-ru" arch="x86_64">
  <version epoch="0" ver="0.99.f7.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="556ade4ef32fc730349c3c77470e6c881f7e1a869a70be3bfa46d1bb45eead39" name="aspell-rw" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="2c6aa9a27740b171480a8244e719f9070992f12559d4f117f50dc5b32b1d587a" name="aspell-sc" arch="x86_64">
  <version epoch="0" ver="1.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="8d566932a5e7b027dfca3b137670131cacb595ee7e81f7a9393a36a8e9c4b580" name="aspell-sk" arch="x86_64">
  <version epoch="0" ver="2.01" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="0094ecc4137cabb07406deda4f343e2d3aefb928df9ef74cce167791305c66e8" name="aspell-sl" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="2617948768d9d9c76d2c67c56f256a0ce4d54618ed838507079aa6ba20e45da1" name="aspell-sr" arch="x86_64">
  <version epoch="0" ver="0.02" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="5ae6547f26fdb53688911f037db285cecfbcf5b66b208484a1cfcfe062920a56" name="aspell-sv" arch="x86_64">
  <version epoch="0" ver="0.51.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="366f3b6376d3626e767863b3c52d727e7c18ed30bee25ab66cec72d386e989c2" name="aspell-sw" arch="x86_64">
  <version epoch="0" ver="1.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="6cc85297c05d0e1d77928193170d79d4925361d814530333095b7c85fda3b301" name="aspell-ta" arch="x86_64">
  <version epoch="0" ver="20040424" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="a2829b04d4f7217b50891405894356e77fdc7ca5dc6a61c179863140b61ec635" name="aspell-te" arch="x86_64">
  <version epoch="0" ver="0.01.2" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="5e10d047ed67c56c226c059e4ec887694efd8ab7ad7c3d81956c18ca4a8b475c" name="aspell-tet" arch="x86_64">
  <version epoch="0" ver="0.1.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="957b1adb7fe335cbb395e34b4f8f85d731bec3533dc123a56ce02b49f73982c9" name="aspell-tk" arch="x86_64">
  <version epoch="0" ver="0.01" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="46edc9187698348ab7a560abe31a547309d254860146fa6bbb695f50db2c788d" name="aspell-tl" arch="x86_64">
  <version epoch="0" ver="0.02" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="3cdc4fe6d49b1789aa3a755feb49ce8dd9ec76288b3f61b9bdd5c375ada0bc93" name="aspell-tn" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="ee9efb75d0be1370436e7ebc9683a8c1e4672a26a563218ebb830742238947de" name="aspell-tr" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="6b5acca2d33c7917e2c0114501df868adf7d0e3772be26060719f09d58ee2d9d" name="aspell-uk" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="c8b12cdbb9ebd0ba40d99892ac453af8a99e766fa989621a1faa0fee821ecb4b" name="aspell-uz" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="d07ed8cd7182b2dfff6a30c640d27b685d0bbda8cb7a1ca547d259e777951f6f" name="aspell-vi" arch="x86_64">
  <version epoch="0" ver="0.01.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="7136ef206d84c7bdceb31bf5312a7ef9bdf6a6e7d383fd4204e6981cfae77bd2" name="aspell-wa" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="c92ab63780d99202cea96b918399a85313b1692efa69cb7a4acccd3c5e13f801" name="aspell-yi" arch="x86_64">
  <version epoch="0" ver="0.01.1" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="e94f86f973b8face56ffc92cc5986129740a9971868e3293d294546a036f72f1" name="aspell-zu" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="a2ffc30651cf92605952d6a7d41fab9c4358d1051a5d1ec494d3759607159e75" name="aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="cacc18bf30f0cd03f2de36615246aa0bbb5ff2d8b95206e9f6b467f12a29fea7" name="aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp151.6.7.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823, CVE-2019-1010222, bsc#1142433,
  CVE-2019-1010223, bsc#1142436):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
  <changelog author="tiwai@suse.de" date="1563883200">- Fix security issue leading to buffer overflow (CVE-2019-1010224,
  bsc#1142435):
  CVE-2019-1010224-onset-safer-deletion-method.patch</changelog>
</package>
<package pkgid="8510753c2156ca13df1180018b7e0b3be22558a4cc6c854f10451aae97263277" name="aubio-tools" arch="i586">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="8d7e263ff31b46d649eff48637a26948d6e7a8e17ee107c69a768db7d9dfea08" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="bc2137f160ab8d0234388abaa0132588ff28c8ab4a63b7b6a7aabf0c13a0bc12" name="aubio-tools" arch="i586">
  <version epoch="0" ver="0.4.6" rel="lp151.6.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823, CVE-2019-1010222, bsc#1142433,
  CVE-2019-1010223, bsc#1142436):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
  <changelog author="tiwai@suse.de" date="1563883200">- Fix security issue leading to buffer overflow (CVE-2019-1010224,
  bsc#1142435):
  CVE-2019-1010224-onset-safer-deletion-method.patch</changelog>
</package>
<package pkgid="e4abf33e51120df7df7cabe7b323d460d93feefc7527ef36a503b789a0910e2f" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp151.6.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823, CVE-2019-1010222, bsc#1142433,
  CVE-2019-1010223, bsc#1142436):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
  <changelog author="tiwai@suse.de" date="1563883200">- Fix security issue leading to buffer overflow (CVE-2019-1010224,
  bsc#1142435):
  CVE-2019-1010224-onset-safer-deletion-method.patch</changelog>
</package>
<package pkgid="21746f7f9cbe406e257a087c968d5f8a517facc98ce362ab0911aa043ad40ac3" name="audacity" arch="src">
  <version epoch="0" ver="2.2.2" rel="lp151.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
  <changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
  <changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
  <changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
  <changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Remove conditionals for ffmpeg, lame, mad, twolame.</changelog>
  <changelog author="davejplater@gmail.com" date="1503662401">- Restore conditionals for lame, mad and twolame.</changelog>
  <changelog author="aloisio@gmx.com" date="1509883200">- Update to version 2.2.0
  Improvements:
  * Four Selectable themes provided, with new 'Light' theme as
    default, plus option to customize
  * Many menu changes:
    + Menus Reorganized
    + Extended menu bar provided
    + New keyboard commands for working with clips
  * Help buttons ? in Preferences, Effects, Generators and
    Analyzers - and other places
  * Non-Greying out of effects when no selection (and explanatory
    dialog with help button)
  * Playback of MIDI (and Allegro) files imported into Note Tracks
    is now available.
  * 'Center' option in Selection Toolbar
  * Stem plots
  * Major overhaul to documentation/manual including many new
    images and streamlined text on landing pages for in-program
    help.
  Other Changes:
  * Append-record is now the default (use Shift + Record for old
    behavior, to record on a new track)
  * The Esc key now cancels all click-and-drag actions. It also
    chooses among overlapping mouse click targets, which is
    especially useful in the Multi-Tool.
  * Sync-Lock button removed (use menu item or keyboard shortcut
    instead)
  * New preferences and preference pages
  * Overhaul of much code:
    + Overhaul of envelope handling code to deal with some
    anomalies
    + Overhaul of exception handling for greater safety
  * New Logo
  Bug Fixes:
  * Major work on bug fixing. 198 bugs that were in 2.1.3 fixed
    for 2.2.0.
    + The most serious bug fixed this time round was bug 437 which
    was about what happens when Audacity is recording and runs
    out of storage.
    + The problems of incomplete support for macOs Sierra have
    been resolved (including bug 290, bug 1567, bug 1702, and bug
    1703).
    + Most of the bugs fixed were more minor, such as bug 463
    which was about a case in which the numbering on the timeline
    could display incorrect times.
- Added audacity-no_return_in_nonvoid.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1509883201">- Enabled mad, twolame and lame for 42.3</changelog>
  <changelog author="davejplater@gmail.com" date="1516017600">- Update to maintenance release version 2.2.1
- Upstream changes and fixes:
  * Waveform colorways:
  You can optionally change the colorway of the waveforms
  displayed in your project. The setting is per track and not per
  project so you can have multiple colorways in the same project.
  * "Save Other" reverts to "Export" in the File menu:
  When we made the menu changes for 2.2.0 we introduced an entry
  into the File menu called "Save Other" which led to a sub-menu
  for exporting various audio formats.
  Many users were confused by this change and found it hard to
  find where they could export.
  * Bug #1770 - Crash applying certain chain files
  * Bug #1783 - Preview fails when selection extends before zero
  * Bug #1787 - Auto-scroll stopped working in 2.2.0
  * Bug #1765 - Using File &gt; Open to import audio gives wrong zoom
  level and no scroll bar slider.</changelog>
  <changelog author="jengelh@inai.de" date="1516017601">- Trim redundant parts from summary.</changelog>
  <changelog author="davejplater@gmail.com" date="1516968000">- Build with gcc7 for Leap:42.3 and -fstack-clash-protection</changelog>
  <changelog author="davejplater@gmail.com" date="1519300800">- Update to release version 2.2.2.
- Rebase audacity-no_buildstamp.patch.
- Removed incorporated audacity-fix-nonsense.patch.
- Added audacity-misc-errors.patch to fix various errors picked
  up by rpmlint.
- Added to audacity-no_return_in_nonvoid.patch.
- Upstream changes:
  * Easier zooming in and out with mousewheel, new Zoom Toggle
  command, and context menu for vertical rulers.
  * Easy access to change keyboard bindings of menu commands
  by holding Shift key.
  * Detection of dropout errors while recording with
  overburdened CPU.
  * Improved contrasts in Light and Dark themes
  * Half-wave display option
  * Several bugs/annoyances in 2.2.1 are now fixed</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1607083200">- Created audacity-CVE-2020-11867.patch to prevent other users
  reading sensitive data. boo#1179449</changelog>
</package>
<package pkgid="a6ba4573d3a667829fcd8493982c207f3a9d9bc798ce201635c7cf16e0015343" name="audacity" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="lp151.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
  <changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
  <changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
  <changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
  <changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Remove conditionals for ffmpeg, lame, mad, twolame.</changelog>
  <changelog author="davejplater@gmail.com" date="1503662401">- Restore conditionals for lame, mad and twolame.</changelog>
  <changelog author="aloisio@gmx.com" date="1509883200">- Update to version 2.2.0
  Improvements:
  * Four Selectable themes provided, with new 'Light' theme as
    default, plus option to customize
  * Many menu changes:
    + Menus Reorganized
    + Extended menu bar provided
    + New keyboard commands for working with clips
  * Help buttons ? in Preferences, Effects, Generators and
    Analyzers - and other places
  * Non-Greying out of effects when no selection (and explanatory
    dialog with help button)
  * Playback of MIDI (and Allegro) files imported into Note Tracks
    is now available.
  * 'Center' option in Selection Toolbar
  * Stem plots
  * Major overhaul to documentation/manual including many new
    images and streamlined text on landing pages for in-program
    help.
  Other Changes:
  * Append-record is now the default (use Shift + Record for old
    behavior, to record on a new track)
  * The Esc key now cancels all click-and-drag actions. It also
    chooses among overlapping mouse click targets, which is
    especially useful in the Multi-Tool.
  * Sync-Lock button removed (use menu item or keyboard shortcut
    instead)
  * New preferences and preference pages
  * Overhaul of much code:
    + Overhaul of envelope handling code to deal with some
    anomalies
    + Overhaul of exception handling for greater safety
  * New Logo
  Bug Fixes:
  * Major work on bug fixing. 198 bugs that were in 2.1.3 fixed
    for 2.2.0.
    + The most serious bug fixed this time round was bug 437 which
    was about what happens when Audacity is recording and runs
    out of storage.
    + The problems of incomplete support for macOs Sierra have
    been resolved (including bug 290, bug 1567, bug 1702, and bug
    1703).
    + Most of the bugs fixed were more minor, such as bug 463
    which was about a case in which the numbering on the timeline
    could display incorrect times.
- Added audacity-no_return_in_nonvoid.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1509883201">- Enabled mad, twolame and lame for 42.3</changelog>
  <changelog author="davejplater@gmail.com" date="1516017600">- Update to maintenance release version 2.2.1
- Upstream changes and fixes:
  * Waveform colorways:
  You can optionally change the colorway of the waveforms
  displayed in your project. The setting is per track and not per
  project so you can have multiple colorways in the same project.
  * "Save Other" reverts to "Export" in the File menu:
  When we made the menu changes for 2.2.0 we introduced an entry
  into the File menu called "Save Other" which led to a sub-menu
  for exporting various audio formats.
  Many users were confused by this change and found it hard to
  find where they could export.
  * Bug #1770 - Crash applying certain chain files
  * Bug #1783 - Preview fails when selection extends before zero
  * Bug #1787 - Auto-scroll stopped working in 2.2.0
  * Bug #1765 - Using File &gt; Open to import audio gives wrong zoom
  level and no scroll bar slider.</changelog>
  <changelog author="jengelh@inai.de" date="1516017601">- Trim redundant parts from summary.</changelog>
  <changelog author="davejplater@gmail.com" date="1516968000">- Build with gcc7 for Leap:42.3 and -fstack-clash-protection</changelog>
  <changelog author="davejplater@gmail.com" date="1519300800">- Update to release version 2.2.2.
- Rebase audacity-no_buildstamp.patch.
- Removed incorporated audacity-fix-nonsense.patch.
- Added audacity-misc-errors.patch to fix various errors picked
  up by rpmlint.
- Added to audacity-no_return_in_nonvoid.patch.
- Upstream changes:
  * Easier zooming in and out with mousewheel, new Zoom Toggle
  command, and context menu for vertical rulers.
  * Easy access to change keyboard bindings of menu commands
  by holding Shift key.
  * Detection of dropout errors while recording with
  overburdened CPU.
  * Improved contrasts in Light and Dark themes
  * Half-wave display option
  * Several bugs/annoyances in 2.2.1 are now fixed</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1607083200">- Created audacity-CVE-2020-11867.patch to prevent other users
  reading sensitive data. boo#1179449</changelog>
</package>
<package pkgid="eb4cde333a392025b825f50a63efcdff6bb6484deef916c6f71274aac9897210" name="audacity-lang" arch="noarch">
  <version epoch="0" ver="2.2.2" rel="lp151.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
  <changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
  <changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
  <changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
  <changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Remove conditionals for ffmpeg, lame, mad, twolame.</changelog>
  <changelog author="davejplater@gmail.com" date="1503662401">- Restore conditionals for lame, mad and twolame.</changelog>
  <changelog author="aloisio@gmx.com" date="1509883200">- Update to version 2.2.0
  Improvements:
  * Four Selectable themes provided, with new 'Light' theme as
    default, plus option to customize
  * Many menu changes:
    + Menus Reorganized
    + Extended menu bar provided
    + New keyboard commands for working with clips
  * Help buttons ? in Preferences, Effects, Generators and
    Analyzers - and other places
  * Non-Greying out of effects when no selection (and explanatory
    dialog with help button)
  * Playback of MIDI (and Allegro) files imported into Note Tracks
    is now available.
  * 'Center' option in Selection Toolbar
  * Stem plots
  * Major overhaul to documentation/manual including many new
    images and streamlined text on landing pages for in-program
    help.
  Other Changes:
  * Append-record is now the default (use Shift + Record for old
    behavior, to record on a new track)
  * The Esc key now cancels all click-and-drag actions. It also
    chooses among overlapping mouse click targets, which is
    especially useful in the Multi-Tool.
  * Sync-Lock button removed (use menu item or keyboard shortcut
    instead)
  * New preferences and preference pages
  * Overhaul of much code:
    + Overhaul of envelope handling code to deal with some
    anomalies
    + Overhaul of exception handling for greater safety
  * New Logo
  Bug Fixes:
  * Major work on bug fixing. 198 bugs that were in 2.1.3 fixed
    for 2.2.0.
    + The most serious bug fixed this time round was bug 437 which
    was about what happens when Audacity is recording and runs
    out of storage.
    + The problems of incomplete support for macOs Sierra have
    been resolved (including bug 290, bug 1567, bug 1702, and bug
    1703).
    + Most of the bugs fixed were more minor, such as bug 463
    which was about a case in which the numbering on the timeline
    could display incorrect times.
- Added audacity-no_return_in_nonvoid.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1509883201">- Enabled mad, twolame and lame for 42.3</changelog>
  <changelog author="davejplater@gmail.com" date="1516017600">- Update to maintenance release version 2.2.1
- Upstream changes and fixes:
  * Waveform colorways:
  You can optionally change the colorway of the waveforms
  displayed in your project. The setting is per track and not per
  project so you can have multiple colorways in the same project.
  * "Save Other" reverts to "Export" in the File menu:
  When we made the menu changes for 2.2.0 we introduced an entry
  into the File menu called "Save Other" which led to a sub-menu
  for exporting various audio formats.
  Many users were confused by this change and found it hard to
  find where they could export.
  * Bug #1770 - Crash applying certain chain files
  * Bug #1783 - Preview fails when selection extends before zero
  * Bug #1787 - Auto-scroll stopped working in 2.2.0
  * Bug #1765 - Using File &gt; Open to import audio gives wrong zoom
  level and no scroll bar slider.</changelog>
  <changelog author="jengelh@inai.de" date="1516017601">- Trim redundant parts from summary.</changelog>
  <changelog author="davejplater@gmail.com" date="1516968000">- Build with gcc7 for Leap:42.3 and -fstack-clash-protection</changelog>
  <changelog author="davejplater@gmail.com" date="1519300800">- Update to release version 2.2.2.
- Rebase audacity-no_buildstamp.patch.
- Removed incorporated audacity-fix-nonsense.patch.
- Added audacity-misc-errors.patch to fix various errors picked
  up by rpmlint.
- Added to audacity-no_return_in_nonvoid.patch.
- Upstream changes:
  * Easier zooming in and out with mousewheel, new Zoom Toggle
  command, and context menu for vertical rulers.
  * Easy access to change keyboard bindings of menu commands
  by holding Shift key.
  * Detection of dropout errors while recording with
  overburdened CPU.
  * Improved contrasts in Light and Dark themes
  * Half-wave display option
  * Several bugs/annoyances in 2.2.1 are now fixed</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1607083200">- Created audacity-CVE-2020-11867.patch to prevent other users
  reading sensitive data. boo#1179449</changelog>
</package>
<package pkgid="dea39d52633b0902aaf8151016f4402ff05211fd29d7c59e3afaa4170e7f524e" name="audit" arch="i586">
  <version epoch="0" ver="2.8.1" rel="lp151.5.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1591272000">- Fix hang on startup (bsc#1156159)
  * audit-Fix-hang-on-startup.patch</changelog>
</package>
<package pkgid="bf849eecb88ad45c5ca80af202d6b2352727edfe6bf91fa0d830dfa2f8b93d09" name="audit" arch="src">
  <version epoch="0" ver="2.8.1" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1363953600">- remove sysvinit scripts.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212800">- Version 2.2.3
- Code cleanups
- In spec file, don't own lib64/audit
- Update man pages
- Aureport no longer reads auditd.conf when stdin is used
- Don't let systemd kill auditd if auditctl errors out
- Update syscall table for 3.7 and 3.8 kernels
- Add interpretation for setns and unshare syscalls
- Code cleanup (Tyler Hicks)
- Documentation cleanups (Laurent Bigonville)
- Add dirfd interpretation to the *at functions
- Add termination signal to clone flags interpretation
- Update stig.rules
- In auditctl, when listing rules don't print numeric value of dir fields
- Add support for rng resource type in auvirt
- Fix aulast bad login output (#922508)
- In ausearch, allow negative numbers for session and auid searches
- In audisp-remote, if disk_full_action is stop then stop sending (#908977)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212801">- --with-libcap-ng=yes has no effect if libcap-ng is not
  buildrequired and the lack of those requires causes a broken
  configure script after autoreconf add pkgconfig(libcap-ng)
  to both audit and audit-secondary, cap-ng is actually only
  use in the latter.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- audit-no_m4_dir.patch: Removed AC_CONFIG_MACRO_DIR([m4]) from
  configure.ac to fix build with new automake</changelog>
  <changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec</changelog>
  <changelog author="coolo@suse.com" date="1372420800">- remove libcap-ng too from audit.spec as it's only needed for plugins
  (and libcap-ng itself needs python to build bindings)</changelog>
  <changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2
  Changelog 2.3.2
  - Put RefuseManualStop in the right systemd section (#969345)
  - Add legacy restart scripts for systemd support
  - Add more syscall argument interpretations
  - Add 'unset' keyword for uid &amp; gid values in auditctl
  - In ausearch, parse obj in IPC records
  - In ausearch, parse subj in DAEMON_ROTATE records
  - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
  - In auditd, restart dispatcher on SIGHUP if it had previously exited
  - In audispd, exit when no active plugins are detected on reconfigure
  - In audispd, clear signal mask set by libev so that SIGHUP works again
  - In audispd, track binary plugins and restart if binary was updated
  - In audispd, make sure we send signals to the correct process
  - In auditd, clear signal mask when spawning any child process
  - In audispd, make builtin plugins respond to SIGHUP
  - In auparse, interpret mode flags of open syscall if O_CREAT is passed
  - In audisp-remote, don't make address lookup always a permanent failure
  - In audisp-remote, remove EOE events more efficiently
  - In auditd, log the reason when email account is not valid
  - In audisp-remote, change default remote_ending action to reconnect
  - Add support for Aarch64 processors
  Changelog 2.3.1
  - Rearrange auditd setting enabled and pid to avoid a race (#910568)
  - Interpret the ocomm field from OBJ_PID records
  - Fix missing 'then' statement in sysvinit script
  - Switch ausearch to use libauparse for interpretting fields
  - In libauparse, interpret prctl arg0, sched_setscheduler arg1
  - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
  - In libauparse, interpret send* flags argument
  - In libauparse, interpret level and name options for set/getsockopt
  - In ausearch/report, don't flush events until last file (Burn Alting)
  - Don't use systemctl to stop the audit daemon
  Changelog 2.3
  - The clone(2) man page is really clone(3), fix interpretation of clone syscall
  - Add systemd support for reload (#901533)
  - Allow -F msgtype on the user filter
  - Add legacy support for resuming logging under systemd (#830780)
  - Add legacy support for rotating logs under systemd (#916611)
  - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
  - Updated man pages
  - Update libev to 4.15
  - Update syscall tables for 3.9 kernel
  - Interpret MQ_OPEN events
  - Add augenrules support (Burn Alting)
  - Consume less stack sending audit events</changelog>
  <changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3
  Changelog 2.3.3
  - Documentation updates
  - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes
  - Update interpreting scheduler policy names
  - Update automake files to automake-1.13.4
  - Remove CAP_COMPROMISE_KERNEL interpretation
  - Parse name field in AVC's (#1049916)
  - Add missing typedef for auparse_type_t enumeration (#1053424)
  - Fix parsing encoded filenames in records
  - Parse SECCOMP events</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6
  Changelog 2.3.6
  - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing
  - Improve ARM and AARCH64 support (AKASHI Takahiro)
  - Add ausearch --checkpoint feature (Burn Alting)
  - Add --arch option to ausearch
  - Improve too long config line in audispd, auditd, and auparse (#1071580)
  - Fix aulast to accept the new AUDIT_LOGIN record format
  - Remove clear_config symbol in auparse
  Changelog 2.3.5
  - In CRYPTO_KEY_USER events, do not interpret the 'fp' field
  - Change formatting of rules listing in auditctl to look like audit.rules
  - Change auditctl to do all netlink comm and then print rules
  - Add a debug option to ausearch to find skipped events
  - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format)
  - In auditd, when shifting logs, ignore the num_logs setting (#950158)
  - Allow passing a directory as the input file for ausearch/report (LC Bruzenak)
  - Interpret syscall fields in SECCOMP events
  - Increase a couple buffers to handle longer input
  Changelog 2.3.4
  - Parse path in CONFIG_CHANGE events
  - In audisp-remote, fix retry logic for temporary network failures
  - In auparse, add get_type_name function
  - Add --no-config command option to aureport
  - Fix interpretting MCS seliunx contexts in ausearch (#970675)
  - In auparse, classify selinux contexts as MAC_LABEL field type
  - In ausearch/report parse vm-ctx and img-ctx as selinux labels
  - Update translation tables for the 3.14 kernel</changelog>
  <changelog author="tonyj@suse.com" date="1409659200">- Add support for ppc64le (bnc#891861)
  New patch: audit-add-ppc64le-mach-support.patch</changelog>
  <changelog author="tonyj@suse.com" date="1409659201">- Update to version 2.4
  Changelog 2.4
  - Optionally parse loginuids, (e)uids, &amp; (e)gids in ausearch/report
  - In auvirt, anomaly events don't have uuid (#1111448)
  - Fix category handling in various records (#1120286)
  - Fix ausearch handling of session id on 32 bit systems
  - Set systemd startup to wait until systemd-tmpfiles-setup.service (#1097314)
  - Interpret a0 of socketcall and ipccall syscalls
  - Add pkgconfig file for libaudit
  - Add go language bindings for limited use of libaudit
  - Fix ausearch handling of exit code on 32 bit systems
  - Fix bug in aureport string linked list handling
  - Document week-ago time setting in ausearch/report man page
  - Update tables for 3.16 kernel
  - In aulast, on bad logins only record user_login proof and use it
  - Add libaudit API for kernel features
  - If audit=0 on kernel cmnd line, skip systemd activation (Cristian Rodríguez)
  - Add checkpoint --start option to ausearch (Burn Alting)
  - Fix arch matching in ausearch
  - Add --loginuid-immutable option to auditctl
  - Fix memory leak in auditd when log_format is set to NOLOG
  - Update auditctl to display features in the status command
  - Add ausearch_add_timestamp_item_ex() to auparse
  Changelog 2.3.7
  - Limit number of options in a rule in libaudit
  - Auditctl cannot load rule with lots of syscalls (#1089713)
  - In ausearch, fix checkpointing when inode is reused by new log (Burn Alting)
  - Add PROCTITLE and FEATURE_CHANGE event types</changelog>
  <changelog author="mq@suse.cz" date="1416830400">- Update to version 2.4.1
  Changelog 2.4.1
  - Make python3 support easier
  - Add support for ppc64le (Tony Jones)
  - Add some translations for a1 of ioctl system calls
  - Add command &amp; virtualization reports to aureport
  - Update aureport config report for new events
  - Add account modification summary report to aureport
  - Add GRP_MGMT and GRP_CHAUTHTOK event types
  - Correct aureport account change reports
  - Add integrity event report to aureport
  - Add config change summary report to aureport
  - Adjust some syslogging level settings in audispd
  - Improve parsing performance in everything
  - When ausearch outputs a line, use the previously parsed values (Burn Alting)
  - Improve searching and interpreting groups in events
  - Fully interpret the proctitle field in auparse
  - Correct libaudit and auditctl support for kernel features
  - Add support for backlog_time_wait setting via auditctl
  - Update syscall tables for the 3.18 kernel
  - Ignore DNS failure for email validation in auditd (#1138674)
  - Allow rotate as action for space_left and disk_full in auditd.conf
  - Correct login summary report of aureport
  - Auditctl syscalls can be comma separated list now
  - Update rules for new subsystems and capabilities
- Drop patch audit-add-ppc64le-mach-support.patch (already upstream)</changelog>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4 (bsc#941922, CVE-2015-5186)
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
- Require pkgconfig for build
  Changelog 2.4.4
  - Fix linked list correctness in ausearch/report
  - Add more cross compile fixups (Clayton Shotwell)
  - Update auparse python bindings
  - Update libev to 4.20
  - Fix CVE-2015-5186 Audit: log terminal emulator escape sequences handling
  Changelog 2.4.3
  - Add python3 support for libaudit
  - Cleanup automake warnings
  - Add AuParser_search_add_timestamp_item_ex to python bindings
  - Add AuParser_get_type_name to python bindings
  - Correct processing of obj_gid in auditctl (Aleksander Zdyb)
  - Make plugin config file parsing more robust for long lines (#1235457)
  - Make auditctl status print lost field as unsigned number
  - Add interpretation mode for auditctl -s
  - Add python3 support to auparse library
  - Make --enable-zos-remote a build time configuration option (Clayton Shotwell)
  - Updates for cross compiling (Clayton Shotwell)
  - Add MAC_CHECK audit event type
  - Add libauparse pkgconfig file (Aleksander Zdyb)
  Changelog 2.4.2
  - Ausearch should parse exe field in SECCOMP events
  - Improve output for short mode interpretations in auparse
  - Add CRYPTO_IKE_SA and CRYPTO_IPSEC_SA events
  - If auditctl is reading rules from a file, send messages to syslog (#1144252)
  - Correct lookup of ppc64le when determining machine type
  - Increase time buffer for wide character numbers in ausearch/report (#1200314)
  - In aureport, add USER_TTY events to tty report
  - In audispd, limit reporting of queue full messages (#1203810)
  - In auditctl, don't segfault when invalid options passed (#1206516)
  - In autrace, remove some older unimplemented syscalls for aarch64 (#1185892)
  - In auditctl, correct lookup of aarch64 in arch field (#1186313)
  - Update lookup tables for 4.1 kernel</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
</package>
<package pkgid="f21264567b47dc7737d0dd4acbcf764a63f4ef6ade464dde79e9192083beef74" name="audit" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="lp151.5.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1591272000">- Fix hang on startup (bsc#1156159)
  * audit-Fix-hang-on-startup.patch</changelog>
</package>
<package pkgid="fec64e9a07cdb5fbe6492cba3aa8c1813352a932cf80398fb1aeca6c3b2aee36" name="audit-audispd-plugins" arch="i586">
  <version epoch="0" ver="2.8.1" rel="lp151.5.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1591272000">- Fix hang on startup (bsc#1156159)
  * audit-Fix-hang-on-startup.patch</changelog>
</package>
<package pkgid="a5804d86ec0b3783e9047bd7123da9acee9177ddffc0f5c877f3bc8564d822c5" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="lp151.5.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1591272000">- Fix hang on startup (bsc#1156159)
  * audit-Fix-hang-on-startup.patch</changelog>
</package>
<package pkgid="5132d986d406dcf89458b8694ea92f2a399ab95762580d4bd58a1a847baec8ad" name="audit-devel" arch="i586">
  <version epoch="0" ver="2.8.1" rel="lp151.5.3.1"/>
  <changelog author="tonyj@suse.com" date="1409659200">- Update to version 2.4
  Changelog 2.4
  - Optionally parse loginuids, (e)uids, &amp; (e)gids in ausearch/report
  - In auvirt, anomaly events don't have uuid (#1111448)
  - Fix category handling in various records (#1120286)
  - Fix ausearch handling of session id on 32 bit systems
  - Set systemd startup to wait until systemd-tmpfiles-setup.service (#1097314)
  - Interpret a0 of socketcall and ipccall syscalls
  - Add pkgconfig file for libaudit
  - Add go language bindings for limited use of libaudit
  - Fix ausearch handling of exit code on 32 bit systems
  - Fix bug in aureport string linked list handling
  - Document week-ago time setting in ausearch/report man page
  - Update tables for 3.16 kernel
  - In aulast, on bad logins only record user_login proof and use it
  - Add libaudit API for kernel features
  - If audit=0 on kernel cmnd line, skip systemd activation (Cristian Rodríguez)
  - Add checkpoint --start option to ausearch (Burn Alting)
  - Fix arch matching in ausearch
  - Add --loginuid-immutable option to auditctl
  - Fix memory leak in auditd when log_format is set to NOLOG
  - Update auditctl to display features in the status command
  - Add ausearch_add_timestamp_item_ex() to auparse
  Changelog 2.3.7
  - Limit number of options in a rule in libaudit
  - Auditctl cannot load rule with lots of syscalls (#1089713)
  - In ausearch, fix checkpointing when inode is reused by new log (Burn Alting)
  - Add PROCTITLE and FEATURE_CHANGE event types</changelog>
  <changelog author="mq@suse.cz" date="1416830400">- Update to version 2.4.1
  Changelog 2.4.1
  - Make python3 support easier
  - Add support for ppc64le (Tony Jones)
  - Add some translations for a1 of ioctl system calls
  - Add command &amp; virtualization reports to aureport
  - Update aureport config report for new events
  - Add account modification summary report to aureport
  - Add GRP_MGMT and GRP_CHAUTHTOK event types
  - Correct aureport account change reports
  - Add integrity event report to aureport
  - Add config change summary report to aureport
  - Adjust some syslogging level settings in audispd
  - Improve parsing performance in everything
  - When ausearch outputs a line, use the previously parsed values (Burn Alting)
  - Improve searching and interpreting groups in events
  - Fully interpret the proctitle field in auparse
  - Correct libaudit and auditctl support for kernel features
  - Add support for backlog_time_wait setting via auditctl
  - Update syscall tables for the 3.18 kernel
  - Ignore DNS failure for email validation in auditd (#1138674)
  - Allow rotate as action for space_left and disk_full in auditd.conf
  - Correct login summary report of aureport
  - Auditctl syscalls can be comma separated list now
  - Update rules for new subsystems and capabilities
- Drop patch audit-add-ppc64le-mach-support.patch (already upstream)</changelog>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4 (bsc#941922, CVE-2015-5186)
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
- Require pkgconfig for build
  Changelog 2.4.4
  - Fix linked list correctness in ausearch/report
  - Add more cross compile fixups (Clayton Shotwell)
  - Update auparse python bindings
  - Update libev to 4.20
  - Fix CVE-2015-5186 Audit: log terminal emulator escape sequences handling
  Changelog 2.4.3
  - Add python3 support for libaudit
  - Cleanup automake warnings
  - Add AuParser_search_add_timestamp_item_ex to python bindings
  - Add AuParser_get_type_name to python bindings
  - Correct processing of obj_gid in auditctl (Aleksander Zdyb)
  - Make plugin config file parsing more robust for long lines (#1235457)
  - Make auditctl status print lost field as unsigned number
  - Add interpretation mode for auditctl -s
  - Add python3 support to auparse library
  - Make --enable-zos-remote a build time configuration option (Clayton Shotwell)
  - Updates for cross compiling (Clayton Shotwell)
  - Add MAC_CHECK audit event type
  - Add libauparse pkgconfig file (Aleksander Zdyb)
  Changelog 2.4.2
  - Ausearch should parse exe field in SECCOMP events
  - Improve output for short mode interpretations in auparse
  - Add CRYPTO_IKE_SA and CRYPTO_IPSEC_SA events
  - If auditctl is reading rules from a file, send messages to syslog (#1144252)
  - Correct lookup of ppc64le when determining machine type
  - Increase time buffer for wide character numbers in ausearch/report (#1200314)
  - In aureport, add USER_TTY events to tty report
  - In audispd, limit reporting of queue full messages (#1203810)
  - In auditctl, don't segfault when invalid options passed (#1206516)
  - In autrace, remove some older unimplemented syscalls for aarch64 (#1185892)
  - In auditctl, correct lookup of aarch64 in arch field (#1186313)
  - Update lookup tables for 4.1 kernel</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
</package>
<package pkgid="0a61d2bf08f76007310dbc6898d9bc7e76e83fcb08ed19b545b761e1cf8787ec" name="audit-devel" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="lp151.5.3.1"/>
  <changelog author="tonyj@suse.com" date="1409659200">- Update to version 2.4
  Changelog 2.4
  - Optionally parse loginuids, (e)uids, &amp; (e)gids in ausearch/report
  - In auvirt, anomaly events don't have uuid (#1111448)
  - Fix category handling in various records (#1120286)
  - Fix ausearch handling of session id on 32 bit systems
  - Set systemd startup to wait until systemd-tmpfiles-setup.service (#1097314)
  - Interpret a0 of socketcall and ipccall syscalls
  - Add pkgconfig file for libaudit
  - Add go language bindings for limited use of libaudit
  - Fix ausearch handling of exit code on 32 bit systems
  - Fix bug in aureport string linked list handling
  - Document week-ago time setting in ausearch/report man page
  - Update tables for 3.16 kernel
  - In aulast, on bad logins only record user_login proof and use it
  - Add libaudit API for kernel features
  - If audit=0 on kernel cmnd line, skip systemd activation (Cristian Rodríguez)
  - Add checkpoint --start option to ausearch (Burn Alting)
  - Fix arch matching in ausearch
  - Add --loginuid-immutable option to auditctl
  - Fix memory leak in auditd when log_format is set to NOLOG
  - Update auditctl to display features in the status command
  - Add ausearch_add_timestamp_item_ex() to auparse
  Changelog 2.3.7
  - Limit number of options in a rule in libaudit
  - Auditctl cannot load rule with lots of syscalls (#1089713)
  - In ausearch, fix checkpointing when inode is reused by new log (Burn Alting)
  - Add PROCTITLE and FEATURE_CHANGE event types</changelog>
  <changelog author="mq@suse.cz" date="1416830400">- Update to version 2.4.1
  Changelog 2.4.1
  - Make python3 support easier
  - Add support for ppc64le (Tony Jones)
  - Add some translations for a1 of ioctl system calls
  - Add command &amp; virtualization reports to aureport
  - Update aureport config report for new events
  - Add account modification summary report to aureport
  - Add GRP_MGMT and GRP_CHAUTHTOK event types
  - Correct aureport account change reports
  - Add integrity event report to aureport
  - Add config change summary report to aureport
  - Adjust some syslogging level settings in audispd
  - Improve parsing performance in everything
  - When ausearch outputs a line, use the previously parsed values (Burn Alting)
  - Improve searching and interpreting groups in events
  - Fully interpret the proctitle field in auparse
  - Correct libaudit and auditctl support for kernel features
  - Add support for backlog_time_wait setting via auditctl
  - Update syscall tables for the 3.18 kernel
  - Ignore DNS failure for email validation in auditd (#1138674)
  - Allow rotate as action for space_left and disk_full in auditd.conf
  - Correct login summary report of aureport
  - Auditctl syscalls can be comma separated list now
  - Update rules for new subsystems and capabilities
- Drop patch audit-add-ppc64le-mach-support.patch (already upstream)</changelog>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4 (bsc#941922, CVE-2015-5186)
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
- Require pkgconfig for build
  Changelog 2.4.4
  - Fix linked list correctness in ausearch/report
  - Add more cross compile fixups (Clayton Shotwell)
  - Update auparse python bindings
  - Update libev to 4.20
  - Fix CVE-2015-5186 Audit: log terminal emulator escape sequences handling
  Changelog 2.4.3
  - Add python3 support for libaudit
  - Cleanup automake warnings
  - Add AuParser_search_add_timestamp_item_ex to python bindings
  - Add AuParser_get_type_name to python bindings
  - Correct processing of obj_gid in auditctl (Aleksander Zdyb)
  - Make plugin config file parsing more robust for long lines (#1235457)
  - Make auditctl status print lost field as unsigned number
  - Add interpretation mode for auditctl -s
  - Add python3 support to auparse library
  - Make --enable-zos-remote a build time configuration option (Clayton Shotwell)
  - Updates for cross compiling (Clayton Shotwell)
  - Add MAC_CHECK audit event type
  - Add libauparse pkgconfig file (Aleksander Zdyb)
  Changelog 2.4.2
  - Ausearch should parse exe field in SECCOMP events
  - Improve output for short mode interpretations in auparse
  - Add CRYPTO_IKE_SA and CRYPTO_IPSEC_SA events
  - If auditctl is reading rules from a file, send messages to syslog (#1144252)
  - Correct lookup of ppc64le when determining machine type
  - Increase time buffer for wide character numbers in ausearch/report (#1200314)
  - In aureport, add USER_TTY events to tty report
  - In audispd, limit reporting of queue full messages (#1203810)
  - In auditctl, don't segfault when invalid options passed (#1206516)
  - In autrace, remove some older unimplemented syscalls for aarch64 (#1185892)
  - In auditctl, correct lookup of aarch64 in arch field (#1186313)
  - Update lookup tables for 4.1 kernel</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
</package>
<package pkgid="e8980c9d59a0ac932a2015a279648a70cc02aab9b7c48bb86c9da6f51dacd53e" name="audit-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="lp151.5.3.1"/>
  <changelog author="tonyj@suse.com" date="1409659200">- Update to version 2.4
  Changelog 2.4
  - Optionally parse loginuids, (e)uids, &amp; (e)gids in ausearch/report
  - In auvirt, anomaly events don't have uuid (#1111448)
  - Fix category handling in various records (#1120286)
  - Fix ausearch handling of session id on 32 bit systems
  - Set systemd startup to wait until systemd-tmpfiles-setup.service (#1097314)
  - Interpret a0 of socketcall and ipccall syscalls
  - Add pkgconfig file for libaudit
  - Add go language bindings for limited use of libaudit
  - Fix ausearch handling of exit code on 32 bit systems
  - Fix bug in aureport string linked list handling
  - Document week-ago time setting in ausearch/report man page
  - Update tables for 3.16 kernel
  - In aulast, on bad logins only record user_login proof and use it
  - Add libaudit API for kernel features
  - If audit=0 on kernel cmnd line, skip systemd activation (Cristian Rodríguez)
  - Add checkpoint --start option to ausearch (Burn Alting)
  - Fix arch matching in ausearch
  - Add --loginuid-immutable option to auditctl
  - Fix memory leak in auditd when log_format is set to NOLOG
  - Update auditctl to display features in the status command
  - Add ausearch_add_timestamp_item_ex() to auparse
  Changelog 2.3.7
  - Limit number of options in a rule in libaudit
  - Auditctl cannot load rule with lots of syscalls (#1089713)
  - In ausearch, fix checkpointing when inode is reused by new log (Burn Alting)
  - Add PROCTITLE and FEATURE_CHANGE event types</changelog>
  <changelog author="mq@suse.cz" date="1416830400">- Update to version 2.4.1
  Changelog 2.4.1
  - Make python3 support easier
  - Add support for ppc64le (Tony Jones)
  - Add some translations for a1 of ioctl system calls
  - Add command &amp; virtualization reports to aureport
  - Update aureport config report for new events
  - Add account modification summary report to aureport
  - Add GRP_MGMT and GRP_CHAUTHTOK event types
  - Correct aureport account change reports
  - Add integrity event report to aureport
  - Add config change summary report to aureport
  - Adjust some syslogging level settings in audispd
  - Improve parsing performance in everything
  - When ausearch outputs a line, use the previously parsed values (Burn Alting)
  - Improve searching and interpreting groups in events
  - Fully interpret the proctitle field in auparse
  - Correct libaudit and auditctl support for kernel features
  - Add support for backlog_time_wait setting via auditctl
  - Update syscall tables for the 3.18 kernel
  - Ignore DNS failure for email validation in auditd (#1138674)
  - Allow rotate as action for space_left and disk_full in auditd.conf
  - Correct login summary report of aureport
  - Auditctl syscalls can be comma separated list now
  - Update rules for new subsystems and capabilities
- Drop patch audit-add-ppc64le-mach-support.patch (already upstream)</changelog>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4 (bsc#941922, CVE-2015-5186)
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
- Require pkgconfig for build
  Changelog 2.4.4
  - Fix linked list correctness in ausearch/report
  - Add more cross compile fixups (Clayton Shotwell)
  - Update auparse python bindings
  - Update libev to 4.20
  - Fix CVE-2015-5186 Audit: log terminal emulator escape sequences handling
  Changelog 2.4.3
  - Add python3 support for libaudit
  - Cleanup automake warnings
  - Add AuParser_search_add_timestamp_item_ex to python bindings
  - Add AuParser_get_type_name to python bindings
  - Correct processing of obj_gid in auditctl (Aleksander Zdyb)
  - Make plugin config file parsing more robust for long lines (#1235457)
  - Make auditctl status print lost field as unsigned number
  - Add interpretation mode for auditctl -s
  - Add python3 support to auparse library
  - Make --enable-zos-remote a build time configuration option (Clayton Shotwell)
  - Updates for cross compiling (Clayton Shotwell)
  - Add MAC_CHECK audit event type
  - Add libauparse pkgconfig file (Aleksander Zdyb)
  Changelog 2.4.2
  - Ausearch should parse exe field in SECCOMP events
  - Improve output for short mode interpretations in auparse
  - Add CRYPTO_IKE_SA and CRYPTO_IPSEC_SA events
  - If auditctl is reading rules from a file, send messages to syslog (#1144252)
  - Correct lookup of ppc64le when determining machine type
  - Increase time buffer for wide character numbers in ausearch/report (#1200314)
  - In aureport, add USER_TTY events to tty report
  - In audispd, limit reporting of queue full messages (#1203810)
  - In auditctl, don't segfault when invalid options passed (#1206516)
  - In autrace, remove some older unimplemented syscalls for aarch64 (#1185892)
  - In auditctl, correct lookup of aarch64 in arch field (#1186313)
  - Update lookup tables for 4.1 kernel</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
</package>
<package pkgid="c438f4b6d118657566b915aee892a913595e73674bef1c1f3ad7155b178a79ed" name="audit-secondary" arch="src">
  <version epoch="0" ver="2.8.1" rel="lp151.5.3.1"/>
  <changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec
- Add patch 'audit-fix-implicit-defn.patch' to fix implicit definition
  warning.</changelog>
  <changelog author="opensuse@cboltz.de" date="1380715200">- (re-)add rcauditd as symlink to /usr/sbin/service</changelog>
  <changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2. See audit.spec (libaudit1) for upstream
  changelog
- Drop patch 'audit-fix-implicit-defn.patch' (upstream)
- Add patch 'audit-allow-manual-stop.patch' to reinstate service
  stop/restart.
- /etc/sysconfig/audit still existed but was no longer referenced
  by systemd, so remove
- Delete audit-no_plugins.patch, it was stale (no longer referenced
  by specfiles) but had not been removed.</changelog>
  <changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3. See audit.spec (libaudit1) for upstream
  changelog</changelog>
  <changelog author="tonyj@suse.com" date="1393502400">- Add systemd requires (bnc#865849)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1395835200">- fix systemd warning:
  "Configuration file /usr/lib/systemd/system/auditd.service
  is marked world-inaccessible.
  This has no effect as configuration data is accessible
  via APIs without restrictions"
  * indeed restricting access to unit files using filesystem
  permissions is non-sense.</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6. See audit.spec (libaudit1) for upstream
  changelog</changelog>
  <changelog author="tonyj@suse.com" date="1404993600">- Do not require tclass field to be present when searching for AVC
  records (bnc#878687)
  add patch: audit-ausearch-do-not-require-tclass.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1408104000">- If the system has been booted with audit=0 in the kernel cmdline
  auditd.service must refrain from starting as the relevant kernel
  subsystem will be permanently disabled.
  add patch: auditd-donot-start-if-kernel-cmdline-disabled.patch</changelog>
  <changelog author="tonyj@suse.com" date="1409659200">- Update to version 2.4. See audit.spec (libaudit1) for upstream
  changelog
  Drop patch: auditd-donot-start-if-kernel-cmdline-disabled.patch</changelog>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Enzo Matsumiya &lt;ematsumiya@suse.com&gt;" date="1591272000">- Fix hang on startup (bsc#1156159)
  * audit-Fix-hang-on-startup.patch</changelog>
</package>
<package pkgid="5ea96c0723b61905c547672c92471614335887fbfa1e125f10d57cea03712726" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.1.15" rel="lp151.2.12.1"/>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.67</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711, CVE-2019-18905)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1585656000">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.1.11</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585915200">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865600">- Fix partitioning desktop file to use the right icon and group
  (related to bsc#1168123).
- 4.1.13</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865601">- Update the Makefile to include restored icons (related to
  bsc#1168123).
- 4.1.14</changelog>
  <changelog author="Steffen Winterfeldt &lt;snwint@suse.com&gt;" date="1588680000">- Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045)
- 4.1.15</changelog>
</package>
<package pkgid="5e4cfb550e9e796dd269001b94b1241e98de086a65cff71c787504f77a00b661" name="autoyast2" arch="src">
  <version epoch="0" ver="4.1.15" rel="lp151.2.12.1"/>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.67</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711, CVE-2019-18905)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1585656000">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.1.11</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585915200">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865600">- Fix partitioning desktop file to use the right icon and group
  (related to bsc#1168123).
- 4.1.13</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865601">- Update the Makefile to include restored icons (related to
  bsc#1168123).
- 4.1.14</changelog>
  <changelog author="Steffen Winterfeldt &lt;snwint@suse.com&gt;" date="1588680000">- Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045)
- 4.1.15</changelog>
</package>
<package pkgid="2b9a60059afc7bef276cf3cfd43c51860f67507d55b4800b23e9432f15cc2309" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.1.16" rel="lp151.2.15.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711, CVE-2019-18905)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1585656000">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.1.11</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585915200">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865600">- Fix partitioning desktop file to use the right icon and group
  (related to bsc#1168123).
- 4.1.13</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865601">- Update the Makefile to include restored icons (related to
  bsc#1168123).
- 4.1.14</changelog>
  <changelog author="Steffen Winterfeldt &lt;snwint@suse.com&gt;" date="1588680000">- Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045)
- 4.1.15</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1589976000">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.1.16</changelog>
</package>
<package pkgid="b80f0bf117529ca4302dcd56017a72d333e0d5372a21b1e5fd6a62bf9cdd5bb6" name="autoyast2" arch="src">
  <version epoch="0" ver="4.1.16" rel="lp151.2.15.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711, CVE-2019-18905)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1585656000">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.1.11</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585915200">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865600">- Fix partitioning desktop file to use the right icon and group
  (related to bsc#1168123).
- 4.1.13</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865601">- Update the Makefile to include restored icons (related to
  bsc#1168123).
- 4.1.14</changelog>
  <changelog author="Steffen Winterfeldt &lt;snwint@suse.com&gt;" date="1588680000">- Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045)
- 4.1.15</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1589976000">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.1.16</changelog>
</package>
<package pkgid="5719db27c98b2f1a7c23b26048b231725bfe5aadeb320bb9bf191ba075445259" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.1.21" rel="lp151.2.18.1"/>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711, CVE-2019-18905)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1585656000">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.1.11</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585915200">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865600">- Fix partitioning desktop file to use the right icon and group
  (related to bsc#1168123).
- 4.1.13</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865601">- Update the Makefile to include restored icons (related to
  bsc#1168123).
- 4.1.14</changelog>
  <changelog author="Steffen Winterfeldt &lt;snwint@suse.com&gt;" date="1588680000">- Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045)
- 4.1.15</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1589976000">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.1.16</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  during for the second_stage (bsc#1172026)
- 4.1.17</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594036800">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.1.18</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.1.19</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.1.20</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600430400">- Reimport the initial configuration in case that the profile
  is modified by pre-scripts (bsc#1175725)
- 4.1.21</changelog>
</package>
<package pkgid="4762187449f7a1e8023cef66e60f224ba182976c98daa4d70fa3a8f1575c4a0a" name="autoyast2" arch="src">
  <version epoch="0" ver="4.1.21" rel="lp151.2.18.1"/>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711, CVE-2019-18905)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1585656000">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.1.11</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585915200">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865600">- Fix partitioning desktop file to use the right icon and group
  (related to bsc#1168123).
- 4.1.13</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865601">- Update the Makefile to include restored icons (related to
  bsc#1168123).
- 4.1.14</changelog>
  <changelog author="Steffen Winterfeldt &lt;snwint@suse.com&gt;" date="1588680000">- Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045)
- 4.1.15</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1589976000">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.1.16</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  during for the second_stage (bsc#1172026)
- 4.1.17</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594036800">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.1.18</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.1.19</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.1.20</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600430400">- Reimport the initial configuration in case that the profile
  is modified by pre-scripts (bsc#1175725)
- 4.1.21</changelog>
</package>
<package pkgid="a612759c9579db9b8bcd393f527267c178684cdbb78f798874cf4123be034a14" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="lp151.2.3.1"/>
  <changelog author="knut.anderssen@suse.com" date="1534852800">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1540468800">- Saving y2logs after the installation has been finished.
  (fate#325737)
- 4.0.65</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.67</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
</package>
<package pkgid="b6d4ff0063aed73a26a3baeef5267b0faa5dc7257ec53fec6248f8d1867b15b2" name="autoyast2" arch="src">
  <version epoch="0" ver="4.1.7" rel="lp151.2.3.1"/>
  <changelog author="knut.anderssen@suse.com" date="1534852800">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1540468800">- Saving y2logs after the installation has been finished.
  (fate#325737)
- 4.0.65</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.67</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
</package>
<package pkgid="ee58d41032150c39d22710adffff409fc7a72c9f8bf2e272624ef8f9988fadeb" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.1.8" rel="lp151.2.6.1"/>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1540468800">- Saving y2logs after the installation has been finished.
  (fate#325737)
- 4.0.65</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.67</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
</package>
<package pkgid="98422a4d215d31f4cb1d0ee569395184802486bd0449eae4c1fcf2dbd73cd2e1" name="autoyast2" arch="src">
  <version epoch="0" ver="4.1.8" rel="lp151.2.6.1"/>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1540468800">- Saving y2logs after the installation has been finished.
  (fate#325737)
- 4.0.65</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.67</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
</package>
<package pkgid="f7674f6ab6361ff1ea35da1c79e07540ad19d3dd4cce31d5fb45f4182215c3da" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.1.9" rel="lp151.2.9.1"/>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1540468800">- Saving y2logs after the installation has been finished.
  (fate#325737)
- 4.0.65</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.67</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.1.9</changelog>
</package>
<package pkgid="badf69166f336c2ba9a15dc3d8979c856b1ee11c9bddad38bbaacedc2207f9ba" name="autoyast2" arch="src">
  <version epoch="0" ver="4.1.9" rel="lp151.2.9.1"/>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1540468800">- Saving y2logs after the installation has been finished.
  (fate#325737)
- 4.0.65</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.67</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.1.9</changelog>
</package>
<package pkgid="58b4817d1b1d6f1362fdf973c39ab638957cbe9c111581060ed7255bdca1c7f8" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.1.15" rel="lp151.2.12.1"/>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.67</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711, CVE-2019-18905)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1585656000">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.1.11</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585915200">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865600">- Fix partitioning desktop file to use the right icon and group
  (related to bsc#1168123).
- 4.1.13</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865601">- Update the Makefile to include restored icons (related to
  bsc#1168123).
- 4.1.14</changelog>
  <changelog author="Steffen Winterfeldt &lt;snwint@suse.com&gt;" date="1588680000">- Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045)
- 4.1.15</changelog>
</package>
<package pkgid="d8005330b0fca15bfd7ec49c895105c388bb14a99ecfdd779975fb1758c9904d" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.1.16" rel="lp151.2.15.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711, CVE-2019-18905)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1585656000">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.1.11</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585915200">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865600">- Fix partitioning desktop file to use the right icon and group
  (related to bsc#1168123).
- 4.1.13</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865601">- Update the Makefile to include restored icons (related to
  bsc#1168123).
- 4.1.14</changelog>
  <changelog author="Steffen Winterfeldt &lt;snwint@suse.com&gt;" date="1588680000">- Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045)
- 4.1.15</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1589976000">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.1.16</changelog>
</package>
<package pkgid="eb7b38db7fcaa715263c18e9f113c854b6572023f75952fc85af49b28bc39f53" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.1.21" rel="lp151.2.18.1"/>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711, CVE-2019-18905)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1585656000">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.1.11</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585915200">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865600">- Fix partitioning desktop file to use the right icon and group
  (related to bsc#1168123).
- 4.1.13</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1586865601">- Update the Makefile to include restored icons (related to
  bsc#1168123).
- 4.1.14</changelog>
  <changelog author="Steffen Winterfeldt &lt;snwint@suse.com&gt;" date="1588680000">- Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045)
- 4.1.15</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1589976000">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.1.16</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  during for the second_stage (bsc#1172026)
- 4.1.17</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594036800">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.1.18</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.1.19</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.1.20</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600430400">- Reimport the initial configuration in case that the profile
  is modified by pre-scripts (bsc#1175725)
- 4.1.21</changelog>
</package>
<package pkgid="ff507a8dce30467710cca1c97fb91f4d4626f8f7e0ae8de57f1c5c4611a1ce64" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="lp151.2.3.1"/>
  <changelog author="knut.anderssen@suse.com" date="1534852800">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1540468800">- Saving y2logs after the installation has been finished.
  (fate#325737)
- 4.0.65</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.67</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
</package>
<package pkgid="aadb48eb5e0e3c9f2067ec7a64b8c027bbc1dd8c9a985edd3b6af287a37fcadb" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.1.8" rel="lp151.2.6.1"/>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1540468800">- Saving y2logs after the installation has been finished.
  (fate#325737)
- 4.0.65</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.67</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
</package>
<package pkgid="37766141d3ff165c32a05663c1eef45b6a13002fabe2a71e0d4a8a40635733bf" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.1.9" rel="lp151.2.9.1"/>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1540468800">- Saving y2logs after the installation has been finished.
  (fate#325737)
- 4.0.65</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.67</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.0.69</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.0.70</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1550836800">- Avoid to crash when the profile has a not valid sofware section
  (bsc#1125959).
- 4.1.2</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552046400">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- Postpone disabling local repositories if the second stage is
  required (bsc#1127818).
- 4.1.4</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.1.5</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556539200">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.6</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572004800">- During firstboot ayast_setup will not be executed.
  (bnc#1154855)
- 4.1.7</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.1.8</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.1.9</changelog>
</package>
<package pkgid="d55c2564c88ca9149b452830195497bb29c906a3450b43ae22a62058ed0f240d" name="avahi" arch="i586">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="2769c970ac901a06a2df53fb19fe786c60ec73093c52d4450ebe8bf225615cc6" name="avahi" arch="src">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="facb7d215bd9c6bea9493dafbad23f359fd174912c7c4842bd0f4673afb6d7a4" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="28496784475d3ef747cbca8a58e7d1802e3b1696cb02c71e20c891a6b5fbab60" name="avahi-autoipd" arch="i586">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="bd1655b5aa4f723eefd89e6f1388c17f5066cc18dfcab90d978c03b38195eed5" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="a14a7a06bdb81259f5f4d1380909a292c8971bd711ecdaf54685fb7684d18f68" name="avahi-compat-howl-devel" arch="i586">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="fabc9572d9c1b8fb20c3f76839113f683397972f5a59a79b3e6657bcbd9b7019" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="291e899564e3eb6fd45565c86c37224bd3be11d56bf0c87be6827eb74d67500d" name="avahi-compat-mDNSResponder-devel" arch="i586">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="3b46347172093f30243101e8b5e71e5697e5edda7a4c9772a5526775a65e4faa" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="2b01ec54db2d02137d1486dddc493054d1eec2b6ad3710d272a51cc387bb46ed" name="avahi-glib2" arch="src">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Build glib2, gobject and python stuff separately to break build
  loop cups -&gt; gtk2 -&gt; avahi -&gt; cups.
- Split avahi-python-gtk from avahi-python.
- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="aj@suse.de" date="1217073600">- Fix requires to require avahi base package.</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="ro@suse.de" date="1217764800">- move fix further up in specfile</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="cc81ec4818c14fb80981be100fbb79ec05cdcd6207bfdf1774521b7c2f3aae02" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="5a0e08401643e2708520e42ca5048eeae1c9d5a9e89eb2a91b224213410fad3b" name="avahi-mono" arch="src">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="aj@suse.de" date="1184587200">- Create new spec file to avoid build cycle avahi-&gt;gnome-&gt;mono-&gt;avahi.</changelog>
  <changelog author="aj@suse.de" date="1185796800">- Add gcc-c++ to BuildRequires.</changelog>
  <changelog author="bk@suse.de" date="1186401600">- replace -p /usr/sbin/ldconfig with %{run_ldconfig}</changelog>
  <changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="bwiedemann@suse.com" date="1492776000">- use strip-nondeterminism to make build fully reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="4b4f0fffd5b5f078de6c7d85ff96786343aaa3e9dcc26e6165ffee90ea81e5f8" name="avahi-mono" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="bwiedemann@suse.com" date="1492776000">- use strip-nondeterminism to make build fully reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="d1031f0158f7c0975b600a5025359560965fbb7fc879928b03f5aca0a00278d3" name="avahi-qt4" arch="src">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="fcb35e088a4d2251a055b38ab9c501a9cb95cdda75cf339c189e92c159b9eda5" name="avahi-utils" arch="i586">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="e8d86cb862656dc9810ee179386b5320ffdea4dc23e8a8f793b7688d2bf3023a" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="eaf8228c4710c211e59c669c6b70ec20d5804d59d6075160acbec586471e7d1f" name="avahi-utils-gtk" arch="i586">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="b07ccca9ecd26bc2223dbb1aca81f3da4194c38db9d05130b1fca879c95137c0" name="avahi-utils-gtk" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp151.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="a991955293841832403eb5a59c3ed46602a8b358ce1534fbcc1745423b8e1b8c" name="aws-cli" arch="noarch">
  <version epoch="0" ver="1.16.223" rel="lp151.2.3.1"/>
  <changelog author="dmueller@suse.com" date="1479384000">- update to 1.10.67
  * more than 500 changes, have a look at
  https://github.com/aws/aws-cli/compare/1.10.38...1.10.67</changelog>
  <changelog author="rjschwei@suse.com" date="1481803200">- Update to 1.11.29 (bsc#1015776)
  + forward port hide_py_pckgmgmt.patch
  + feature:batch: Update batch command to latest version
  + feature:logs: Update logs command to latest version
  + feature:rds: Update rds command to latest version
  + feature:dms: Update dms command to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:sts: Update sts command to latest version
- From 1.11.28
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + bugfix:opsworks: This fixes an issue with opsworks register --local and
    python3 on some versions of linux.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.11.27
  + feature:config: Update config command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:s3: Update s3 command to latest version
- From 1.11.26
  + feature:sts: Update sts command to latest version
  + feature:config: Update config command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:pinpoint: Update pinpoint command to latest version
- From 1.11.25
  + bugfix:opsworks-cm: Rename opsworkscm to opsworks-cm, keeping support
    for opsworkscm.
- From 1.11.24
  + feature:pinpoint: Update pinpoint command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:alias: Add ability to alias commands in the CLI
  + feature:xray: Update xray command to latest version
  + feature:s3: Display transfer speed for s3 commands
  + feature:ssm: Update ssm command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:codebuild: Update codebuild command to latest version
  + feature:opsworkscm: Update opsworkscm command to latest version
  + feature:shield: Update shield command to latest version
  + feature:stepfunctions: Update stepfunctions command to latest version
  + feature:appstream: Update appstream command to latest version
  + feature:health: Update health command to latest version
  + feature:ec2: Update ec2 command to latest version
- From 1.11.23
  + feature:polly: Update polly command to latest version
  + feature:snowball: Update snowball command to latest version
  + feature:rekognition: Update rekognition command to latest version
  + feature:lightsail: Update lightsail command to latest version
  + feature:--generate-cli-skeleton output: Add support for generating
    sample output for command
- From 1.11.22
  + feature:s3: Update s3 command to latest version
- From 1.11.21
  + feature:s3: Update s3 command to latest version
  + feature:glacier: Update glacier command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:route53: Update route53 command to latest version
- From 1.11.20
  + feature:ecs: Update ecs command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.11.19
  + feature:cloudformation deploy: Add command to simplify deployments
    of cloudformation stack changes.
  + feature:emr: Update emr command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:elastictranscoder: Update elastictranscoder command to latest
    version
  + feature:cloudformation package: Add command to package source code for
    cloudfromation template.
  + feature:gamelift: Update gamelift command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.11.18
  + bugfix:Powershell: Properly set return code on Powershell.
  + feature:cloudwatch: Update cloudwatch command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:meteringmarketplace: Update meteringmarketplace command to
    latest version
- From 1.11.17
  + feature:route53: Update route53 command to latest version
  + feature:servicecatalog: Update servicecatalog command to latest version
- From 1.11.16
  + feature:kinesis: Update kinesis command to latest version
  + feature:ds: Update ds command to latest version
  + feature:elasticache: Update elasticache command to latest version
- From 1.11.15
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.14
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:logs: Update logs command to latest version
- From 1.11.13
  + feature:directconnect: Update directconnect command to latest version
- From 1.11.12
  + feature:ses: Update ses command to latest version
- From 1.11.11
  + bugfix:cloudtrail: Use STS instead of IAM in CreateSubscription
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.11.10
  + feature:autoscaling: Update autoscaling command to latest version
  + feature:elbv2: Update elbv2 command to latest version
- From 1.11.9
  + feature:ecs: Update ecs command to latest version
  + feature:sms: Update sms command to latest version
- From 1.11.8
  + feature:waf: Update waf command to latest version
  + feature:s3: Port mv to s3transfer.
  + feature:budgets: Update budgets command to latest version
- From 1.11.7
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:iot: Update iot command to latest version
  + feature:config: Update config command to latest version
  + feature:kinesisanalytics: Update kinesisanalytics command to latest version
  + feature:rds: Update rds command to latest version
- From 1.11.6
  + feature:route53: Update route53 command to latest version
  + feature:--region: Add support for us-east-2
- From 1.11.5
  + bugfix:s3 sync --delete: Fix regression where --delete would not delete
    local files
- From 1.11.4
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:s3: Integrate sync command with s3transfer
  + feature:acm: Update acm command to latest version
  + feature:s3: Output progress even when discovering new files to transfer
- From 1.11.3
  + bugfix:Pagination: Fix validation error when providing --no-paginate
    with normalized paging argument.
  + feature:apigateway: Update apigateway command to latest version
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:rds: Update rds command to latest version
  + feature:codedeploy: Update codedeploy command to latest version
  + feature:sns: Update sns command to latest version
  + feature:kms: Update kms command to latest version
  + feature:elasticache: Update elasticache command to latest version
  + feature:ecr: Update ecr command to latest version
- From 1.11.2
  + feature:s3: Update s3 command to latest version
  + feature:waf: Update waf command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:kms: Update kms command to latest version
  + feature:opsworks: Update opsworks command to latest version
  + bugfix:s3: Refactor rb into its own command. In addition, validate that
    no key is supplied regardless of whether or not the force argument is
    supplied.
  + bugfix:route53domains: Rename --end to --end-time to fix a bug relating
    to argparse prefix expansion. Alias --start to --start-time to maintain
    a consistent interface while keeping the old parameter.
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.1
  + bugfix:s3: Fix regression when downloading empty files.
- From 1.11.0
  + feature:snowball: Update snowball command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:s3: Port cp and rm to s3transfer. Improve progress for those
    commands, showing byte progress.
- Upstream version jump from 1.10.67 to 1.11.0</changelog>
  <changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.11.104 (bsc#1044370)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.104/CHANGELOG.rst</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Update to version 1.11.151
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.151/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
- Remove build capability for SLE 11
- Set up for Python 3 build distro &gt; SLE 12 openSUSE Leap 42.x</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to version 1.11.185 (boo#1066528)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.185/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch</changelog>
  <changelog author="jengelh@inai.de" date="1510315200">- Do not have description assume any particular user.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529409600">- Update to version 1.15.40 (boo#1088310)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.40/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1532260800">- Update to version 1.15.63
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.63/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="rjschwei@suse.com" date="1534075200">- Be less strict with the YAML version requirement
- Switch the license file to %license</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1534161600">- Update to version 1.15.76
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.76/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1536840000">- Update to version 1.16.1 (bsc#1105988, bsc#1092493)
  + Fix CVE-2018-15869
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.1/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Replace vendored version of six from botocore with upstream version
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1541505600">- Update to version 1.16.48
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.48/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1543924800">- Update to version 1.16.61 (bsc#1118021, bsc#1118024)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.61/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version dependency on colorama to &lt;= 0.4.1 (boo#1118099)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1546776000">- Update to version 1.16.84
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.84/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548331200">- Update to version 1.16.94
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.94/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550059200">- Update to version 1.16.103
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.103/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1560340800">- Update to version 1.16.176
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.176/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version constraints for python-PyYAML and python-rsa
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install
- Run recursive find with chmod to remove executable bit for
  REST files in example folder to fix rpmlint warning</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561032000">- Update to version 1.16.182
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.182/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561723200">- Update to version 1.16.189
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.189/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566475200">- Update to version 1.16.223
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.223/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
</package>
<package pkgid="798a6a6a47d33116e74549d1b8f539d6bf974145646a4414f6c59d10659ae593" name="aws-cli" arch="src">
  <version epoch="0" ver="1.16.223" rel="lp151.2.3.1"/>
  <changelog author="dmueller@suse.com" date="1479384000">- update to 1.10.67
  * more than 500 changes, have a look at
  https://github.com/aws/aws-cli/compare/1.10.38...1.10.67</changelog>
  <changelog author="rjschwei@suse.com" date="1481803200">- Update to 1.11.29 (bsc#1015776)
  + forward port hide_py_pckgmgmt.patch
  + feature:batch: Update batch command to latest version
  + feature:logs: Update logs command to latest version
  + feature:rds: Update rds command to latest version
  + feature:dms: Update dms command to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:sts: Update sts command to latest version
- From 1.11.28
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + bugfix:opsworks: This fixes an issue with opsworks register --local and
    python3 on some versions of linux.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.11.27
  + feature:config: Update config command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:s3: Update s3 command to latest version
- From 1.11.26
  + feature:sts: Update sts command to latest version
  + feature:config: Update config command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:pinpoint: Update pinpoint command to latest version
- From 1.11.25
  + bugfix:opsworks-cm: Rename opsworkscm to opsworks-cm, keeping support
    for opsworkscm.
- From 1.11.24
  + feature:pinpoint: Update pinpoint command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:alias: Add ability to alias commands in the CLI
  + feature:xray: Update xray command to latest version
  + feature:s3: Display transfer speed for s3 commands
  + feature:ssm: Update ssm command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:codebuild: Update codebuild command to latest version
  + feature:opsworkscm: Update opsworkscm command to latest version
  + feature:shield: Update shield command to latest version
  + feature:stepfunctions: Update stepfunctions command to latest version
  + feature:appstream: Update appstream command to latest version
  + feature:health: Update health command to latest version
  + feature:ec2: Update ec2 command to latest version
- From 1.11.23
  + feature:polly: Update polly command to latest version
  + feature:snowball: Update snowball command to latest version
  + feature:rekognition: Update rekognition command to latest version
  + feature:lightsail: Update lightsail command to latest version
  + feature:--generate-cli-skeleton output: Add support for generating
    sample output for command
- From 1.11.22
  + feature:s3: Update s3 command to latest version
- From 1.11.21
  + feature:s3: Update s3 command to latest version
  + feature:glacier: Update glacier command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:route53: Update route53 command to latest version
- From 1.11.20
  + feature:ecs: Update ecs command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.11.19
  + feature:cloudformation deploy: Add command to simplify deployments
    of cloudformation stack changes.
  + feature:emr: Update emr command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:elastictranscoder: Update elastictranscoder command to latest
    version
  + feature:cloudformation package: Add command to package source code for
    cloudfromation template.
  + feature:gamelift: Update gamelift command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.11.18
  + bugfix:Powershell: Properly set return code on Powershell.
  + feature:cloudwatch: Update cloudwatch command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:meteringmarketplace: Update meteringmarketplace command to
    latest version
- From 1.11.17
  + feature:route53: Update route53 command to latest version
  + feature:servicecatalog: Update servicecatalog command to latest version
- From 1.11.16
  + feature:kinesis: Update kinesis command to latest version
  + feature:ds: Update ds command to latest version
  + feature:elasticache: Update elasticache command to latest version
- From 1.11.15
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.14
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:logs: Update logs command to latest version
- From 1.11.13
  + feature:directconnect: Update directconnect command to latest version
- From 1.11.12
  + feature:ses: Update ses command to latest version
- From 1.11.11
  + bugfix:cloudtrail: Use STS instead of IAM in CreateSubscription
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.11.10
  + feature:autoscaling: Update autoscaling command to latest version
  + feature:elbv2: Update elbv2 command to latest version
- From 1.11.9
  + feature:ecs: Update ecs command to latest version
  + feature:sms: Update sms command to latest version
- From 1.11.8
  + feature:waf: Update waf command to latest version
  + feature:s3: Port mv to s3transfer.
  + feature:budgets: Update budgets command to latest version
- From 1.11.7
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:iot: Update iot command to latest version
  + feature:config: Update config command to latest version
  + feature:kinesisanalytics: Update kinesisanalytics command to latest version
  + feature:rds: Update rds command to latest version
- From 1.11.6
  + feature:route53: Update route53 command to latest version
  + feature:--region: Add support for us-east-2
- From 1.11.5
  + bugfix:s3 sync --delete: Fix regression where --delete would not delete
    local files
- From 1.11.4
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:s3: Integrate sync command with s3transfer
  + feature:acm: Update acm command to latest version
  + feature:s3: Output progress even when discovering new files to transfer
- From 1.11.3
  + bugfix:Pagination: Fix validation error when providing --no-paginate
    with normalized paging argument.
  + feature:apigateway: Update apigateway command to latest version
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:rds: Update rds command to latest version
  + feature:codedeploy: Update codedeploy command to latest version
  + feature:sns: Update sns command to latest version
  + feature:kms: Update kms command to latest version
  + feature:elasticache: Update elasticache command to latest version
  + feature:ecr: Update ecr command to latest version
- From 1.11.2
  + feature:s3: Update s3 command to latest version
  + feature:waf: Update waf command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:kms: Update kms command to latest version
  + feature:opsworks: Update opsworks command to latest version
  + bugfix:s3: Refactor rb into its own command. In addition, validate that
    no key is supplied regardless of whether or not the force argument is
    supplied.
  + bugfix:route53domains: Rename --end to --end-time to fix a bug relating
    to argparse prefix expansion. Alias --start to --start-time to maintain
    a consistent interface while keeping the old parameter.
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.1
  + bugfix:s3: Fix regression when downloading empty files.
- From 1.11.0
  + feature:snowball: Update snowball command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:s3: Port cp and rm to s3transfer. Improve progress for those
    commands, showing byte progress.
- Upstream version jump from 1.10.67 to 1.11.0</changelog>
  <changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.11.104 (bsc#1044370)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.104/CHANGELOG.rst</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Update to version 1.11.151
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.151/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
- Remove build capability for SLE 11
- Set up for Python 3 build distro &gt; SLE 12 openSUSE Leap 42.x</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to version 1.11.185 (boo#1066528)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.185/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch</changelog>
  <changelog author="jengelh@inai.de" date="1510315200">- Do not have description assume any particular user.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529409600">- Update to version 1.15.40 (boo#1088310)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.40/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1532260800">- Update to version 1.15.63
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.63/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="rjschwei@suse.com" date="1534075200">- Be less strict with the YAML version requirement
- Switch the license file to %license</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1534161600">- Update to version 1.15.76
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.76/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1536840000">- Update to version 1.16.1 (bsc#1105988, bsc#1092493)
  + Fix CVE-2018-15869
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.1/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Replace vendored version of six from botocore with upstream version
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1541505600">- Update to version 1.16.48
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.48/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1543924800">- Update to version 1.16.61 (bsc#1118021, bsc#1118024)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.61/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version dependency on colorama to &lt;= 0.4.1 (boo#1118099)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1546776000">- Update to version 1.16.84
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.84/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548331200">- Update to version 1.16.94
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.94/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550059200">- Update to version 1.16.103
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.103/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1560340800">- Update to version 1.16.176
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.176/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version constraints for python-PyYAML and python-rsa
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install
- Run recursive find with chmod to remove executable bit for
  REST files in example folder to fix rpmlint warning</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561032000">- Update to version 1.16.182
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.182/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561723200">- Update to version 1.16.189
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.189/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566475200">- Update to version 1.16.223
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.223/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
</package>
<package pkgid="9820d83b2c01fd044fb820dcfc6ab0fff32ecf6c5df0aacc3ddf91761161e19b" name="aws-cli" arch="noarch">
  <version epoch="0" ver="1.18.117" rel="lp151.2.9.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550059200">- Update to version 1.16.103
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.103/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1560340800">- Update to version 1.16.176
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.176/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version constraints for python-PyYAML and python-rsa
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install
- Run recursive find with chmod to remove executable bit for
  REST files in example folder to fix rpmlint warning</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561032000">- Update to version 1.16.182
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.182/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561723200">- Update to version 1.16.189
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.189/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566475200">- Update to version 1.16.223 (bsc#1146853)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.223/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569585600">- Add groff as a dependency (boo# 1152258)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571054400">- Update to version 1.16.258
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.258/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1573732800">- Update to version 1.16.281
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.281/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1575547200">- Update to version 1.16.297
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.297/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1580385600">- Update to version 1.17.9
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.17.9/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581336000">- Add bash command completion capability (boo#1117074)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1581681600">- make it possible to find the package under the name "awscli"</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1581940800">- Update to version 1.18.0
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.0/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Install aws bash completetion script into system path
  + Install aws zsh completion script into /etc/zsh_completion.d
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585051200">- Update to version 1.18.27
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.27/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585915200">- Update to version 1.18.35
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.35/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1586260800">- Fix build on SLE-12
  + Add bash-completion to BuildRequires for suse_version &lt;= 1315</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1586347200">- Update to version 1.18.38 (bsc#1166924, bsc#1168943)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.38/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592222400">- Update to version 1.18.79
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.79/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1594900800">- Update to version 1.18.98
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.79/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597233600">- Update to version 1.18.117 (bsc#1175147, bsc#1175148, jsc#ECO-2362, jsc#PM-2069)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.117/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Rename README.rst to README.md in %docs section</changelog>
</package>
<package pkgid="59fae7e18910440c55521d3350e7ae01a3346b63ab7a7a9da535f2b0bc440e7b" name="aws-cli" arch="src">
  <version epoch="0" ver="1.18.117" rel="lp151.2.9.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550059200">- Update to version 1.16.103
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.103/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1560340800">- Update to version 1.16.176
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.176/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version constraints for python-PyYAML and python-rsa
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install
- Run recursive find with chmod to remove executable bit for
  REST files in example folder to fix rpmlint warning</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561032000">- Update to version 1.16.182
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.182/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561723200">- Update to version 1.16.189
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.189/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566475200">- Update to version 1.16.223 (bsc#1146853)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.223/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569585600">- Add groff as a dependency (boo# 1152258)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571054400">- Update to version 1.16.258
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.258/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1573732800">- Update to version 1.16.281
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.281/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1575547200">- Update to version 1.16.297
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.297/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1580385600">- Update to version 1.17.9
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.17.9/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581336000">- Add bash command completion capability (boo#1117074)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1581681600">- make it possible to find the package under the name "awscli"</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1581940800">- Update to version 1.18.0
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.0/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Install aws bash completetion script into system path
  + Install aws zsh completion script into /etc/zsh_completion.d
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585051200">- Update to version 1.18.27
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.27/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585915200">- Update to version 1.18.35
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.35/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1586260800">- Fix build on SLE-12
  + Add bash-completion to BuildRequires for suse_version &lt;= 1315</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1586347200">- Update to version 1.18.38 (bsc#1166924, bsc#1168943)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.38/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592222400">- Update to version 1.18.79
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.79/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1594900800">- Update to version 1.18.98
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.79/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597233600">- Update to version 1.18.117 (bsc#1175147, bsc#1175148, jsc#ECO-2362, jsc#PM-2069)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.117/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Rename README.rst to README.md in %docs section</changelog>
</package>
<package pkgid="65be4923c1ac4226d4a362fb2b47a06ec0af9ba08df170f0f274e962225986a0" name="aws-cli" arch="noarch">
  <version epoch="0" ver="1.18.38" rel="lp151.2.6.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1543924800">- Update to version 1.16.61 (bsc#1118021, bsc#1118024)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.61/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version dependency on colorama to &lt;= 0.4.1 (boo#1118099)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1546776000">- Update to version 1.16.84
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.84/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548331200">- Update to version 1.16.94
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.94/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550059200">- Update to version 1.16.103
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.103/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1560340800">- Update to version 1.16.176
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.176/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version constraints for python-PyYAML and python-rsa
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install
- Run recursive find with chmod to remove executable bit for
  REST files in example folder to fix rpmlint warning</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561032000">- Update to version 1.16.182
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.182/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561723200">- Update to version 1.16.189
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.189/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566475200">- Update to version 1.16.223
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.223/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569585600">- Add groff as a dependency (boo# 1152258)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571054400">- Update to version 1.16.258
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.258/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1573732800">- Update to version 1.16.281
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.281/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1575547200">- Update to version 1.16.297
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.297/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1580385600">- Update to version 1.17.9
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.17.9/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581336000">- Add bash command completion capability (boo#1117074)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1581681600">- make it possible to find the package under the name "awscli"</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1581940800">- Update to version 1.18.0
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.0/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Install aws bash completetion script into system path
  + Install aws zsh completion script into /etc/zsh_completion.d
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585051200">- Update to version 1.18.27
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.27/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585915200">- Update to version 1.18.35
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.35/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1586260800">- Fix build on SLE-12
  + Add bash-completion to BuildRequires for suse_version &lt;= 1315</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1586347200">- Update to version 1.18.38 (bsc#1166924, bsc#1168943)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.38/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
</package>
<package pkgid="df6f1f6862978132b9a4af5454a5806637001d728cccd790dad53c57be9df836" name="aws-cli" arch="src">
  <version epoch="0" ver="1.18.38" rel="lp151.2.6.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1543924800">- Update to version 1.16.61 (bsc#1118021, bsc#1118024)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.61/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version dependency on colorama to &lt;= 0.4.1 (boo#1118099)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1546776000">- Update to version 1.16.84
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.84/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548331200">- Update to version 1.16.94
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.94/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550059200">- Update to version 1.16.103
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.103/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1560340800">- Update to version 1.16.176
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.176/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version constraints for python-PyYAML and python-rsa
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install
- Run recursive find with chmod to remove executable bit for
  REST files in example folder to fix rpmlint warning</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561032000">- Update to version 1.16.182
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.182/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561723200">- Update to version 1.16.189
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.189/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566475200">- Update to version 1.16.223
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.223/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569585600">- Add groff as a dependency (boo# 1152258)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571054400">- Update to version 1.16.258
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.258/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1573732800">- Update to version 1.16.281
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.281/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1575547200">- Update to version 1.16.297
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.297/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1580385600">- Update to version 1.17.9
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.17.9/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581336000">- Add bash command completion capability (boo#1117074)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1581681600">- make it possible to find the package under the name "awscli"</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1581940800">- Update to version 1.18.0
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.0/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Install aws bash completetion script into system path
  + Install aws zsh completion script into /etc/zsh_completion.d
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585051200">- Update to version 1.18.27
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.27/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585915200">- Update to version 1.18.35
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.35/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1586260800">- Fix build on SLE-12
  + Add bash-completion to BuildRequires for suse_version &lt;= 1315</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1586347200">- Update to version 1.18.38 (bsc#1166924, bsc#1168943)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.38/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
</package>
<package pkgid="3eb7cbae137906c71f3291345f3fdc0da1c935872639bf657bfbbb97e71f7933" name="axel" arch="src">
  <version epoch="0" ver="2.17.8" rel="lp151.3.3.1"/>
  <changelog author="bitshuffler #suse@irc.freenode.org" date="1246622400">- Initial RPM</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1286884800">- copied from home:bitshuffler to network:utilities
- revamped .spec file
- added patch to fix buffer overflow
- added patch to use getaddrinfo instead of gethostbyname</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1324555200">- Update License to GPL-2.0+
- add axel-2.4-configure.patch to make configure script accept and
  ignore --disable-dependency-tracking</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1491998400">- run spec-cleaner
- add axel-fix-url-max-length.patch to accept longer URLs</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- update to 2.15 (see ChangeLog for release notes and all changes
  since 2.4)
- switch to new github url
- run spec-cleaner
- drop all patches
  * axel-fix_buffer_overflow.patch
    + upstreamed in 425dd156b76f2377a3e386324c282bdcdac90a40
  * axel-getaddrinfo.patch
    + upstreamed in cc1142b8de01e182cbaf4cc8a606c80696d8c0b8
  * axel-fix-url-max-length.patch
    + upstreamed in ce40ee76c25a84f386128927fcd0bab4e9751268
  * axel-2.4-configure.patch
    + unneeded</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1510401601">- added more documentation files and license to package</changelog>
  <changelog author="aavindraa@gmail.com" date="1511697600">- update to 2.16
  * Buildsystem fixes and improvements
  * Fixed bug that produces empty files with -q/--quiet
  * Fixed build with --disable-nls
  * Fixed formatting of the version/copyright message
  * Header files reorganization
  * Spanish translation
  * Style fixes
  * Updated Portuguese translation</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1520683200">- update to version 2.16.1:
  * no noteable changes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1553169600">- fix broken URL</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1560081600">- update to version 2.17.3:
  - Builds now use canonical host triplet instead of `uname -s`
  - Fixed build on Darwin / Mac OS X
  - Fixed download loops caused by last byte pointer being off by one
  - Fixed linking issues (i18n and posix threads)
  - Updated build instructions
  - Code cleanup
  - Added autoconf-archive to building instructions
- update to version 2.17.2:
  - Fixed HTTP request-ranges to be zero-based
  - Fixed typo "too may" -&gt; "too many"
  - Replaced malloc + memset calls with calloc
  - Sanitize progress bar buffer len passed to memset
- update to version 2.17.1:
  - Fixed comparison error in axel_divide
  - Make sure maxconns is at least 1
- update to version 2.17:
  - Fixed composition of URLs in redirections
  - Fixed request range calculation
  - Updated all translations
  - Updated build documentation
  - Major code cleanup
  - Cleanup of alternate progress output
  - Removed global string buffers
  - Fixed min and max macros
  - Moved User-Agent header to conf-&gt;add_header
  - Use integers for speed ratio and delay calculation
  - Added support for parsing IPv6 literal hostname
  - Fixed filename extraction from URL
  - Fixed request-target message to proxy
  - Handle secure protocol's schema even with SSL disabled
  - Fixed Content-Disposition filename value decoding
  - Strip leading hyphens in extracted filenames</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1571918400">- update to version 2.17.6:
  - Fixed handling of non-recoverable HTTP errors
  - Cleanup of connection setup code
  - Fixed manpage reproducibility issue
  - Use tracker instead of PTS from Debian
- update to version 2.17.5:
  - Fixed progress indicator misalignment
  - Cleaned up the wget-like progress output code
  - Improved progress output flushing
- update to version 2.17.4:
  - Fixed build with bionic libc (Android)
  - TCP Fast Open support on Linux
  - TCP code cleanup
  - Removed dependency on libm
  - Data types and format strings cleanup
  - String handling cleanup
  - Format string checking GCC attributes added
  - Buildsystem fixes and improvements
  - Updates to the documentation
  - Updated all translations
  - Fixed Footnotes in documentation
  - Fixed a typo in README.md</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1585483200">- update to version 2.17.7:
  - Buildsystem fixes
  - Fixed release date for man-pages on BSD
  - Explicitly close TCP sockets on SSL connections too
  - Fixed HTTP basic auth header generation
  - Changed the default progress report to "alternate output mode"
  - Improved English in README.md</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590926400">- update to 2.17.8:
  * CVE-2020-13614: SSL Certificate Hostnames were not verified
    (boo#1172159)
  * Replaced progressbar line clearing with terminal control sequence
  * Fixed parsing of Content-Disposition HTTP header
  * Fixed User-Agent HTTP header never being included</changelog>
</package>
<package pkgid="7bf12db328ce6ebcc31bb156707db9ff79f9de9dd7702b118a2acb7ec7331f82" name="axel" arch="x86_64">
  <version epoch="0" ver="2.17.8" rel="lp151.3.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1491998400">- run spec-cleaner
- add axel-fix-url-max-length.patch to accept longer URLs</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- update to 2.15 (see ChangeLog for release notes and all changes
  since 2.4)
- switch to new github url
- run spec-cleaner
- drop all patches
  * axel-fix_buffer_overflow.patch
    + upstreamed in 425dd156b76f2377a3e386324c282bdcdac90a40
  * axel-getaddrinfo.patch
    + upstreamed in cc1142b8de01e182cbaf4cc8a606c80696d8c0b8
  * axel-fix-url-max-length.patch
    + upstreamed in ce40ee76c25a84f386128927fcd0bab4e9751268
  * axel-2.4-configure.patch
    + unneeded</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1510401601">- added more documentation files and license to package</changelog>
  <changelog author="aavindraa@gmail.com" date="1511697600">- update to 2.16
  * Buildsystem fixes and improvements
  * Fixed bug that produces empty files with -q/--quiet
  * Fixed build with --disable-nls
  * Fixed formatting of the version/copyright message
  * Header files reorganization
  * Spanish translation
  * Style fixes
  * Updated Portuguese translation</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1520683200">- update to version 2.16.1:
  * no noteable changes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1553169600">- fix broken URL</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1560081600">- update to version 2.17.3:
  - Builds now use canonical host triplet instead of `uname -s`
  - Fixed build on Darwin / Mac OS X
  - Fixed download loops caused by last byte pointer being off by one
  - Fixed linking issues (i18n and posix threads)
  - Updated build instructions
  - Code cleanup
  - Added autoconf-archive to building instructions
- update to version 2.17.2:
  - Fixed HTTP request-ranges to be zero-based
  - Fixed typo "too may" -&gt; "too many"
  - Replaced malloc + memset calls with calloc
  - Sanitize progress bar buffer len passed to memset
- update to version 2.17.1:
  - Fixed comparison error in axel_divide
  - Make sure maxconns is at least 1
- update to version 2.17:
  - Fixed composition of URLs in redirections
  - Fixed request range calculation
  - Updated all translations
  - Updated build documentation
  - Major code cleanup
  - Cleanup of alternate progress output
  - Removed global string buffers
  - Fixed min and max macros
  - Moved User-Agent header to conf-&gt;add_header
  - Use integers for speed ratio and delay calculation
  - Added support for parsing IPv6 literal hostname
  - Fixed filename extraction from URL
  - Fixed request-target message to proxy
  - Handle secure protocol's schema even with SSL disabled
  - Fixed Content-Disposition filename value decoding
  - Strip leading hyphens in extracted filenames</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1571918400">- update to version 2.17.6:
  - Fixed handling of non-recoverable HTTP errors
  - Cleanup of connection setup code
  - Fixed manpage reproducibility issue
  - Use tracker instead of PTS from Debian
- update to version 2.17.5:
  - Fixed progress indicator misalignment
  - Cleaned up the wget-like progress output code
  - Improved progress output flushing
- update to version 2.17.4:
  - Fixed build with bionic libc (Android)
  - TCP Fast Open support on Linux
  - TCP code cleanup
  - Removed dependency on libm
  - Data types and format strings cleanup
  - String handling cleanup
  - Format string checking GCC attributes added
  - Buildsystem fixes and improvements
  - Updates to the documentation
  - Updated all translations
  - Fixed Footnotes in documentation
  - Fixed a typo in README.md</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1585483200">- update to version 2.17.7:
  - Buildsystem fixes
  - Fixed release date for man-pages on BSD
  - Explicitly close TCP sockets on SSL connections too
  - Fixed HTTP basic auth header generation
  - Changed the default progress report to "alternate output mode"
  - Improved English in README.md</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590926400">- update to 2.17.8:
  * CVE-2020-13614: SSL Certificate Hostnames were not verified
    (boo#1172159)
  * Replaced progressbar line clearing with terminal control sequence
  * Fixed parsing of Content-Disposition HTTP header
  * Fixed User-Agent HTTP header never being included</changelog>
</package>
<package pkgid="641276ad6a38156f609a87a47bd9b8fa9a337ccd7d59c5b2d3b89ed26cb78b86" name="azure-cli" arch="noarch">
  <version epoch="0" ver="2.0.45" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 2.0.18
- Include patch to set python3 as the default python
  interpretor for the "az" command
  + ac_use-python3-by-default.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.26
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- New upstream release
  + Version 2.0.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- New upstream release
  + Version 2.0.45
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1542196800">- Add additional azure-cli component packages to Requires
  + azure-cli-command-modules-nspkg
  + azure-cli-component
  + azure-cli-taskhelp
  + azure-cli-telemetry</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584446400">- Remove unsupported component package from Requires
  + azure-cli-taskhelp</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="34a15d0a5de65574483b7ee6cdd00f43051e9384905882c75e225d1f7f476c8b" name="azure-cli" arch="src">
  <version epoch="0" ver="2.0.45" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 2.0.18
- Include patch to set python3 as the default python
  interpretor for the "az" command
  + ac_use-python3-by-default.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.26
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- New upstream release
  + Version 2.0.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- New upstream release
  + Version 2.0.45
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1542196800">- Add additional azure-cli component packages to Requires
  + azure-cli-command-modules-nspkg
  + azure-cli-component
  + azure-cli-taskhelp
  + azure-cli-telemetry</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584446400">- Remove unsupported component package from Requires
  + azure-cli-taskhelp</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="d3af57632031d3c4d5b5484c1baebfdd74c536286abdcb034c52d607f3ab0d7c" name="azure-cli-acr" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 2.0.12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 2.0.20
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 2.0.23
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.1.4
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="51cd2d3105f4b6e4d7ca2bf0356488eacfadc5a02766419b554f095b2618435e" name="azure-cli-acr" arch="src">
  <version epoch="0" ver="2.1.4" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 2.0.12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 2.0.20
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 2.0.23
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.1.4
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="11452f366bfaebf2af2dd60ce40c6d360abdf79bc017ab84a5ff38cd8822d9e2" name="azure-cli-acs" arch="noarch">
  <version epoch="0" ver="2.3.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 2.0.16</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 2.0.25
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 2.0.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.3.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="8353fbd2fedb356382f7520d2dc2c20314baddeefddea970a4aa233019a536e1" name="azure-cli-acs" arch="src">
  <version epoch="0" ver="2.3.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 2.0.16</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 2.0.25
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 2.0.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.3.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="aa2334f55a5da7f619478b2838c74aaef11b1c074f174cad21678b5dec395656" name="azure-cli-advisor" arch="noarch">
  <version epoch="0" ver="0.6.0" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- Initial build
  + Version 0.1.1</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 0.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.6.0
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="eb4e80a8ed2694e715f32e2ec6e506a0f7922573c57bbe08041c493cec11cfac" name="azure-cli-advisor" arch="src">
  <version epoch="0" ver="0.6.0" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- Initial build
  + Version 0.1.1</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 0.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.6.0
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="58611e7b450f000ec5db4a7548be28fe910ce79802f5773a45510bd2ce30e730" name="azure-cli-ams" arch="noarch">
  <version epoch="0" ver="0.2.3" rel="lp151.2.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- Initial build
  + Version 0.2.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="a499b05e7b67f91b404c956856c31b98b2e8b5628e01a6a5696f7192071b99fe" name="azure-cli-ams" arch="src">
  <version epoch="0" ver="0.2.3" rel="lp151.2.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- Initial build
  + Version 0.2.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="5ca409d4df8203a55f41a4a20b3907eca723ed917098c5508b8956a2fcdb11ba" name="azure-cli-appservice" arch="noarch">
  <version epoch="0" ver="0.2.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.17</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.1.25
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- New upstream release
  + Version 0.1.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="05b3ed3077c5945be4445b8b08bb3d671e4fee6143b50c3553367bd5fcac4180" name="azure-cli-appservice" arch="src">
  <version epoch="0" ver="0.2.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.17</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.1.25
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- New upstream release
  + Version 0.1.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="588f9b4e0ecfa0fe3f2a39bc3bc7d0c36f8728390fa394f833749dcd17b7fb21" name="azure-cli-backup" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 1.0.1</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 1.0.6
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 1.1.1
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 1.2.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="487a048689f1a1282df400a6fd49a0c759d325afdbbcfba6aabac34be5044ab6" name="azure-cli-backup" arch="src">
  <version epoch="0" ver="1.2.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 1.0.1</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 1.0.6
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 1.1.1
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 1.2.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="7da901f3d3f2f0f53122aa060a68a3ac4d313cf86a9f09fae27a47d15ede977a" name="azure-cli-batch" arch="noarch">
  <version epoch="0" ver="3.3.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 3.1.4</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 3.1.9
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 3.2.0
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 3.3.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="e3d01eb129d28a3d5edacc5d7b2b871fa0cae4489aa5d65b1600dc197d4f10bb" name="azure-cli-batch" arch="src">
  <version epoch="0" ver="3.3.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 3.1.4</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 3.1.9
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 3.2.0
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 3.3.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="e198da072c1fedadfa022bbd8f3bca2a1670cbaa041537fa3c18308313b6b027" name="azure-cli-batchai" arch="noarch">
  <version epoch="0" ver="0.4.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- Initial build
  + Version 0.1.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 0.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.4.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="32b5c22ecb43f891379a90ba7142c3710c4c6449699444a57ef7056ac100a6ce" name="azure-cli-batchai" arch="src">
  <version epoch="0" ver="0.4.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- Initial build
  + Version 0.1.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 0.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.4.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="28e1d37b2e7444089d53621f1d4a8c4476381e714636d36166023a487952d027" name="azure-cli-billing" arch="noarch">
  <version epoch="0" ver="0.2.0" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.1.7
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 0.1.8
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.0
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="b6a319d604f5e9f5fd1f0bf5e43df5e05bd6ddb1eaa7b3e1608064beeede1bcc" name="azure-cli-billing" arch="src">
  <version epoch="0" ver="0.2.0" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.1.7
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 0.1.8
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.0
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="9fd175c570421b492b1ac23e9778f27d4a06b54231d48b3e10c70f76196651e0" name="azure-cli-cdn" arch="noarch">
  <version epoch="0" ver="0.1.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.0.9</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.0.12
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 0.0.14
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.1.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="cc964cf82498343db6767f02b7d9dae3119ad7b63f08736a6651f3916b5527ee" name="azure-cli-cdn" arch="src">
  <version epoch="0" ver="0.1.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.0.9</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.0.12
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 0.0.14
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.1.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="11bdb1d3b360e72ee9b65f8e42730856ee5b0ca9aa74e7fe8457d08081f78180" name="azure-cli-cloud" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 2.0.8</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 2.0.12
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- New upstream release
  + Version 2.0.13
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.1.0
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="efe17edb4ca8a1b8da5f18cfe5ee8f7fce5856dd34c8bd92ed355c90f895994c" name="azure-cli-cloud" arch="src">
  <version epoch="0" ver="2.1.0" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 2.0.8</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 2.0.12
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- New upstream release
  + Version 2.0.13
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.1.0
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="9e27b9390b71bf8e50944fc9d86b620c668464643e8170d5fecb71372e5f9894" name="azure-cli-cognitiveservices" arch="noarch">
  <version epoch="0" ver="0.2.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.8</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.1.10
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 0.1.12
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="89af534dcecea7015ec6afdc7d4473a340b69b6d865ea2f6f7570b3e32d28ce8" name="azure-cli-cognitiveservices" arch="src">
  <version epoch="0" ver="0.2.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.8</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.1.10
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 0.1.12
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="53d65a2946bb8e0def468b53a8f0503756b9e428b515d2ff826e3e1342e84d05" name="azure-cli-command-modules-nspkg" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="lp151.3.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 2.0.1</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="65cbba3ba25933e56aa322c214fe20ce0928ff3696c2f50000bbcde319d2c237" name="azure-cli-command-modules-nspkg" arch="src">
  <version epoch="0" ver="2.0.1" rel="lp151.3.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 2.0.1</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="db0daace2621f0e867d7a3fca4db792a1548f60fa07138f0b96ef9d587d1dff9" name="azure-cli-component" arch="noarch">
  <version epoch="0" ver="2.0.7" rel="lp151.3.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 2.0.7</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="efdeed6dd0a89cc612c726b6f98797862646932f5e800ad4cdb24fba11d8f59b" name="azure-cli-component" arch="src">
  <version epoch="0" ver="2.0.7" rel="lp151.3.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 2.0.7</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="d2eed44c627ae2d08e2d45d674e388496fc238df651e4009df4de0715a9134ea" name="azure-cli-configure" arch="noarch">
  <version epoch="0" ver="2.0.18" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 2.0.11</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 2.0.13
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 2.0.15
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.0.18
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="719b96e3230f3192538fc08019bf275afa399232b405c7410db18b2ab9e42b87" name="azure-cli-configure" arch="src">
  <version epoch="0" ver="2.0.18" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 2.0.11</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 2.0.13
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523966400">- New upstream release
  + Version 2.0.15
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.0.18
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="afef274131425f8514a091036f2311080707f15db433bf9f7b3ad944891ce640" name="azure-cli-consumption" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.2.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.3.0
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.4.0
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="9cdd1017b0878d101dcf26ffe303399d02416d0e845dc358a8f3fe166cb479bb" name="azure-cli-consumption" arch="src">
  <version epoch="0" ver="0.4.0" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.2.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.3.0
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.4.0
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="f878d90c0c6bdc3a8994911c44a2d28a57043a7fcf247cefd726ac55b7d42574" name="azure-cli-container" arch="noarch">
  <version epoch="0" ver="0.3.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.11</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.1.16
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.1.22
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="82a0c6f6af7a2a14c6b9fd34a07d8f64010ecfe827460ef7952dddb24d75ea7c" name="azure-cli-container" arch="src">
  <version epoch="0" ver="0.3.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.11</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.1.16
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.1.22
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="0bd07c2da7b7fbd7a9ffcf244123c898e7a659d0a1dbbda92a17917a9448bf4a" name="azure-cli-core" arch="noarch">
  <version epoch="0" ver="2.0.45" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 2.0.17</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.26
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- New upstream release
  + Version 2.0.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525262400">- Fix typo in Requires:
  + python3-PyOpenSSL =&gt; python3-pyOpenSSL</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- New upstream release
  + Version 2.0.45
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- unrestrict python-PyYAML</changelog>
</package>
<package pkgid="41a737be82a1af557457969c8ff0d6e9cec83600c5424d7129e2f7ec006bbd6f" name="azure-cli-core" arch="src">
  <version epoch="0" ver="2.0.45" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 2.0.17</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.26
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- New upstream release
  + Version 2.0.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525262400">- Fix typo in Requires:
  + python3-PyOpenSSL =&gt; python3-pyOpenSSL</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- New upstream release
  + Version 2.0.45
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- unrestrict python-PyYAML</changelog>
</package>
<package pkgid="5b4051bda5e2084304882eaf650a8ef041a00ee5080baad6f9606c0586f368bf" name="azure-cli-core" arch="noarch">
  <version epoch="0" ver="2.0.45" rel="lp151.2.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 2.0.17</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.26
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- New upstream release
  + Version 2.0.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525262400">- Fix typo in Requires:
  + python3-PyOpenSSL =&gt; python3-pyOpenSSL</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- New upstream release
  + Version 2.0.45
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- unrestrict python-PyYAML</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="fd15d091af6cdaa3cf464328b56fa18beb844a4ad421f8cd6cb5a9f202b196d7" name="azure-cli-core" arch="src">
  <version epoch="0" ver="2.0.45" rel="lp151.2.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 2.0.17</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.26
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- New upstream release
  + Version 2.0.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525262400">- Fix typo in Requires:
  + python3-PyOpenSSL =&gt; python3-pyOpenSSL</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- New upstream release
  + Version 2.0.45
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- unrestrict python-PyYAML</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="998cf912c6dfec13792d8f2cffd7fc59345455bc3410cd3cfd10f417b062bc52" name="azure-cli-core" arch="noarch">
  <version epoch="0" ver="2.0.45" rel="lp151.2.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 2.0.17</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.26
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- New upstream release
  + Version 2.0.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525262400">- Fix typo in Requires:
  + python3-PyOpenSSL =&gt; python3-pyOpenSSL</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- New upstream release
  + Version 2.0.45
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- unrestrict python-PyYAML</changelog>
</package>
<package pkgid="3f823041b1d2d1cf0f9c1ec1152cfb609dcc8063f64f76007d9c7dc5e3b74dc6" name="azure-cli-core" arch="src">
  <version epoch="0" ver="2.0.45" rel="lp151.2.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 2.0.17</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.26
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- New upstream release
  + Version 2.0.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525262400">- Fix typo in Requires:
  + python3-PyOpenSSL =&gt; python3-pyOpenSSL</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- New upstream release
  + Version 2.0.45
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- unrestrict python-PyYAML</changelog>
</package>
<package pkgid="676d7a0c959045e8a7e6134358820bf39cd6ab0cdf16df2e9d6baffa25dde232" name="azure-cli-cosmosdb" arch="noarch">
  <version epoch="0" ver="0.2.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.13</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.1.17
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.1.20
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="b9ed7d3d8a19930239bc2c568cbb29cb8cc360d87449b6cbdcf7251363d18bb8" name="azure-cli-cosmosdb" arch="src">
  <version epoch="0" ver="0.2.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.13</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.1.17
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.1.20
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="73a8c6fd02e345b021fced3ae9806ac8d7e922adeb387609e0e858deb1541158" name="azure-cli-dla" arch="noarch">
  <version epoch="0" ver="0.2.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.0.12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.0.18
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.0.19
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="1de7a9fe3c4c62618a6747c1bbee2305fede6202034338af4b9df120fe32a289" name="azure-cli-dla" arch="src">
  <version epoch="0" ver="0.2.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.0.12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.0.18
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.0.19
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="c75719d93f573162244b31fd312bf1be002fd877141608660152c64af63662ac" name="azure-cli-dls" arch="noarch">
  <version epoch="0" ver="0.1.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.0.14</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.0.19
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.0.21
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.1.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="39f52eba49c607d587ebcdfa7fcf453511ec61e2f0b301604e396737acb1eec7" name="azure-cli-dls" arch="src">
  <version epoch="0" ver="0.1.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.0.14</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.0.19
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.0.21
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.1.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="aa126a551c31d3712a0c003842a56e1405e93817638f91eb0b5ea0eefc26a5ce" name="azure-cli-dms" arch="noarch">
  <version epoch="0" ver="0.1.0" rel="lp151.2.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- Initial build
  + Version 0.1.0</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="eaff5c97e911eb945b3d7dc7a2517a643fc19baba9fcf3b250815d248e1cca39" name="azure-cli-dms" arch="src">
  <version epoch="0" ver="0.1.0" rel="lp151.2.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- Initial build
  + Version 0.1.0</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="d517e81e17b957aa4cf769c65cc1d9fa1b5940181e88f418d9c6891cbd77985f" name="azure-cli-eventgrid" arch="noarch">
  <version epoch="0" ver="0.2.0" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.4</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.1.9
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.1.12
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.0
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="64717cde7262cb0e914db67d27a62cd10d930021a3dbbdf1c285d43592470b30" name="azure-cli-eventgrid" arch="src">
  <version epoch="0" ver="0.2.0" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.1.4</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518004800">- New upstream release
  + Version 0.1.9
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.1.12
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.0
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="caf6b78566f2e4094d72c9d1e6436b80d5926d488bfa15c7c008482a566893b2" name="azure-cli-eventhubs" arch="noarch">
  <version epoch="0" ver="0.2.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- Initial build
  + Version 0.1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="9c533d313508e89f2f5ac1654eafcbd18ce74fded73aaa5f5d9b458e1eb36c4b" name="azure-cli-eventhubs" arch="src">
  <version epoch="0" ver="0.2.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- Initial build
  + Version 0.1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="889d78461f65a6f21fa66db043875b07ac56b2676b33bd3a52e4b4ea234985d1" name="azure-cli-extension" arch="noarch">
  <version epoch="0" ver="0.2.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.0.3</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.0.8
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.0.12
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="bd5682d03f5d4398d399597aff7b813a0813a7786509cfb578c795e5f70b4096" name="azure-cli-extension" arch="src">
  <version epoch="0" ver="0.2.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.0.3</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.0.8
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.0.12
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="964f19245700cba5025dc611f9c8bccce69ef4d36dcdfa164bfb8e7664c3539f" name="azure-cli-feedback" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 2.0.6</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.8
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 2.1.1
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.1.4
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="cd5422d18b2253c1840e2931effd49545b7a9aeeb74d29b3a5304627bc884c90" name="azure-cli-feedback" arch="src">
  <version epoch="0" ver="2.1.4" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 2.0.6</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.8
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 2.1.1
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.1.4
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="c22994db962b95c98255767622001dc53ddca2e6593add4e41b01cadefbf879c" name="azure-cli-find" arch="noarch">
  <version epoch="0" ver="0.2.12" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.2.7</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.2.8
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.2.9
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525435200">- Fix typo in Requires:
  + python3-whoosh =&gt; python3-Whoosh</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.12
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="5894f74c7aeb8b0c1057bf4499e42c5bfdfa6a83c90323e2c071edb0f2aaa01a" name="azure-cli-find" arch="src">
  <version epoch="0" ver="0.2.12" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.2.7</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.2.8
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.2.9
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525435200">- Fix typo in Requires:
  + python3-whoosh =&gt; python3-Whoosh</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.12
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="90d3bf61ba0c0c25723dbb005300ffedbc402634d158bae95a0830fa7ac471f1" name="azure-cli-interactive" arch="noarch">
  <version epoch="0" ver="0.3.28" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.3.10</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.3.15
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.3.19
- Move LICENSE.txt from %doc to %license section
- Remove %{python3_sitelib}/azclishell from %files as it
  has been moved to %{python3_sitelib}/interactive/</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.28
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Add patch to drop compatible releases operator from setup.py,
  required for SLES12 as the setuptools version is too old
  + aci_drop-compatible-releases-operator.patch
- Update Requires from setup.py</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- rmeove weird upper boundary on python-PyYAML</changelog>
</package>
<package pkgid="3f039abed30c329deb26aba765032c9ae365c415deae0e985a54f933f85aaa89" name="azure-cli-interactive" arch="src">
  <version epoch="0" ver="0.3.28" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.3.10</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.3.15
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.3.19
- Move LICENSE.txt from %doc to %license section
- Remove %{python3_sitelib}/azclishell from %files as it
  has been moved to %{python3_sitelib}/interactive/</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.28
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Add patch to drop compatible releases operator from setup.py,
  required for SLES12 as the setuptools version is too old
  + aci_drop-compatible-releases-operator.patch
- Update Requires from setup.py</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- rmeove weird upper boundary on python-PyYAML</changelog>
</package>
<package pkgid="c2e3df3637bdf5cbd7d6a91c1428aafd7435542c016a227b45e1fb2cb7761af6" name="azure-cli-interactive" arch="noarch">
  <version epoch="0" ver="0.3.28" rel="lp151.2.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.3.10</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.3.15
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.3.19
- Move LICENSE.txt from %doc to %license section
- Remove %{python3_sitelib}/azclishell from %files as it
  has been moved to %{python3_sitelib}/interactive/</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.28
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Add patch to drop compatible releases operator from setup.py,
  required for SLES12 as the setuptools version is too old
  + aci_drop-compatible-releases-operator.patch
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="35842f9d630e83a15b12c90e2d73997f6c390d46da300d848fa54e3644cde1c2" name="azure-cli-interactive" arch="src">
  <version epoch="0" ver="0.3.28" rel="lp151.2.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.3.10</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.3.15
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.3.19
- Move LICENSE.txt from %doc to %license section
- Remove %{python3_sitelib}/azclishell from %files as it
  has been moved to %{python3_sitelib}/interactive/</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.28
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Add patch to drop compatible releases operator from setup.py,
  required for SLES12 as the setuptools version is too old
  + aci_drop-compatible-releases-operator.patch
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="e2de00c4f1b7fcb27a071c3b9ad4c13157f7c6d8e409bcc77774e43b64b6d85f" name="azure-cli-interactive" arch="noarch">
  <version epoch="0" ver="0.3.28" rel="lp151.2.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.3.10</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.3.15
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.3.19
- Move LICENSE.txt from %doc to %license section
- Remove %{python3_sitelib}/azclishell from %files as it
  has been moved to %{python3_sitelib}/interactive/</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.28
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Add patch to drop compatible releases operator from setup.py,
  required for SLES12 as the setuptools version is too old
  + aci_drop-compatible-releases-operator.patch
- Update Requires from setup.py</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- rmeove weird upper boundary on python-PyYAML</changelog>
</package>
<package pkgid="895fa37b3684e3720d7141feebef7fe74c1a721fcffb1e081cc9e520061a38a0" name="azure-cli-interactive" arch="src">
  <version epoch="0" ver="0.3.28" rel="lp151.2.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506340800">- Initial build
  + Version 0.3.10</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.3.15
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524052800">- New upstream release
  + Version 0.3.19
- Move LICENSE.txt from %doc to %license section
- Remove %{python3_sitelib}/azclishell from %files as it
  has been moved to %{python3_sitelib}/interactive/</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.28
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Add patch to drop compatible releases operator from setup.py,
  required for SLES12 as the setuptools version is too old
  + aci_drop-compatible-releases-operator.patch
- Update Requires from setup.py</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- rmeove weird upper boundary on python-PyYAML</changelog>
</package>
<package pkgid="9da0282b9bd2ecd6c5baedf6270901f74e3b1a744c82a75118aa2273212a1486" name="azure-cli-iot" arch="noarch">
  <version epoch="0" ver="0.3.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 0.1.12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.1.16
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 0.1.19
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="d1bf0104bd5222bf2f3ab5d27615cbf160be07f1c5fcc026d9409fa9ab16653d" name="azure-cli-iot" arch="src">
  <version epoch="0" ver="0.3.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 0.1.12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.1.16
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 0.1.19
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="d8a3d4171264306152dfcc264065b01e5fc3adf11f891751ceedb5180a0d10e9" name="azure-cli-keyvault" arch="noarch">
  <version epoch="0" ver="2.2.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.11</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.17
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 2.0.21
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.2.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="30f1e43293ccc70ba57c0e6e604675c53345dfaceb7fdbb4b706ce1c330519ea" name="azure-cli-keyvault" arch="src">
  <version epoch="0" ver="2.2.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.11</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.17
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 2.0.21
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.2.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="01492a324af64f149024f68ae6c76516f17d178227735cb6e812c1aef381fda8" name="azure-cli-lab" arch="noarch">
  <version epoch="0" ver="0.1.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 0.0.11</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.0.16
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 0.0.21
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.1.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="ce49cf167a6710f04c6758cac09aed092f0daea67bd12a7595acd89018ecc5c2" name="azure-cli-lab" arch="src">
  <version epoch="0" ver="0.1.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 0.0.11</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.0.16
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 0.0.21
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.1.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="10a42eb8372115080e8eb9c5a6f7c82ffae6f1038ae423682b5c2642af9d6f22" name="azure-cli-monitor" arch="noarch">
  <version epoch="0" ver="0.2.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 0.0.10</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.1.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 0.1.5
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="b7f35c23fb70bea7e4a514736e70951b5cf176bbcaafc098211b1de19c22d832" name="azure-cli-monitor" arch="src">
  <version epoch="0" ver="0.2.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 0.0.10</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.1.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 0.1.5
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.2.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="e136187db07c37085b233ddd589b2eb3de5e922b6177e464d15faeb7adc26b91" name="azure-cli-network" arch="noarch">
  <version epoch="0" ver="2.2.4" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.15</changelog>
  <changelog author="rjschwei@suse.com" date="1509537600">- Add python3-mock as dependency
  + The file custom.py imports mock and has two patch calls. This is odd
    runtime behavior and has been raised upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.22
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 5.0.0
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="20583557c380f2abcf8aef11597ff3ecff7b1437f84f1f9e57e16fcd22999563" name="azure-cli-network" arch="src">
  <version epoch="0" ver="2.2.4" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.15</changelog>
  <changelog author="rjschwei@suse.com" date="1509537600">- Add python3-mock as dependency
  + The file custom.py imports mock and has two patch calls. This is odd
    runtime behavior and has been raised upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.22
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 5.0.0
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="1158b5e59496ac929910a26b789ea1f45999a7f5b95910ccb59b76bad3ccad1e" name="azure-cli-nspkg" arch="noarch">
  <version epoch="0" ver="3.0.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 3.0.1</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 3.0.2
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="fa5e83d61513bd183e407e209c441f8f9853e5d7c14f830e2f727d925b992b45" name="azure-cli-nspkg" arch="src">
  <version epoch="0" ver="3.0.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 3.0.1</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 3.0.2
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="0464bde12b8f2cbb0d6a11bd192e49455a677a0ebfb5c78f2d46e7608044a775" name="azure-cli-profile" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.13</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.18
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 2.0.22
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.1.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="22114b29ca7ae5e55ab6a92dcf04ad4e3c6a37e0fce205eb70c32d181f7a9fc2" name="azure-cli-profile" arch="src">
  <version epoch="0" ver="2.1.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.13</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.18
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 2.0.22
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.1.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="5b40259cdf0a3b524b3bfedb3785dc5b4a39038b9481aa226b53da014241cdf7" name="azure-cli-rdbms" arch="noarch">
  <version epoch="0" ver="0.3.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 0.0.7</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.0.11
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 0.2.1
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py
- Update %description from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="925d527e99b8488d52e9298bd4f5864162eeea5867281d1dc4fffbf0726357eb" name="azure-cli-rdbms" arch="src">
  <version epoch="0" ver="0.3.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 0.0.7</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.0.11
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 0.2.1
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py
- Update %description from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="baecc4689f4a7663c845e04d8a2263523b0388607fccefff1775b6556c8893f5" name="azure-cli-redis" arch="noarch">
  <version epoch="0" ver="0.3.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 0.2.9</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.2.11
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 0.2.12
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="f98f79882570eb4f1bab09d7b4249a5f0f6770f915def3b5446163db76295984" name="azure-cli-redis" arch="src">
  <version epoch="0" ver="0.3.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 0.2.9</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.2.11
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524139200">- New upstream release
  + Version 0.2.12
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="083fa44d89fb37779c533a7cfa3a1cd4107c3cfe82ce1125f4c4ed26f1880668" name="azure-cli-reservations" arch="noarch">
  <version epoch="0" ver="0.3.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- Initial build
  + Version 0.1.1</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="86dcaa8d5c7e70e735e0225444573a1199f115c6645c088b2ca07c9b34b0a297" name="azure-cli-reservations" arch="src">
  <version epoch="0" ver="0.3.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- Initial build
  + Version 0.1.1</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 0.3.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="6fabd9a2250c43853c83a1e9e537f2d1f1ebe1259729763442c514df3e28e608" name="azure-cli-resource" arch="noarch">
  <version epoch="0" ver="2.1.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.15</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.22
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 2.0.27
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.1.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="880cacf89520692bce6bdaa5bd4a853cfa8b369ac10402ce0f4b53320940a6c2" name="azure-cli-resource" arch="src">
  <version epoch="0" ver="2.1.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.15</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.22
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 2.0.27
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537185600">- New upstream release
  + Version 2.1.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="5cb7a9141d3d4eb0340abb0bf16d0315205f2e7700d29dcaecd12eb619d71c19" name="azure-cli-role" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.17
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 2.0.22
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537358400">- New upstream release
  + Version 2.1.4
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="24471275e741f275ef81a856e0b1b1601ad1e3d31a5d7e2449efffd0e0c80524" name="azure-cli-role" arch="src">
  <version epoch="0" ver="2.1.4" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.17
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 2.0.22
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537358400">- New upstream release
  + Version 2.1.4
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="eb8e0f378ee8cb2feb7fda9a24f3783823698d3fecef7ff02d63d4ea9e10341c" name="azure-cli-search" arch="noarch">
  <version epoch="0" ver="0.1.1" rel="lp151.2.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- Initial build
  + Version 0.1.1</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="db6641ee12a4099a51d00120d444af7528edaf229917e77a31be62c277d64995" name="azure-cli-search" arch="src">
  <version epoch="0" ver="0.1.1" rel="lp151.2.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- Initial build
  + Version 0.1.1</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="296e7c5438cb2067872ce01a307812cd014b4357a3782c65da41258a7cfd6fed" name="azure-cli-servicebus" arch="noarch">
  <version epoch="0" ver="0.2.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- Initial build
  + Version 0.1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537358400">- New upstream release
  + Version 0.2.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="4bccbd1ab849e3fbaa5ee9791e87f3ee3854a9184a1d623f82de31e02de700dd" name="azure-cli-servicebus" arch="src">
  <version epoch="0" ver="0.2.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1524484800">- Initial build
  + Version 0.1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537358400">- New upstream release
  + Version 0.2.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="909b66cbccd6fe7bfefdb2c008c8982b1f65f03e1fc9241e7099dc62d233104e" name="azure-cli-servicefabric" arch="noarch">
  <version epoch="0" ver="0.1.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 0.0.4</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.0.9
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 0.0.12
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537358400">- New upstream release
  + Version 0.1.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="eec7a68e9b4fcca6b6cf7962d8c9b1b2be335bde2ef9db6c046c7cceabd4ff06" name="azure-cli-servicefabric" arch="src">
  <version epoch="0" ver="0.1.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 0.0.4</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 0.0.9
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 0.0.12
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537358400">- New upstream release
  + Version 0.1.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="9e81568380b006433fa56df7968aded4822fe4e4084945b26218def9c2fe82f9" name="azure-cli-sql" arch="noarch">
  <version epoch="0" ver="2.1.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.20
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 2.0.25
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537358400">- New upstream release
  + Version 2.1.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="0fd5bb1010133386838659a2b50692d62ee2494bb4d133d6b6ad257d61d13cff" name="azure-cli-sql" arch="src">
  <version epoch="0" ver="2.1.3" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.20
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 2.0.25
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537358400">- New upstream release
  + Version 2.1.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="4abcf39a6ed005374bba8d53ba5e8c7a84729319e23b9a4b0e17e72abf2ea9f5" name="azure-cli-storage" arch="noarch">
  <version epoch="0" ver="2.2.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.16</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.24
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 2.0.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537358400">- New upstream release
  + Version 2.2.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="113fc5b9194a6fdfe367a8206dcb204ac34e5dd6052fc1139e020be74f84f71e" name="azure-cli-storage" arch="src">
  <version epoch="0" ver="2.2.1" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.16</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.24
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 2.0.31
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537358400">- New upstream release
  + Version 2.2.1
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="aa86000a52b8bd0b216f05460b71e513e49796164dc72088ffb471cd798773ac" name="azure-cli-taskhelp" arch="noarch">
  <version epoch="0" ver="0.1.7" rel="lp151.3.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 0.1.7</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="4feb7daa208d74a68a047e38943038ca43ba554b3fd96c206f9884f45a8ae2a2" name="azure-cli-taskhelp" arch="src">
  <version epoch="0" ver="0.1.7" rel="lp151.3.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 0.1.7</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="7e1cb44e47653fd187613b615943bde2200658dc15156512c4dd019b3a1d0fab" name="azure-cli-telemetry" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="lp151.2.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- Initial build
  + Version 1.0.0
- Add patch to relax version numbers in install_requires
  + act_relax-requires-versions.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="8c476bf508097b59a673d97f3d431083763c0d981732440aa7a858aca684cbbf" name="azure-cli-telemetry" arch="src">
  <version epoch="0" ver="1.0.0" rel="lp151.2.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- Initial build
  + Version 1.0.0
- Add patch to relax version numbers in install_requires
  + act_relax-requires-versions.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="411a78157ab7bca71cd561f56d3214bf4304c4528b042e31e5ae5cfdce05fb75" name="azure-cli-vm" arch="noarch">
  <version epoch="0" ver="2.2.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.15</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.25
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 2.0.30
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537358400">- New upstream release
  + Version 2.2.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="5c4baac74001ee37c834290e01ac8cd01912f9c682ad95eef7481ee15aad1336" name="azure-cli-vm" arch="src">
  <version epoch="0" ver="2.2.2" rel="lp151.2.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506427200">- Initial build
  + Version 2.0.15</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1518091200">- New upstream release
  + Version 2.0.25
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Install HISTORY.rst into doc directory
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 2.0.30
- Move LICENSE.txt from %doc to %license section
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537358400">- New upstream release
  + Version 2.2.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
</package>
<package pkgid="76cf6495bfe96fd17ea882b548f6e89d730d8c4839e67d0ce2b58573f62249e5" name="baloo5" arch="src">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="5bcb9070f8dd4e2010b53cdc71018d455520a133c564c9b5687307220bf6c600" name="baloo5-devel" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="2fd046a86313cf3d30aae6cdb0dc2a679e0526429cd6927e6c3e4a17ca89ff57" name="baloo5-devel" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="9c529c0f775ec11b2263deb80403fca146f60871b58c61d77c96b92d9daba258" name="baloo5-file" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="163356c910c8dd1da029843b8ac8018a1ffd713e9ebcf27f242876504db99e6d" name="baloo5-file" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="2b620dd72844ed91b2073179c4f72dd87bddccb06418f792e74de56d61453cbe" name="baloo5-file-lang" arch="noarch">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="7c6a151b7daeaf3685fc96d0866a76580c7d5aaeb46e1402d3cdc9e0eece9b6e" name="baloo5-imports" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="7f5e0f3230a3e118cd4f07e0f528541eb2d9c77f17cdec447ce42cd571f0fbc6" name="baloo5-imports" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="4d1a29e09969b1ba1936342c3592a6fd2245478e92c8b04ec508663aabd65eb5" name="baloo5-imports-lang" arch="noarch">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="11df3983a631769ffd7b3b7c9a25818fd55705c55ca353997eda97ef05c9e5f7" name="baloo5-kioslaves" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="dc084a1943a874d3c9962b365f1315630e7203ae37210309d96ed2347b4c39f9" name="baloo5-kioslaves" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="25893e02abeac2d4f4bbcd6892cede2afa9b0af2ed40b65fffb951b82ffa4ef1" name="baloo5-kioslaves-lang" arch="noarch">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="b5146d10bbf3b54bf619b102afaf5fb855e3f86e141e9251a15d4796fdd8bf7c" name="baloo5-tools" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="05684b082d69ade9cfd36f9c91577ee3f013bbb13fb250fb92d8809964b1c336" name="baloo5-tools" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="60a30ba5346c4f654d311b47d5b27c5ced4c4711b63dd6218ebcba2a3c971677" name="baloo5-tools-lang" arch="noarch">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * balooctl status: process all arguments
  * Remove obsolete reviewboardrc file
  * Fix multiple word tag queries.
  * Simplify rename conditions.
  * Fix incorrect UDSEntry display name.
  * Make it compiles with autogenerated debug file
  * Revert "Revert "Autogenerate debug file""
  * Revert "Autogenerate debug file" I'm backing all of this out for now as fixing this properly is non-trivial and the build is broken on at least one platform due to this change.
  * Revert "Complete removal of references to baloodebug.cpp which was deleted in the previous commit"
  * Complete removal of references to baloodebug.cpp which was deleted in the previous commit
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * baloo-tools: Make all output messages translatable
  * build baloo executables with "ecm_mark_nongui"
  * balooctl status: Produce parseable output
  * Fix KIO Slave tagged folder deep copies. This breaks listing tagged folders in the tag tree, but is better than broken copies.
  * Skip queueing newly unindexable files and remove them from the index immediately.
  * Revert "Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed."
  * baloosearch: Send summary to stderr
  * balooctl status: translatable message
  * Delete newly unindexable moved files from the index.
  * Simplify BasicIndexingJob xattr indexing.
  * Changing file xattrs (tag, rating, comment) should cause a file to be reindexed. If the ctime changed, the file can be reindexed.
  * validate baloo_file.desktop
  * balooctl use global fileIndexDbPath().</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * balooctl: Remove checkDb option (kde#380465)
  * indexerconfig: Describe some functions
  * indexerconfig: Expose canBeSearched function
  * balooctl monitor: Wait for dbus interface
  * fileindexerconfig: Introduce canBeSearched()</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Make list of subterms in debug output easier to spot
  * Simplify Term operator&amp;&amp; and ||
  * advancedqueryparsertest: Add more tests
  * Do not retrieve document ID for skipped result entries
  * Do not retrieve mtime from database repeatedly when sorting
  * Fix unitialized value warning, nullptr access
  * Do not export databasesanitizer by default
  * baloodb: Add experimental message
  * Introduce baloodb CLI tool
  * sanitizer: Move implementation into Baloo namespace
  * Introduce sanitizer class
  * autotests: Refactor fileindexerconfigtest
  * [FileIndexerConfig] Delay populating folders until actually used
  * src/kioslaves/search/CMakeLists.txt - link to Qt5Network following changes to kio
  * Remove not necessary QtCore and co
  * balooctl: checkDb should also verify the last known url for the documentId.
  * balooctl monitor: Resume to wait for service
  * autotest: port to QSignalSpy::wait().</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Split baloo5-lang into subpackages</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Avoid infinite loops when fetching the URL from DocumentUrlDB (kde#378754)
  * add missing license
  * add Baloo DBus signals for moved or removed files
  * Add missing override
  * Fix extract i18n from .h file
  * [API dox] Note CamelCase include commands for classes
  * Install pri file for qmake support &amp; document it in metainfo.yaml
  * baloodb: Add clean command
  * balooshow: Colorize only when attached to terminal
  * Remove FSUtils::getDirectoryFileSystem
  * Avoid hardcoding of filesystems supporting CoW
  * Allow disabling of CoW to fail when not supported by filesystem
  * databasesanitizer: Use flags for filtering
  * Fix merging of terms in the AdvancedQueryParser
  * Use QStorageInfo instead of a homegrown implementation
  * sanitizer: Improve device listing
  * fix message ectraction by using find
  * Immediately apply termInConstruction when term is complete
  * Handle adjacent special characters correctly (kde#392620)
  * Add test case for parsing of double opening '(('
  * Fix another syntax error on windows build
  * Fix syntax error on windows build
  * Use statbuf consistently</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Terminate query execution early if subterm returns empty result set
  * Avoid crash when reading corrupt data from document terms db (kde#392878)
  * Use override
  * handle string lists as input
  * fix some issues reported by clazy
  * Ignore more types of source files (kde#394002, kde#390932)</changelog>
  <changelog author="wbauer@tmo.at" date="1528977600">- Recommend corresponding lang packages</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused entry X-KDE-DBus-ModuleName from the kded plugin metadata
  * [tags_kio] The url query should be a key-value pair.
  * The power state signal should only be emitted when the power state changes.
  * baloodb: Make changes to cmdline arg description after rename prune -&gt; clean
  * Clearly show duplicate filenames in tag folders.</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * [tags_kio] Clean up parser debug and comments.
  * [tags_kio] Fix multiple filename copies.
  * Revert "[tags_kio] Use UDS_URL instead of UDS_TARGET_URL."
  * [tags_kio] Use UDS_URL instead of UDS_TARGET_URL.
  * [tags_kio] Query target filepaths instead of appending paths to the file UDS entry.
  * Support special URLs for finding files of a certain type
  * Avoid manipulation of lists with quadratic complexity
  * Use non deprecated fastInsert in baloo</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Fixed a typo in the index size output (kde#397843)
  * Remove src not dest url when a url is newly unindexable.
  * [tags_kio] Simplify the filename path query matching by using a capture group.
  * Revert "Skip queueing newly unindexable files and remove them from the index immediately."
  * [tags_kio] Simplify file path lookup while loop.</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Add calls to KIO::UDSEntry::reserve in timeline/tags ioslaves
  * [balooctl] Flush buffered "Indexing &lt;file&gt;" line when indexing starts
  * [FileContentIndexer] Connect finished signal from extractor process
  * [PositionCodec] Avoid crash in case of corrupt data (kde#367480)
  * Fix invalid char constant
  * [Balooctl] remove directory parent check (kde#396535)
  * Allow removing non-existent folders from include and exclude lists (kde#375370)
  * Use non deprecated fastInsert in baloo
  * Use String to store UDS_USER and UDS_GROUP of String type. (kde#398867)
  * [tags_kio] Fix parenthesis. Somehow this got by my code checker.
  * [tags_kio] Remove intermediate QString.
  * Use QString's multi-arg with multiple string args
  * Avoid potential detach on range-loops with non-const Qt containers
  * Compile with strict compile flags
  * Exclude genome files from indexing
  * Fix minor EBN issues</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Remove duplicated code for rating property
  * Extend unit tests to check comparisons of multi-digit numeric properties
  * Fix searches for rating 10 (5 stars) (kde#357960)
  * Remove extra spaces from Debug output, insert delimiters between fields
  * Use isEmpty()
  * Avoid writing unchanged data to terms dbs
  * Reserve space in pending operations vector
  * Remove unused QByteArray include
  * Replace Latin1 character remnant with escaped UTF-8 sequence
  * Cleanup comments for MS Office mimetypes in typesForMimetype
  * Remove unused wdfInc parameter for addTerm and addPositionTerm
  * Use append instead of operator+= when appending to an QVector&lt;int&gt;
  * Do not add Type::Document/Presentation/Spreadsheet twice for MS Office docs
  * Add missing return in error/fixup path
  * actually initialize kcrash properly
  * Add unittest for document replacement
  * Make sure there is only one MTime per document in the MTimeDB
  * Extend diagnostic output for DB autotests
  * Use new syntax
  * [Extractor] Use QDataStream serialization in place of cooked one
  * [Extractor] Replace homegrown IO handler with QDataStream, catch HUP
  * Unbreak build with BUILD_QCH=TRUE</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Extend PositionCodec unit tests, better code coverage
  * Move typesForMimeType helper from BasicIndexingJob to anonymous namespace
  * Fix mistakes introduced in a632a72a
  * Don't check if file is directory based on mime-type
  * Fixed link to the coding style wiki page
  * add documentation to result class
  * Move internal helper from BasicIndexingJob to anonymous namespace
  * Add "image/svg" as Type::Image to the BasicIndexingJob
  * Minor optimization and cleanup for PositionCodec
  * Avoid potential nullptr access for Document, use reference instead
  * RFC: Add unit test for splitting of numbers in TermGenerator
  * Use Compact json formatting for storing document metadata
  * Remove unused map() getter from Result
  * remove unused docId from result
  * Use escaped UTF-8 sequence instead of Latin1 characters, minor cleanups
  * Treat uints the same as ints
  * Add unittest to check if commiting the same change twice works
  * Add unit test for position DB</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Fix ResultIterator
  * [tags_kio] Disable access with a double slashed url, i.e. "tags://". (kde#400594)
  * Instantiate QApplication before KCrash/KCatalog
  * Ignore all non-storage deviceAdded signals from Solid
  * IndexerConfig: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Use the nicer K_PLUGIN_CLASS_WITH_JSON
  * Remove Qt 5.10 checks now that we require it as min version</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Do-not-use-qfileinfo-metadatachangetime-if-Qt-lt-5.10.patch to
  revert a change by upstream that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1551268800">- Fix crashing kdeinit, add
  0001-Check-string-length-to-avoid-crash-for-tags-URL.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1579003200">- Add upstream patches to avoid potential database corruption and
  crashes (boo#1157380, kde#372880):
  * add-baloo-engine-debugging-category.patch
  * Replace-several-Q_ASSERTs-with-proper-checks.patch
  * Baloo-engine-treat-every-non-success-code-as-a-failure.patch
  * Fix-regression-when-opening-DB-in-read-write-mode.patch
  * Revert-renaming-of-Transaction_abort.patch</changelog>
</package>
<package pkgid="9d9092296993cf30ced4d0f8ba93dae8a7357e43dea28998e3d5dbca9d334a95" name="balsa" arch="src">
  <version epoch="0" ver="2.5.5" rel="lp151.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1322222400">- Update to version 2.4.11:
  + more userfrendly view of filters' conditions
  + Bugs fixed: bgo#659390
  + Updated translations.
- Drop balsa-fix-linking.patch: fixed upstream.
- Remove call to gnome-autogen.sh and gnome-common BuildRequires.</changelog>
  <changelog author="dimstar@opensuse.org" date="1326369600">- Build openSUSE &gt; 12.1 against gmime 2.6: Conditionally change
  pkgconfig(gmime-2.4) BuildRequires to pkgconfig(gmime-2.6).
- Add balsa-gmime-2_6.patch: Allow building against gmime 2.6.
- Add libtool BuildRequires and call to bootstrap.sh as the patch
  above touches the build system.</changelog>
  <changelog author="vuntz@opensuse.org" date="1335355200">- Update to version 2.4.12:
  + New crypto implementation.
  + Build with GMime 2.6.0.
  + Various other code changes.
  + Updated translations.
- Drop balsa-gmime-2_6.patch: fixed upstream.
- Remove libtool BuildRequires and call to bootstrap.sh as they
  were only needed for above patch.
- Remove hack to rename sr@Latn translation to sr@latin: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1351684800">- Update to version 2.4.13:
  + Fix long-line POP3 bug.
  + Bugs fixed: bgo#684124.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1361880000">- Update to version 2.4.14:
  + Drop legacy gnome-icons-theme dependency.
  + Updated translations.
- Remove pkgconfig(gnome-icon-theme) BuildRequires, following
  upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1365249600">- Update to version 2.5.0:
  + Making gtk3 build the official one.
- Rework BuildRequires for the large rewrite/port to GTK3:
  + Removed: pkgconfig(gconf-2.0), pkgconfig(gmime-2.4),
    pkgconfig(gnome-keyring-1), pkgconfig(gtk+-2.0),
    pkgconfig(gtksourceview-2.0), pkgconfig(gtkspell-2.0),
    pkgconfig(libbonobo-2.0), pkgconfig(libcanberra-gtk),
    pkgconfig(libgnome-2.0), pkgconfig(libgnomeui-2.0),
    pkgconfig(webkit-1.0)
  + Added: pkgconfig(gtk+-3.0), pkgconfig(gtksourceview-3.0),
    pkgconfig(gtkspell3-3.0), pkgconfig(libcanberra-gtk3),
    pkgconfig(libsecret-1), pkgconfig(webkitgtk-3.0).
- Add balsa-gtksourceview.patch: Fix build with gtksourceview 3.8.</changelog>
  <changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 2.5.1:
  + Mew message header widget.
  + WebkitGtk2 widget integration.
  + Ported to GNetworkMonitor.
  + Yet another documentation port.
  + Initial config assistant improvements.
- Change --with-html-widget=webkit configure parameter to
  - -with-html-widget=webkit2, to switch to WebKit2.
- Replace gnome-doc-utils-devel BuildRequires with yelp-tools,
  following upstreams port to the new documentation infrastructure.
- Drop balsa-gtksourceview.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1410264000">- Add balsa-support-webkit2gtk-4.0.patch: Support building with
  webkit2gtk3 (bgo#736493).
- Add conditional pkgconfig(webkit2gtk-4.0) BuildRequires for
  versions newer than 1310 as the above patch adds support for it.
- Add libtool BuildRequires and call to autoreconf, as above patch
  touches the build system.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412856000">- Starting with openSUSE 13.2, compface was split into a -devel and
  library package. Conditionally BuildRequires compface-devel
  (openSUSE &gt;= 1320).</changelog>
  <changelog author="zaitor@opensuse.org" date="1418731200">- Make comface-devel BuildRequires only for releases newer than
  13.2, the split never made it into release.</changelog>
  <changelog author="dimstar@opensuse.org" date="1433160000">- Update to version 2.5.2:
  + Silence some autoconf and automake complaints.
  + Clean up store-address dialog.
  + Do not use header bar in GtkMessageDialog, it does nothing.
  + Use headerbars.
  + Deprecation cleanups.
  + Abandon buttons with both an icon and text, and use a symbolic
    icon where we keep the icon.
  + Enable the request of Delivery Status Notifications.
  + Disable SSLv3, with an option in the code to override, and
    enable TLSv1.1 and 1.2.
  + balsa.appdata.xml: new appdata file.
  + Fix S/MIME sending and Outlook2007 reception (bgo#720423).
- Drop balsa-support-webkit2gtk-4.0.patch: fixed upstream.
- Drop libtool BuilfRequires and call to autoreconf, as we no
  longer carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1433246400">- Drop conditional pkgconfig(webkit2gtk-3.0) BuildRequires, as
  balsa now only supports webkit2gtk-4.0.
- Stop passing no longer recognized options:
  - -disable-scrollkeeper and --with-unique. Also remove a few
  obsolete conditionals.</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Fix build for Leap 42.1 and 42.2, via tweaking conditional for
  compface/compface-devel BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 2.5.3:
  + More bugfixes and ports.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503230400">- Drop obsolete pkgconfig(unique-1.0) BuildRequires: No longer
  needed, nor used.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512302400">- Add balsa-build-ssl-1.1.patch: Fix build with new openssl 1.1.0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1516276800">- Clean up spec:
  + Drop old and unused pre_checkin.sh for TOUCHSCREEN_OPTIMIZATION
    and all conditionals related to it (base_name et al.).
  + Fixup compface BuildRequires to only be for non-openSUSE.
  + Drop translation-update-upstream BuildRequires and macro.</changelog>
  <changelog author="jengelh@inai.de" date="1516881600">- Replace untrue description.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523102400">- Update to version 2.5.5:
  + Crypto performance improvements.
  + Updates to match glib-2.56 API changes.
  + Fix use-after-free bugs.
  + Improve replying to HTML-only messages.
  + Low level networking re-done.
  + Multiple bugfixes.
- Drop balsa-build-ssl-1.1.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Add pkgconfig(gnutls) and python3-html2text BuildRequires: New
  dependencies.
- Drop conditional compface BuildRequires.
- Add conditional for pkgconfig(enchant) and new
  pkgconfig(enchant-2) BuildRequires.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1597060800">- Add balsa-CVE-2020-16118-boo1174711.dif: CVE-2020-16118: balsa:
  a malicious server or MITM can trigger a NULL pointer dereference
  Fixes boo#1174711.</changelog>
</package>
<package pkgid="91b72cd4f4848f5ab43f8d28385ce50c36be899bdf0c68bb653a7ec8beddd926" name="balsa" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418731200">- Make comface-devel BuildRequires only for releases newer than
  13.2, the split never made it into release.</changelog>
  <changelog author="dimstar@opensuse.org" date="1433160000">- Update to version 2.5.2:
  + Silence some autoconf and automake complaints.
  + Clean up store-address dialog.
  + Do not use header bar in GtkMessageDialog, it does nothing.
  + Use headerbars.
  + Deprecation cleanups.
  + Abandon buttons with both an icon and text, and use a symbolic
    icon where we keep the icon.
  + Enable the request of Delivery Status Notifications.
  + Disable SSLv3, with an option in the code to override, and
    enable TLSv1.1 and 1.2.
  + balsa.appdata.xml: new appdata file.
  + Fix S/MIME sending and Outlook2007 reception (bgo#720423).
- Drop balsa-support-webkit2gtk-4.0.patch: fixed upstream.
- Drop libtool BuilfRequires and call to autoreconf, as we no
  longer carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1433246400">- Drop conditional pkgconfig(webkit2gtk-3.0) BuildRequires, as
  balsa now only supports webkit2gtk-4.0.
- Stop passing no longer recognized options:
  - -disable-scrollkeeper and --with-unique. Also remove a few
  obsolete conditionals.</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Fix build for Leap 42.1 and 42.2, via tweaking conditional for
  compface/compface-devel BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 2.5.3:
  + More bugfixes and ports.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503230400">- Drop obsolete pkgconfig(unique-1.0) BuildRequires: No longer
  needed, nor used.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512302400">- Add balsa-build-ssl-1.1.patch: Fix build with new openssl 1.1.0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1516276800">- Clean up spec:
  + Drop old and unused pre_checkin.sh for TOUCHSCREEN_OPTIMIZATION
    and all conditionals related to it (base_name et al.).
  + Fixup compface BuildRequires to only be for non-openSUSE.
  + Drop translation-update-upstream BuildRequires and macro.</changelog>
  <changelog author="jengelh@inai.de" date="1516881600">- Replace untrue description.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523102400">- Update to version 2.5.5:
  + Crypto performance improvements.
  + Updates to match glib-2.56 API changes.
  + Fix use-after-free bugs.
  + Improve replying to HTML-only messages.
  + Low level networking re-done.
  + Multiple bugfixes.
- Drop balsa-build-ssl-1.1.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Add pkgconfig(gnutls) and python3-html2text BuildRequires: New
  dependencies.
- Drop conditional compface BuildRequires.
- Add conditional for pkgconfig(enchant) and new
  pkgconfig(enchant-2) BuildRequires.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1597060800">- Add balsa-CVE-2020-16118-boo1174711.dif: CVE-2020-16118: balsa:
  a malicious server or MITM can trigger a NULL pointer dereference
  Fixes boo#1174711.</changelog>
</package>
<package pkgid="ddc89b43b74909d5709ae3877d50b9d70575c99b1547dc0a909e01463395506f" name="balsa-lang" arch="noarch">
  <version epoch="0" ver="2.5.5" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418731200">- Make comface-devel BuildRequires only for releases newer than
  13.2, the split never made it into release.</changelog>
  <changelog author="dimstar@opensuse.org" date="1433160000">- Update to version 2.5.2:
  + Silence some autoconf and automake complaints.
  + Clean up store-address dialog.
  + Do not use header bar in GtkMessageDialog, it does nothing.
  + Use headerbars.
  + Deprecation cleanups.
  + Abandon buttons with both an icon and text, and use a symbolic
    icon where we keep the icon.
  + Enable the request of Delivery Status Notifications.
  + Disable SSLv3, with an option in the code to override, and
    enable TLSv1.1 and 1.2.
  + balsa.appdata.xml: new appdata file.
  + Fix S/MIME sending and Outlook2007 reception (bgo#720423).
- Drop balsa-support-webkit2gtk-4.0.patch: fixed upstream.
- Drop libtool BuilfRequires and call to autoreconf, as we no
  longer carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1433246400">- Drop conditional pkgconfig(webkit2gtk-3.0) BuildRequires, as
  balsa now only supports webkit2gtk-4.0.
- Stop passing no longer recognized options:
  - -disable-scrollkeeper and --with-unique. Also remove a few
  obsolete conditionals.</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Fix build for Leap 42.1 and 42.2, via tweaking conditional for
  compface/compface-devel BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 2.5.3:
  + More bugfixes and ports.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503230400">- Drop obsolete pkgconfig(unique-1.0) BuildRequires: No longer
  needed, nor used.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512302400">- Add balsa-build-ssl-1.1.patch: Fix build with new openssl 1.1.0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1516276800">- Clean up spec:
  + Drop old and unused pre_checkin.sh for TOUCHSCREEN_OPTIMIZATION
    and all conditionals related to it (base_name et al.).
  + Fixup compface BuildRequires to only be for non-openSUSE.
  + Drop translation-update-upstream BuildRequires and macro.</changelog>
  <changelog author="jengelh@inai.de" date="1516881600">- Replace untrue description.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523102400">- Update to version 2.5.5:
  + Crypto performance improvements.
  + Updates to match glib-2.56 API changes.
  + Fix use-after-free bugs.
  + Improve replying to HTML-only messages.
  + Low level networking re-done.
  + Multiple bugfixes.
- Drop balsa-build-ssl-1.1.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Add pkgconfig(gnutls) and python3-html2text BuildRequires: New
  dependencies.
- Drop conditional compface BuildRequires.
- Add conditional for pkgconfig(enchant) and new
  pkgconfig(enchant-2) BuildRequires.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1597060800">- Add balsa-CVE-2020-16118-boo1174711.dif: CVE-2020-16118: balsa:
  a malicious server or MITM can trigger a NULL pointer dereference
  Fixes boo#1174711.</changelog>
</package>
<package pkgid="af0d050faf3156492d68ed3c8c8baa28fa7aab2c4c8a70c1e3b5100539e6cb74" name="bash" arch="i586">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="6105682a89e91ac1fef3b868f6f711423bea52abb9fa919bea39df55bf1debb0" name="bash" arch="src">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="c65d17491325e5d7546a77a7f1b7390b0050c2434e5670025ed3f292aa6b3519" name="bash" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="4d02d8c0804293dc3c6798a8d94db8e4ab6c2ea3e36430c19d7b4c17bc5cabf5" name="bash-devel" arch="i586">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="16bfb19843d22ed5662e737fe7138aff4505c7c851433b90de093305703d685a" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="4ca0294cc32b83963f3375b4c5ab9f9551b06f31179aa0fd8a4c102faf3b2e23" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="462c5166635bb9e3be7593992ad2c6612bbc25452dfbca02ed8bbbef5e07e52d" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="67207b7357a9637bfd071cee2bf4ffb5ec6a7b1990fbb250f8b83d91332b004d" name="bash-loadables" arch="i586">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="de8e08d3a9798ddaa090a8d11ec70913ae4236bf52f67eb8b513ed7d6ccd8d95" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="58c596161f44331528d146e256c521cbf72a82e8aa97bc99b267ffc7bbfdca2f" name="bcache-tools" arch="src">
  <version epoch="0" ver="1.0.9" rel="lp151.2.3.1"/>
  <changelog author="ro@suse.de" date="1298289600">- create package</changelog>
  <changelog author="jengelh@inai.de" date="1361880000">- Update to new current snapshot
  42c182c6ab1530b5e3b18893f284da3eaec46e74 (0.1.g45)</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Move udev rules to /usr/lib/udev/rules.d</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of another patch from 0001- to 1001- to indicate this
  is specific patch for SUSE,
  - 1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1583236800">- bcache-tools: Allow user to set label for device (bsc#1139948)
  0001-bcache-tools-Allow-user-to-set-label-for-device.patch
- bcache-tools: Add 'label' field (bsc#1139948)
  0002-bcache-tools-Add-label-field.patch
- bcache-tools: Add parameter check (bsc#1139948)
  0003-bcache-tools-Add-parameter-check.patch
- bcache-tools: Bcache command should follow symlinks (bsc#1139948)
  0004-bcache-tools-Bcache-command-should-follow-symlinks.patch
- bcache-tools: Add blkdiscard for cache dev (bsc#1139948)
  0005-bcache-tools-Add-blkdiscard-for-cache-dev.patch
- make-bcache: remove reduncant code (bsc#1139948)
  0006-make-bcache-remove-reduncant-code.patch
- bcache-tools: rename 2 file names (bsc#1139948)
  0007-bcache-tools-rename-2-file-names.patch
- crc64: use crc64 routines defined in Linux kernel (bsc#1139948)
  0008-crc64-use-crc64-routines-defined-in-Linux-kernel.patch
- bitwise.h: swap bitwise for different CPU endians (bsc#1139948)
  0009-bitwise.h-swap-bitwise-for-different-CPU-endians.patch
- make.c: add swap_sb() to supprt big endian machine (bsc#1139948)
  0010-make.c-add-swap_sb-to-supprt-big-endian-machine.patch
- udev: do not rely on DRIVER variable (bsc#1139948)
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
</package>
<package pkgid="1ffa4a5ad9e6ad7a08806f81f3dbb55710f03f5aacc807530805218461f6a860" name="bcache-tools" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="lp151.2.3.1"/>
  <changelog author="ro@suse.de" date="1298289600">- create package</changelog>
  <changelog author="jengelh@inai.de" date="1361880000">- Update to new current snapshot
  42c182c6ab1530b5e3b18893f284da3eaec46e74 (0.1.g45)</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Move udev rules to /usr/lib/udev/rules.d</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of another patch from 0001- to 1001- to indicate this
  is specific patch for SUSE,
  - 1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1583236800">- bcache-tools: Allow user to set label for device (bsc#1139948)
  0001-bcache-tools-Allow-user-to-set-label-for-device.patch
- bcache-tools: Add 'label' field (bsc#1139948)
  0002-bcache-tools-Add-label-field.patch
- bcache-tools: Add parameter check (bsc#1139948)
  0003-bcache-tools-Add-parameter-check.patch
- bcache-tools: Bcache command should follow symlinks (bsc#1139948)
  0004-bcache-tools-Bcache-command-should-follow-symlinks.patch
- bcache-tools: Add blkdiscard for cache dev (bsc#1139948)
  0005-bcache-tools-Add-blkdiscard-for-cache-dev.patch
- make-bcache: remove reduncant code (bsc#1139948)
  0006-make-bcache-remove-reduncant-code.patch
- bcache-tools: rename 2 file names (bsc#1139948)
  0007-bcache-tools-rename-2-file-names.patch
- crc64: use crc64 routines defined in Linux kernel (bsc#1139948)
  0008-crc64-use-crc64-routines-defined-in-Linux-kernel.patch
- bitwise.h: swap bitwise for different CPU endians (bsc#1139948)
  0009-bitwise.h-swap-bitwise-for-different-CPU-endians.patch
- make.c: add swap_sb() to supprt big endian machine (bsc#1139948)
  0010-make.c-add-swap_sb-to-supprt-big-endian-machine.patch
- udev: do not rely on DRIVER variable (bsc#1139948)
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
</package>
<package pkgid="f2558f8b61ce7f1b7731a6a96482a3a003801bbc97b271095afd86fdff36afdc" name="bcc" arch="src">
  <version epoch="0" ver="0.5.0" rel="lp151.12.3.1"/>
  <changelog author="idonmez@suse.com" date="1488456000">- Add remove-isystem.patch to unconditionally removing -isystem,
  looks like the gcc check is broken.
- Add armv7.patch to disable __uint128_t usage which does not
  exist on ARMv7.
- Always use clang as C compiler, note that the build system will
  always use clang++ ad CXX compiler if it finds it.</changelog>
  <changelog author="glin@suse.com" date="1489147200">- Update to 0.3.0
  + Added s390x support. Needs 4.10 Kernel
  + Restrict rewrite of unary operators to dereference operator
  + cmake: Explicitly mark static libraries as such
  + Fix bpf_dins_pkt rewrite in BinaryOperator
  + cc: Symbol resolution with multiple executable regions per
    module
  + cc: Fix assertion for debug builds
  + cc: Don't parse the same module multiple times for USDT probes
  + add XDP return values to python interface
  + python: handle null module in BPF.sym
  + filetop: support specifying sort column via cmdline argument
  + cc: Retry symbol resolution using perfmap
  + cc: Handle nested functions correctly when resolving symbols</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 0.3.0+git1496334311.6fa3681
  + Improve PerfEventArray clean up
  + make libbpf standalone-ready
  + Add support for generic XDP mode
  + Add option to control bcc_elf_foreach_sym behavior
  + Add bpf_get_first_key helper
  + Enable recursive scanf support for char[] as string
  + Fix computation of LUAJIT_INCLUDE_DIR
  + cc: Work around verifier error when reading USDT probe arguments
  + Disable non-static function calls
  + Added the option(USINGISYSTEM) of Cmake for controling whether
    using -isystem. (#1064)
  + softirqs: Migrate to kernel tracepoints instead of kprobes
    (#1091)
  + lua/bpf: implemented packet direct access
  + lua/bpf: support for NET_OFF for dissector
  + KVM hypercall analysis example (#1082)
  + cc: add support for prog table
  + cc: add support for array table
  + Add TableStorage class for wrapping bpf map tracking
  + funcslower: Trace slow kernel or user function calls
  + map.insert bcc helper to expose the BPF_NOEXIST flag (#1085)
  + bcc container improvements (#1051)
  + cc: define load_func and unload_func public
  + Python 3 compatibility fixes around string handling (#986)
  + Verify format specifiers in bpf_trace_printk in rewriter
  + Add build option for installing C++ examples
  + bpflist: Display processes with running BPF programs and maps
  + python: Allow module=None when resolving kernel symbols
  + mdflush: Add missing #include &lt;linux/bio.h&gt;
- Enable AArch64 build (FATE#322227)
- Remove remove-isystem.patch since it can be controlled by the
  cmake option now.
- Add gcc-c++ to the BuildRequires and switch to gcc/g++</changelog>
  <changelog author="glin@suse.com" date="1503057600">- Update to 0.3.0+git1502955391.9de830a
  + avoid large map memory allocation in userspace
  + python - set attach_xdp's default flag value to 0
  + have uniform uprobe event names for python and C++
  + Remove extra S_MAXSTAT array allocation in some tools
  + Omit include of ptrace.h for empty usdt contexts
  + Add clang check for -nopie option
  + Correct commit id for BPF_FUNC_get_socket_cookie
  + tools/tcptracer: add timestamp option
  + Since LUA_GLOBALSINDEX is obsolete from Lua 5.2, use
    lua_getglobal function instead.
  + better state default value handling
  + add --state to offcputime
  + tcptop: Filter out negative values in receive probe
  + tcptop: Cleanup argument parsing
  + Use unsigned conversion specifier for nlmsg_pid
  + Fix wrong netlink port id check
  + 1. Use more safe snprintf instead of sprintf;
    2. Modify procfilename buffer length in bcc_procutils_language
    function.
  + permit multiple pids attaching to the same probe
  + generate proper usdt code to prevent llvm meddling with
    ctx-&gt;#fields
  + MySQL tracing without USDT (#1239)
  + Fix a clang memory leak
  + Update bpf.h and virtual_bpf.h to 4.13-rc1
  + Fix trace.py for library filenames containing colons (#1252)
  + cc: Add open_perf_event to the C/C++ API (#1232)
  + memleak: expand allocator coverage (#1214)
  + libbpf: fix build warning on setns (#1246)
  + usdt: Use ProcMountNS
  + proc: Enhance bcc_mapping_is_file_backed
  + Fix bcc.lua build issue in Ubuntu 17.04
  + Added helpers for BPF_PERCPU_ARRAY (#1230)
  + Add an option to strip leading zeros from histograms (#1226)
  + gethostlatency was rounding to full ms
  + Change clang frontend optimization level from 0 to 2
  + fix cc: error: unrecognized command line option -no-pie
  + fix incorrect code generation in usdt</changelog>
  <changelog author="glin@suse.com" date="1510228800">- Update to 0.4.0
  + Fix helper to access stack pointer for powerpc
  + bpf: rename helper function bpf_get_stackid
  + bpf: print out the src debug info to a temporary file
  + attempt to compile with system bpf.h if default compile failed
  + sync src/cc/compat/linux headers with latest net-next
  + Fix segfault with enumerations
  + Allow BCC to parse vDSO symbols
  + libbpf: print error to error stream
  + Avoid potential SEGFAULT when resolving Kernel symbols
  + Fix 'tools/statsnoop' from failing to attach kprobes
  + Update USDT argument constraint for powerpc and powerpc64
  + examples:dns_matching: make it work as DNS sniffer
  + add debug option to dump asm insns embedded with source
  + examples:dns_matching: helper function for adding cache entry
  + Traces external pointers in parenthesized expressions
  + examples:dns_matching: fixed loop break condition
  + Fix bcc_resolve_global_addr on shared libraries
  + BCC macro for the creation of LPM trie maps (#1359)
  + bpf_probe_read*: src argument should be const void *.
  + hardirqs, softirqs: Fix distribution mode units handling
  + Add a generic utility to check any binary availability
  + Fix 'test_debuginfo' from failing if a symbol has multiple
    aliases
  + nfsdist tool (#1347)
  + annotate program tag
  + add helpers to access program tag
  + examples: fixed http_filter example
  + nfsslower: trace slow NFS operations
  + Update after lookup in map.increment for HASH types
  + fix a bug introduced by previous lua-bcc build fix commit
  + Better check for compiler standard support
  + fix lua-bcc build issue with cmake try_compile
  + Fix segfault on incomplete types
  + Trace external pointers from helpers
  + Allow the flags to be specified in remove_xdp()
  + bcc-lua: --no-pie, not -no-pie
  + solisten, tcpconnlat, tcpretrans: Remove unnecessary
    bpf_probe_reads
- Add the new subpackage libbpf0
- Add bcc-bsc1065593-llvm4-hack.patch to work around the llvm
  libraries searching issue (bsc#1065593)
  (Also add clang4-devel-static to BuildRequires)
- Add bcc-bsc1065593-switch-to-mcjit.patch to switch from OrcJIT
  to MCJIT. OrcJIT actually doesn't work for bcc, and the bug was
  covered until we start to use the unified LLVM shared library.
  (bsc#1065593)
- Add bcc-add-soname-to-libbpf.patch to install the shared library
  properly
- Update the group of packages
- Disable USDT for ARM and AArch64 since it's not ready.</changelog>
  <changelog author="glin@suse.com" date="1510920000">- Use the python3 package by default
- Provide and obsolete python-bcc (it's python2-bcc now)</changelog>
  <changelog author="manfred.h@gmx.net" date="1511524800">- Add patch (bcc-python3.patch) to explicitly use "/usr/bin/python3"</changelog>
  <changelog author="glin@suse.com" date="1512129600">- Update to 0.5.0 (bsc#1070563)
  + Explain possible reason of an error in scripts that rely on
    /proc/kallsyms
  + bpf: fix a couple of issues related to arm64
  + bpf: Add support for prog_name and map_name
  + Add a few introspection helpers
  + Introduce BPF Program Snapshot helper (bps)
  + Trace external pointers through maps
  + Merge BType, Map, and Probe Consumers
  + Fix exception handling in python3
  + Add usdt support for ARM64
  + bpf: make test py_test_tools_smoke pass on arm64
  + Add soname to libbpf.so
  + Fix Module display for unreadable Modules
  + Use bpf_prog_load_flag in APIs
  + Add flag to enable verifier log_level 2
  + bpf: use MCJIT explicitly for ExecutionEngine
  + change frontend rewriter to better handle anonymous struct/union
  + Move BCC debug options to an installed header file
  + use user-provided log_level in bpf_prog_load
  + Add utility for cc tests to read command outputs
  + Fix 'test_libbcc' from failing due to symbol name mismatch
  + Update perf event type and config checks
  + libbpf: Support unbound raw socket creation
  + force linking the whole api-static library into shared library
  + man/bps: Add a man page for introspection/bps.c
  + Do not keep Loader instances around
  + python: make _decode_table_types aware of __int128
  + python: Avoid unnecessary pointer object creations
- Only exclude ppc and s390 build (FATE#322227, bsc#1070362)
- Add _constraints to reserve 2GB memory for linking with
  clang4-devel-static
- Rename armv7.patch as bcc-check_int128.patch to check if the
  compiler support int128 or not
- Drop upstreamed patches:
  + bcc-bsc1065593-switch-to-mcjit.patch
  + bcc-add-soname-to-libbpf.patch</changelog>
  <changelog author="glin@suse.com" date="1512388800">- Tweak the installation path of bps directly instead of installing
  it manually. For those architectures without luajit, %{_bindir}
  wasn't created and it failed the previous install command.
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1512648000">- Request at least 4G RAM for the s390x build
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1513339200">- Request at least 10GB disk since the clang4-devel-static needs
  more than 3GB and sometimes caused build fail (FATE#322227)</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Replace clang4-devel-static BuildRequires with
  clang-devel-static: use the unversioned one, folling the llvm
  meta package version (like all the other llvm/clang packages in
  the build chain).</changelog>
  <changelog author="glin@suse.com" date="1516363200">- Add bcc-fix-build-for-llvm-5.0.1.patch to fix the compilation
  error against llvm-5.0.1</changelog>
  <changelog author="glin@suse.com" date="1518091200">- Update bcc-python3.patch to make python3 default for all the
  python scripts (bsc#1079961)</changelog>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)
- Remove bps due to the incomplete support in kernel (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1540382400">- Add bcc-fix-compilation-error-with-latest-llvm.patch,
  bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  and bcc-compilation-error-with-latest-llvm.patch to fix build
  with llvm7 (fate#325696)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571918400">- Add bcc-bsc1154926-update-kernel-headers.patch to update the
  built-in header in bcc to match the one (uapi/linux/bpf.h) from
  kernel-devel or the compilation error may happen when including
  some kernel headers in bpf programs (bsc#1154926)</changelog>
</package>
<package pkgid="c4b338b72d022d7d3d4af4cefd2a10d9ecd274b7f64bff4f7c00ea97d915ccec" name="bcc" arch="src">
  <version epoch="0" ver="0.5.0" rel="lp151.12.6.1"/>
  <changelog author="glin@suse.com" date="1489147200">- Update to 0.3.0
  + Added s390x support. Needs 4.10 Kernel
  + Restrict rewrite of unary operators to dereference operator
  + cmake: Explicitly mark static libraries as such
  + Fix bpf_dins_pkt rewrite in BinaryOperator
  + cc: Symbol resolution with multiple executable regions per
    module
  + cc: Fix assertion for debug builds
  + cc: Don't parse the same module multiple times for USDT probes
  + add XDP return values to python interface
  + python: handle null module in BPF.sym
  + filetop: support specifying sort column via cmdline argument
  + cc: Retry symbol resolution using perfmap
  + cc: Handle nested functions correctly when resolving symbols</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 0.3.0+git1496334311.6fa3681
  + Improve PerfEventArray clean up
  + make libbpf standalone-ready
  + Add support for generic XDP mode
  + Add option to control bcc_elf_foreach_sym behavior
  + Add bpf_get_first_key helper
  + Enable recursive scanf support for char[] as string
  + Fix computation of LUAJIT_INCLUDE_DIR
  + cc: Work around verifier error when reading USDT probe arguments
  + Disable non-static function calls
  + Added the option(USINGISYSTEM) of Cmake for controling whether
    using -isystem. (#1064)
  + softirqs: Migrate to kernel tracepoints instead of kprobes
    (#1091)
  + lua/bpf: implemented packet direct access
  + lua/bpf: support for NET_OFF for dissector
  + KVM hypercall analysis example (#1082)
  + cc: add support for prog table
  + cc: add support for array table
  + Add TableStorage class for wrapping bpf map tracking
  + funcslower: Trace slow kernel or user function calls
  + map.insert bcc helper to expose the BPF_NOEXIST flag (#1085)
  + bcc container improvements (#1051)
  + cc: define load_func and unload_func public
  + Python 3 compatibility fixes around string handling (#986)
  + Verify format specifiers in bpf_trace_printk in rewriter
  + Add build option for installing C++ examples
  + bpflist: Display processes with running BPF programs and maps
  + python: Allow module=None when resolving kernel symbols
  + mdflush: Add missing #include &lt;linux/bio.h&gt;
- Enable AArch64 build (FATE#322227)
- Remove remove-isystem.patch since it can be controlled by the
  cmake option now.
- Add gcc-c++ to the BuildRequires and switch to gcc/g++</changelog>
  <changelog author="glin@suse.com" date="1503057600">- Update to 0.3.0+git1502955391.9de830a
  + avoid large map memory allocation in userspace
  + python - set attach_xdp's default flag value to 0
  + have uniform uprobe event names for python and C++
  + Remove extra S_MAXSTAT array allocation in some tools
  + Omit include of ptrace.h for empty usdt contexts
  + Add clang check for -nopie option
  + Correct commit id for BPF_FUNC_get_socket_cookie
  + tools/tcptracer: add timestamp option
  + Since LUA_GLOBALSINDEX is obsolete from Lua 5.2, use
    lua_getglobal function instead.
  + better state default value handling
  + add --state to offcputime
  + tcptop: Filter out negative values in receive probe
  + tcptop: Cleanup argument parsing
  + Use unsigned conversion specifier for nlmsg_pid
  + Fix wrong netlink port id check
  + 1. Use more safe snprintf instead of sprintf;
    2. Modify procfilename buffer length in bcc_procutils_language
    function.
  + permit multiple pids attaching to the same probe
  + generate proper usdt code to prevent llvm meddling with
    ctx-&gt;#fields
  + MySQL tracing without USDT (#1239)
  + Fix a clang memory leak
  + Update bpf.h and virtual_bpf.h to 4.13-rc1
  + Fix trace.py for library filenames containing colons (#1252)
  + cc: Add open_perf_event to the C/C++ API (#1232)
  + memleak: expand allocator coverage (#1214)
  + libbpf: fix build warning on setns (#1246)
  + usdt: Use ProcMountNS
  + proc: Enhance bcc_mapping_is_file_backed
  + Fix bcc.lua build issue in Ubuntu 17.04
  + Added helpers for BPF_PERCPU_ARRAY (#1230)
  + Add an option to strip leading zeros from histograms (#1226)
  + gethostlatency was rounding to full ms
  + Change clang frontend optimization level from 0 to 2
  + fix cc: error: unrecognized command line option -no-pie
  + fix incorrect code generation in usdt</changelog>
  <changelog author="glin@suse.com" date="1510228800">- Update to 0.4.0
  + Fix helper to access stack pointer for powerpc
  + bpf: rename helper function bpf_get_stackid
  + bpf: print out the src debug info to a temporary file
  + attempt to compile with system bpf.h if default compile failed
  + sync src/cc/compat/linux headers with latest net-next
  + Fix segfault with enumerations
  + Allow BCC to parse vDSO symbols
  + libbpf: print error to error stream
  + Avoid potential SEGFAULT when resolving Kernel symbols
  + Fix 'tools/statsnoop' from failing to attach kprobes
  + Update USDT argument constraint for powerpc and powerpc64
  + examples:dns_matching: make it work as DNS sniffer
  + add debug option to dump asm insns embedded with source
  + examples:dns_matching: helper function for adding cache entry
  + Traces external pointers in parenthesized expressions
  + examples:dns_matching: fixed loop break condition
  + Fix bcc_resolve_global_addr on shared libraries
  + BCC macro for the creation of LPM trie maps (#1359)
  + bpf_probe_read*: src argument should be const void *.
  + hardirqs, softirqs: Fix distribution mode units handling
  + Add a generic utility to check any binary availability
  + Fix 'test_debuginfo' from failing if a symbol has multiple
    aliases
  + nfsdist tool (#1347)
  + annotate program tag
  + add helpers to access program tag
  + examples: fixed http_filter example
  + nfsslower: trace slow NFS operations
  + Update after lookup in map.increment for HASH types
  + fix a bug introduced by previous lua-bcc build fix commit
  + Better check for compiler standard support
  + fix lua-bcc build issue with cmake try_compile
  + Fix segfault on incomplete types
  + Trace external pointers from helpers
  + Allow the flags to be specified in remove_xdp()
  + bcc-lua: --no-pie, not -no-pie
  + solisten, tcpconnlat, tcpretrans: Remove unnecessary
    bpf_probe_reads
- Add the new subpackage libbpf0
- Add bcc-bsc1065593-llvm4-hack.patch to work around the llvm
  libraries searching issue (bsc#1065593)
  (Also add clang4-devel-static to BuildRequires)
- Add bcc-bsc1065593-switch-to-mcjit.patch to switch from OrcJIT
  to MCJIT. OrcJIT actually doesn't work for bcc, and the bug was
  covered until we start to use the unified LLVM shared library.
  (bsc#1065593)
- Add bcc-add-soname-to-libbpf.patch to install the shared library
  properly
- Update the group of packages
- Disable USDT for ARM and AArch64 since it's not ready.</changelog>
  <changelog author="glin@suse.com" date="1510920000">- Use the python3 package by default
- Provide and obsolete python-bcc (it's python2-bcc now)</changelog>
  <changelog author="manfred.h@gmx.net" date="1511524800">- Add patch (bcc-python3.patch) to explicitly use "/usr/bin/python3"</changelog>
  <changelog author="glin@suse.com" date="1512129600">- Update to 0.5.0 (bsc#1070563)
  + Explain possible reason of an error in scripts that rely on
    /proc/kallsyms
  + bpf: fix a couple of issues related to arm64
  + bpf: Add support for prog_name and map_name
  + Add a few introspection helpers
  + Introduce BPF Program Snapshot helper (bps)
  + Trace external pointers through maps
  + Merge BType, Map, and Probe Consumers
  + Fix exception handling in python3
  + Add usdt support for ARM64
  + bpf: make test py_test_tools_smoke pass on arm64
  + Add soname to libbpf.so
  + Fix Module display for unreadable Modules
  + Use bpf_prog_load_flag in APIs
  + Add flag to enable verifier log_level 2
  + bpf: use MCJIT explicitly for ExecutionEngine
  + change frontend rewriter to better handle anonymous struct/union
  + Move BCC debug options to an installed header file
  + use user-provided log_level in bpf_prog_load
  + Add utility for cc tests to read command outputs
  + Fix 'test_libbcc' from failing due to symbol name mismatch
  + Update perf event type and config checks
  + libbpf: Support unbound raw socket creation
  + force linking the whole api-static library into shared library
  + man/bps: Add a man page for introspection/bps.c
  + Do not keep Loader instances around
  + python: make _decode_table_types aware of __int128
  + python: Avoid unnecessary pointer object creations
- Only exclude ppc and s390 build (FATE#322227, bsc#1070362)
- Add _constraints to reserve 2GB memory for linking with
  clang4-devel-static
- Rename armv7.patch as bcc-check_int128.patch to check if the
  compiler support int128 or not
- Drop upstreamed patches:
  + bcc-bsc1065593-switch-to-mcjit.patch
  + bcc-add-soname-to-libbpf.patch</changelog>
  <changelog author="glin@suse.com" date="1512388800">- Tweak the installation path of bps directly instead of installing
  it manually. For those architectures without luajit, %{_bindir}
  wasn't created and it failed the previous install command.
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1512648000">- Request at least 4G RAM for the s390x build
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1513339200">- Request at least 10GB disk since the clang4-devel-static needs
  more than 3GB and sometimes caused build fail (FATE#322227)</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Replace clang4-devel-static BuildRequires with
  clang-devel-static: use the unversioned one, folling the llvm
  meta package version (like all the other llvm/clang packages in
  the build chain).</changelog>
  <changelog author="glin@suse.com" date="1516363200">- Add bcc-fix-build-for-llvm-5.0.1.patch to fix the compilation
  error against llvm-5.0.1</changelog>
  <changelog author="glin@suse.com" date="1518091200">- Update bcc-python3.patch to make python3 default for all the
  python scripts (bsc#1079961)</changelog>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)
- Remove bps due to the incomplete support in kernel (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1540382400">- Add bcc-fix-compilation-error-with-latest-llvm.patch,
  bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  and bcc-compilation-error-with-latest-llvm.patch to fix build
  with llvm7 (fate#325696)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571918400">- Add bcc-bsc1154926-update-kernel-headers.patch to update the
  built-in header in bcc to match the one (uapi/linux/bpf.h) from
  kernel-devel or the compilation error may happen when including
  some kernel headers in bpf programs (bsc#1154926)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Recommends kernel-default-devel if kernel-default or
  kernel-default-base present (bsc#1172230)</changelog>
</package>
<package pkgid="613c88618d36180e19c20151862958b58b1b4c35230e9164934f109d46b01fce" name="bcc-devel" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="lp151.12.3.1"/>
  <changelog author="idonmez@suse.com" date="1488456000">- Add remove-isystem.patch to unconditionally removing -isystem,
  looks like the gcc check is broken.
- Add armv7.patch to disable __uint128_t usage which does not
  exist on ARMv7.
- Always use clang as C compiler, note that the build system will
  always use clang++ ad CXX compiler if it finds it.</changelog>
  <changelog author="glin@suse.com" date="1489147200">- Update to 0.3.0
  + Added s390x support. Needs 4.10 Kernel
  + Restrict rewrite of unary operators to dereference operator
  + cmake: Explicitly mark static libraries as such
  + Fix bpf_dins_pkt rewrite in BinaryOperator
  + cc: Symbol resolution with multiple executable regions per
    module
  + cc: Fix assertion for debug builds
  + cc: Don't parse the same module multiple times for USDT probes
  + add XDP return values to python interface
  + python: handle null module in BPF.sym
  + filetop: support specifying sort column via cmdline argument
  + cc: Retry symbol resolution using perfmap
  + cc: Handle nested functions correctly when resolving symbols</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 0.3.0+git1496334311.6fa3681
  + Improve PerfEventArray clean up
  + make libbpf standalone-ready
  + Add support for generic XDP mode
  + Add option to control bcc_elf_foreach_sym behavior
  + Add bpf_get_first_key helper
  + Enable recursive scanf support for char[] as string
  + Fix computation of LUAJIT_INCLUDE_DIR
  + cc: Work around verifier error when reading USDT probe arguments
  + Disable non-static function calls
  + Added the option(USINGISYSTEM) of Cmake for controling whether
    using -isystem. (#1064)
  + softirqs: Migrate to kernel tracepoints instead of kprobes
    (#1091)
  + lua/bpf: implemented packet direct access
  + lua/bpf: support for NET_OFF for dissector
  + KVM hypercall analysis example (#1082)
  + cc: add support for prog table
  + cc: add support for array table
  + Add TableStorage class for wrapping bpf map tracking
  + funcslower: Trace slow kernel or user function calls
  + map.insert bcc helper to expose the BPF_NOEXIST flag (#1085)
  + bcc container improvements (#1051)
  + cc: define load_func and unload_func public
  + Python 3 compatibility fixes around string handling (#986)
  + Verify format specifiers in bpf_trace_printk in rewriter
  + Add build option for installing C++ examples
  + bpflist: Display processes with running BPF programs and maps
  + python: Allow module=None when resolving kernel symbols
  + mdflush: Add missing #include &lt;linux/bio.h&gt;
- Enable AArch64 build (FATE#322227)
- Remove remove-isystem.patch since it can be controlled by the
  cmake option now.
- Add gcc-c++ to the BuildRequires and switch to gcc/g++</changelog>
  <changelog author="glin@suse.com" date="1503057600">- Update to 0.3.0+git1502955391.9de830a
  + avoid large map memory allocation in userspace
  + python - set attach_xdp's default flag value to 0
  + have uniform uprobe event names for python and C++
  + Remove extra S_MAXSTAT array allocation in some tools
  + Omit include of ptrace.h for empty usdt contexts
  + Add clang check for -nopie option
  + Correct commit id for BPF_FUNC_get_socket_cookie
  + tools/tcptracer: add timestamp option
  + Since LUA_GLOBALSINDEX is obsolete from Lua 5.2, use
    lua_getglobal function instead.
  + better state default value handling
  + add --state to offcputime
  + tcptop: Filter out negative values in receive probe
  + tcptop: Cleanup argument parsing
  + Use unsigned conversion specifier for nlmsg_pid
  + Fix wrong netlink port id check
  + 1. Use more safe snprintf instead of sprintf;
    2. Modify procfilename buffer length in bcc_procutils_language
    function.
  + permit multiple pids attaching to the same probe
  + generate proper usdt code to prevent llvm meddling with
    ctx-&gt;#fields
  + MySQL tracing without USDT (#1239)
  + Fix a clang memory leak
  + Update bpf.h and virtual_bpf.h to 4.13-rc1
  + Fix trace.py for library filenames containing colons (#1252)
  + cc: Add open_perf_event to the C/C++ API (#1232)
  + memleak: expand allocator coverage (#1214)
  + libbpf: fix build warning on setns (#1246)
  + usdt: Use ProcMountNS
  + proc: Enhance bcc_mapping_is_file_backed
  + Fix bcc.lua build issue in Ubuntu 17.04
  + Added helpers for BPF_PERCPU_ARRAY (#1230)
  + Add an option to strip leading zeros from histograms (#1226)
  + gethostlatency was rounding to full ms
  + Change clang frontend optimization level from 0 to 2
  + fix cc: error: unrecognized command line option -no-pie
  + fix incorrect code generation in usdt</changelog>
  <changelog author="glin@suse.com" date="1510228800">- Update to 0.4.0
  + Fix helper to access stack pointer for powerpc
  + bpf: rename helper function bpf_get_stackid
  + bpf: print out the src debug info to a temporary file
  + attempt to compile with system bpf.h if default compile failed
  + sync src/cc/compat/linux headers with latest net-next
  + Fix segfault with enumerations
  + Allow BCC to parse vDSO symbols
  + libbpf: print error to error stream
  + Avoid potential SEGFAULT when resolving Kernel symbols
  + Fix 'tools/statsnoop' from failing to attach kprobes
  + Update USDT argument constraint for powerpc and powerpc64
  + examples:dns_matching: make it work as DNS sniffer
  + add debug option to dump asm insns embedded with source
  + examples:dns_matching: helper function for adding cache entry
  + Traces external pointers in parenthesized expressions
  + examples:dns_matching: fixed loop break condition
  + Fix bcc_resolve_global_addr on shared libraries
  + BCC macro for the creation of LPM trie maps (#1359)
  + bpf_probe_read*: src argument should be const void *.
  + hardirqs, softirqs: Fix distribution mode units handling
  + Add a generic utility to check any binary availability
  + Fix 'test_debuginfo' from failing if a symbol has multiple
    aliases
  + nfsdist tool (#1347)
  + annotate program tag
  + add helpers to access program tag
  + examples: fixed http_filter example
  + nfsslower: trace slow NFS operations
  + Update after lookup in map.increment for HASH types
  + fix a bug introduced by previous lua-bcc build fix commit
  + Better check for compiler standard support
  + fix lua-bcc build issue with cmake try_compile
  + Fix segfault on incomplete types
  + Trace external pointers from helpers
  + Allow the flags to be specified in remove_xdp()
  + bcc-lua: --no-pie, not -no-pie
  + solisten, tcpconnlat, tcpretrans: Remove unnecessary
    bpf_probe_reads
- Add the new subpackage libbpf0
- Add bcc-bsc1065593-llvm4-hack.patch to work around the llvm
  libraries searching issue (bsc#1065593)
  (Also add clang4-devel-static to BuildRequires)
- Add bcc-bsc1065593-switch-to-mcjit.patch to switch from OrcJIT
  to MCJIT. OrcJIT actually doesn't work for bcc, and the bug was
  covered until we start to use the unified LLVM shared library.
  (bsc#1065593)
- Add bcc-add-soname-to-libbpf.patch to install the shared library
  properly
- Update the group of packages
- Disable USDT for ARM and AArch64 since it's not ready.</changelog>
  <changelog author="glin@suse.com" date="1510920000">- Use the python3 package by default
- Provide and obsolete python-bcc (it's python2-bcc now)</changelog>
  <changelog author="manfred.h@gmx.net" date="1511524800">- Add patch (bcc-python3.patch) to explicitly use "/usr/bin/python3"</changelog>
  <changelog author="glin@suse.com" date="1512129600">- Update to 0.5.0 (bsc#1070563)
  + Explain possible reason of an error in scripts that rely on
    /proc/kallsyms
  + bpf: fix a couple of issues related to arm64
  + bpf: Add support for prog_name and map_name
  + Add a few introspection helpers
  + Introduce BPF Program Snapshot helper (bps)
  + Trace external pointers through maps
  + Merge BType, Map, and Probe Consumers
  + Fix exception handling in python3
  + Add usdt support for ARM64
  + bpf: make test py_test_tools_smoke pass on arm64
  + Add soname to libbpf.so
  + Fix Module display for unreadable Modules
  + Use bpf_prog_load_flag in APIs
  + Add flag to enable verifier log_level 2
  + bpf: use MCJIT explicitly for ExecutionEngine
  + change frontend rewriter to better handle anonymous struct/union
  + Move BCC debug options to an installed header file
  + use user-provided log_level in bpf_prog_load
  + Add utility for cc tests to read command outputs
  + Fix 'test_libbcc' from failing due to symbol name mismatch
  + Update perf event type and config checks
  + libbpf: Support unbound raw socket creation
  + force linking the whole api-static library into shared library
  + man/bps: Add a man page for introspection/bps.c
  + Do not keep Loader instances around
  + python: make _decode_table_types aware of __int128
  + python: Avoid unnecessary pointer object creations
- Only exclude ppc and s390 build (FATE#322227, bsc#1070362)
- Add _constraints to reserve 2GB memory for linking with
  clang4-devel-static
- Rename armv7.patch as bcc-check_int128.patch to check if the
  compiler support int128 or not
- Drop upstreamed patches:
  + bcc-bsc1065593-switch-to-mcjit.patch
  + bcc-add-soname-to-libbpf.patch</changelog>
  <changelog author="glin@suse.com" date="1512388800">- Tweak the installation path of bps directly instead of installing
  it manually. For those architectures without luajit, %{_bindir}
  wasn't created and it failed the previous install command.
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1512648000">- Request at least 4G RAM for the s390x build
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1513339200">- Request at least 10GB disk since the clang4-devel-static needs
  more than 3GB and sometimes caused build fail (FATE#322227)</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Replace clang4-devel-static BuildRequires with
  clang-devel-static: use the unversioned one, folling the llvm
  meta package version (like all the other llvm/clang packages in
  the build chain).</changelog>
  <changelog author="glin@suse.com" date="1516363200">- Add bcc-fix-build-for-llvm-5.0.1.patch to fix the compilation
  error against llvm-5.0.1</changelog>
  <changelog author="glin@suse.com" date="1518091200">- Update bcc-python3.patch to make python3 default for all the
  python scripts (bsc#1079961)</changelog>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)
- Remove bps due to the incomplete support in kernel (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1540382400">- Add bcc-fix-compilation-error-with-latest-llvm.patch,
  bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  and bcc-compilation-error-with-latest-llvm.patch to fix build
  with llvm7 (fate#325696)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571918400">- Add bcc-bsc1154926-update-kernel-headers.patch to update the
  built-in header in bcc to match the one (uapi/linux/bpf.h) from
  kernel-devel or the compilation error may happen when including
  some kernel headers in bpf programs (bsc#1154926)</changelog>
</package>
<package pkgid="25abd6baafe5d202990076ae0727e99dc6ea00a690444b9638e9dc0ba2cd244f" name="bcc-devel" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="lp151.12.6.1"/>
  <changelog author="glin@suse.com" date="1489147200">- Update to 0.3.0
  + Added s390x support. Needs 4.10 Kernel
  + Restrict rewrite of unary operators to dereference operator
  + cmake: Explicitly mark static libraries as such
  + Fix bpf_dins_pkt rewrite in BinaryOperator
  + cc: Symbol resolution with multiple executable regions per
    module
  + cc: Fix assertion for debug builds
  + cc: Don't parse the same module multiple times for USDT probes
  + add XDP return values to python interface
  + python: handle null module in BPF.sym
  + filetop: support specifying sort column via cmdline argument
  + cc: Retry symbol resolution using perfmap
  + cc: Handle nested functions correctly when resolving symbols</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 0.3.0+git1496334311.6fa3681
  + Improve PerfEventArray clean up
  + make libbpf standalone-ready
  + Add support for generic XDP mode
  + Add option to control bcc_elf_foreach_sym behavior
  + Add bpf_get_first_key helper
  + Enable recursive scanf support for char[] as string
  + Fix computation of LUAJIT_INCLUDE_DIR
  + cc: Work around verifier error when reading USDT probe arguments
  + Disable non-static function calls
  + Added the option(USINGISYSTEM) of Cmake for controling whether
    using -isystem. (#1064)
  + softirqs: Migrate to kernel tracepoints instead of kprobes
    (#1091)
  + lua/bpf: implemented packet direct access
  + lua/bpf: support for NET_OFF for dissector
  + KVM hypercall analysis example (#1082)
  + cc: add support for prog table
  + cc: add support for array table
  + Add TableStorage class for wrapping bpf map tracking
  + funcslower: Trace slow kernel or user function calls
  + map.insert bcc helper to expose the BPF_NOEXIST flag (#1085)
  + bcc container improvements (#1051)
  + cc: define load_func and unload_func public
  + Python 3 compatibility fixes around string handling (#986)
  + Verify format specifiers in bpf_trace_printk in rewriter
  + Add build option for installing C++ examples
  + bpflist: Display processes with running BPF programs and maps
  + python: Allow module=None when resolving kernel symbols
  + mdflush: Add missing #include &lt;linux/bio.h&gt;
- Enable AArch64 build (FATE#322227)
- Remove remove-isystem.patch since it can be controlled by the
  cmake option now.
- Add gcc-c++ to the BuildRequires and switch to gcc/g++</changelog>
  <changelog author="glin@suse.com" date="1503057600">- Update to 0.3.0+git1502955391.9de830a
  + avoid large map memory allocation in userspace
  + python - set attach_xdp's default flag value to 0
  + have uniform uprobe event names for python and C++
  + Remove extra S_MAXSTAT array allocation in some tools
  + Omit include of ptrace.h for empty usdt contexts
  + Add clang check for -nopie option
  + Correct commit id for BPF_FUNC_get_socket_cookie
  + tools/tcptracer: add timestamp option
  + Since LUA_GLOBALSINDEX is obsolete from Lua 5.2, use
    lua_getglobal function instead.
  + better state default value handling
  + add --state to offcputime
  + tcptop: Filter out negative values in receive probe
  + tcptop: Cleanup argument parsing
  + Use unsigned conversion specifier for nlmsg_pid
  + Fix wrong netlink port id check
  + 1. Use more safe snprintf instead of sprintf;
    2. Modify procfilename buffer length in bcc_procutils_language
    function.
  + permit multiple pids attaching to the same probe
  + generate proper usdt code to prevent llvm meddling with
    ctx-&gt;#fields
  + MySQL tracing without USDT (#1239)
  + Fix a clang memory leak
  + Update bpf.h and virtual_bpf.h to 4.13-rc1
  + Fix trace.py for library filenames containing colons (#1252)
  + cc: Add open_perf_event to the C/C++ API (#1232)
  + memleak: expand allocator coverage (#1214)
  + libbpf: fix build warning on setns (#1246)
  + usdt: Use ProcMountNS
  + proc: Enhance bcc_mapping_is_file_backed
  + Fix bcc.lua build issue in Ubuntu 17.04
  + Added helpers for BPF_PERCPU_ARRAY (#1230)
  + Add an option to strip leading zeros from histograms (#1226)
  + gethostlatency was rounding to full ms
  + Change clang frontend optimization level from 0 to 2
  + fix cc: error: unrecognized command line option -no-pie
  + fix incorrect code generation in usdt</changelog>
  <changelog author="glin@suse.com" date="1510228800">- Update to 0.4.0
  + Fix helper to access stack pointer for powerpc
  + bpf: rename helper function bpf_get_stackid
  + bpf: print out the src debug info to a temporary file
  + attempt to compile with system bpf.h if default compile failed
  + sync src/cc/compat/linux headers with latest net-next
  + Fix segfault with enumerations
  + Allow BCC to parse vDSO symbols
  + libbpf: print error to error stream
  + Avoid potential SEGFAULT when resolving Kernel symbols
  + Fix 'tools/statsnoop' from failing to attach kprobes
  + Update USDT argument constraint for powerpc and powerpc64
  + examples:dns_matching: make it work as DNS sniffer
  + add debug option to dump asm insns embedded with source
  + examples:dns_matching: helper function for adding cache entry
  + Traces external pointers in parenthesized expressions
  + examples:dns_matching: fixed loop break condition
  + Fix bcc_resolve_global_addr on shared libraries
  + BCC macro for the creation of LPM trie maps (#1359)
  + bpf_probe_read*: src argument should be const void *.
  + hardirqs, softirqs: Fix distribution mode units handling
  + Add a generic utility to check any binary availability
  + Fix 'test_debuginfo' from failing if a symbol has multiple
    aliases
  + nfsdist tool (#1347)
  + annotate program tag
  + add helpers to access program tag
  + examples: fixed http_filter example
  + nfsslower: trace slow NFS operations
  + Update after lookup in map.increment for HASH types
  + fix a bug introduced by previous lua-bcc build fix commit
  + Better check for compiler standard support
  + fix lua-bcc build issue with cmake try_compile
  + Fix segfault on incomplete types
  + Trace external pointers from helpers
  + Allow the flags to be specified in remove_xdp()
  + bcc-lua: --no-pie, not -no-pie
  + solisten, tcpconnlat, tcpretrans: Remove unnecessary
    bpf_probe_reads
- Add the new subpackage libbpf0
- Add bcc-bsc1065593-llvm4-hack.patch to work around the llvm
  libraries searching issue (bsc#1065593)
  (Also add clang4-devel-static to BuildRequires)
- Add bcc-bsc1065593-switch-to-mcjit.patch to switch from OrcJIT
  to MCJIT. OrcJIT actually doesn't work for bcc, and the bug was
  covered until we start to use the unified LLVM shared library.
  (bsc#1065593)
- Add bcc-add-soname-to-libbpf.patch to install the shared library
  properly
- Update the group of packages
- Disable USDT for ARM and AArch64 since it's not ready.</changelog>
  <changelog author="glin@suse.com" date="1510920000">- Use the python3 package by default
- Provide and obsolete python-bcc (it's python2-bcc now)</changelog>
  <changelog author="manfred.h@gmx.net" date="1511524800">- Add patch (bcc-python3.patch) to explicitly use "/usr/bin/python3"</changelog>
  <changelog author="glin@suse.com" date="1512129600">- Update to 0.5.0 (bsc#1070563)
  + Explain possible reason of an error in scripts that rely on
    /proc/kallsyms
  + bpf: fix a couple of issues related to arm64
  + bpf: Add support for prog_name and map_name
  + Add a few introspection helpers
  + Introduce BPF Program Snapshot helper (bps)
  + Trace external pointers through maps
  + Merge BType, Map, and Probe Consumers
  + Fix exception handling in python3
  + Add usdt support for ARM64
  + bpf: make test py_test_tools_smoke pass on arm64
  + Add soname to libbpf.so
  + Fix Module display for unreadable Modules
  + Use bpf_prog_load_flag in APIs
  + Add flag to enable verifier log_level 2
  + bpf: use MCJIT explicitly for ExecutionEngine
  + change frontend rewriter to better handle anonymous struct/union
  + Move BCC debug options to an installed header file
  + use user-provided log_level in bpf_prog_load
  + Add utility for cc tests to read command outputs
  + Fix 'test_libbcc' from failing due to symbol name mismatch
  + Update perf event type and config checks
  + libbpf: Support unbound raw socket creation
  + force linking the whole api-static library into shared library
  + man/bps: Add a man page for introspection/bps.c
  + Do not keep Loader instances around
  + python: make _decode_table_types aware of __int128
  + python: Avoid unnecessary pointer object creations
- Only exclude ppc and s390 build (FATE#322227, bsc#1070362)
- Add _constraints to reserve 2GB memory for linking with
  clang4-devel-static
- Rename armv7.patch as bcc-check_int128.patch to check if the
  compiler support int128 or not
- Drop upstreamed patches:
  + bcc-bsc1065593-switch-to-mcjit.patch
  + bcc-add-soname-to-libbpf.patch</changelog>
  <changelog author="glin@suse.com" date="1512388800">- Tweak the installation path of bps directly instead of installing
  it manually. For those architectures without luajit, %{_bindir}
  wasn't created and it failed the previous install command.
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1512648000">- Request at least 4G RAM for the s390x build
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1513339200">- Request at least 10GB disk since the clang4-devel-static needs
  more than 3GB and sometimes caused build fail (FATE#322227)</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Replace clang4-devel-static BuildRequires with
  clang-devel-static: use the unversioned one, folling the llvm
  meta package version (like all the other llvm/clang packages in
  the build chain).</changelog>
  <changelog author="glin@suse.com" date="1516363200">- Add bcc-fix-build-for-llvm-5.0.1.patch to fix the compilation
  error against llvm-5.0.1</changelog>
  <changelog author="glin@suse.com" date="1518091200">- Update bcc-python3.patch to make python3 default for all the
  python scripts (bsc#1079961)</changelog>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)
- Remove bps due to the incomplete support in kernel (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1540382400">- Add bcc-fix-compilation-error-with-latest-llvm.patch,
  bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  and bcc-compilation-error-with-latest-llvm.patch to fix build
  with llvm7 (fate#325696)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571918400">- Add bcc-bsc1154926-update-kernel-headers.patch to update the
  built-in header in bcc to match the one (uapi/linux/bpf.h) from
  kernel-devel or the compilation error may happen when including
  some kernel headers in bpf programs (bsc#1154926)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Recommends kernel-default-devel if kernel-default or
  kernel-default-base present (bsc#1172230)</changelog>
</package>
<package pkgid="e5f6ca78d3f8345e11cdb51e579b8893bc20e7f83f7b8a45842464131a185e36" name="bcc-docs" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="lp151.12.3.1"/>
  <changelog author="idonmez@suse.com" date="1488456000">- Add remove-isystem.patch to unconditionally removing -isystem,
  looks like the gcc check is broken.
- Add armv7.patch to disable __uint128_t usage which does not
  exist on ARMv7.
- Always use clang as C compiler, note that the build system will
  always use clang++ ad CXX compiler if it finds it.</changelog>
  <changelog author="glin@suse.com" date="1489147200">- Update to 0.3.0
  + Added s390x support. Needs 4.10 Kernel
  + Restrict rewrite of unary operators to dereference operator
  + cmake: Explicitly mark static libraries as such
  + Fix bpf_dins_pkt rewrite in BinaryOperator
  + cc: Symbol resolution with multiple executable regions per
    module
  + cc: Fix assertion for debug builds
  + cc: Don't parse the same module multiple times for USDT probes
  + add XDP return values to python interface
  + python: handle null module in BPF.sym
  + filetop: support specifying sort column via cmdline argument
  + cc: Retry symbol resolution using perfmap
  + cc: Handle nested functions correctly when resolving symbols</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 0.3.0+git1496334311.6fa3681
  + Improve PerfEventArray clean up
  + make libbpf standalone-ready
  + Add support for generic XDP mode
  + Add option to control bcc_elf_foreach_sym behavior
  + Add bpf_get_first_key helper
  + Enable recursive scanf support for char[] as string
  + Fix computation of LUAJIT_INCLUDE_DIR
  + cc: Work around verifier error when reading USDT probe arguments
  + Disable non-static function calls
  + Added the option(USINGISYSTEM) of Cmake for controling whether
    using -isystem. (#1064)
  + softirqs: Migrate to kernel tracepoints instead of kprobes
    (#1091)
  + lua/bpf: implemented packet direct access
  + lua/bpf: support for NET_OFF for dissector
  + KVM hypercall analysis example (#1082)
  + cc: add support for prog table
  + cc: add support for array table
  + Add TableStorage class for wrapping bpf map tracking
  + funcslower: Trace slow kernel or user function calls
  + map.insert bcc helper to expose the BPF_NOEXIST flag (#1085)
  + bcc container improvements (#1051)
  + cc: define load_func and unload_func public
  + Python 3 compatibility fixes around string handling (#986)
  + Verify format specifiers in bpf_trace_printk in rewriter
  + Add build option for installing C++ examples
  + bpflist: Display processes with running BPF programs and maps
  + python: Allow module=None when resolving kernel symbols
  + mdflush: Add missing #include &lt;linux/bio.h&gt;
- Enable AArch64 build (FATE#322227)
- Remove remove-isystem.patch since it can be controlled by the
  cmake option now.
- Add gcc-c++ to the BuildRequires and switch to gcc/g++</changelog>
  <changelog author="glin@suse.com" date="1503057600">- Update to 0.3.0+git1502955391.9de830a
  + avoid large map memory allocation in userspace
  + python - set attach_xdp's default flag value to 0
  + have uniform uprobe event names for python and C++
  + Remove extra S_MAXSTAT array allocation in some tools
  + Omit include of ptrace.h for empty usdt contexts
  + Add clang check for -nopie option
  + Correct commit id for BPF_FUNC_get_socket_cookie
  + tools/tcptracer: add timestamp option
  + Since LUA_GLOBALSINDEX is obsolete from Lua 5.2, use
    lua_getglobal function instead.
  + better state default value handling
  + add --state to offcputime
  + tcptop: Filter out negative values in receive probe
  + tcptop: Cleanup argument parsing
  + Use unsigned conversion specifier for nlmsg_pid
  + Fix wrong netlink port id check
  + 1. Use more safe snprintf instead of sprintf;
    2. Modify procfilename buffer length in bcc_procutils_language
    function.
  + permit multiple pids attaching to the same probe
  + generate proper usdt code to prevent llvm meddling with
    ctx-&gt;#fields
  + MySQL tracing without USDT (#1239)
  + Fix a clang memory leak
  + Update bpf.h and virtual_bpf.h to 4.13-rc1
  + Fix trace.py for library filenames containing colons (#1252)
  + cc: Add open_perf_event to the C/C++ API (#1232)
  + memleak: expand allocator coverage (#1214)
  + libbpf: fix build warning on setns (#1246)
  + usdt: Use ProcMountNS
  + proc: Enhance bcc_mapping_is_file_backed
  + Fix bcc.lua build issue in Ubuntu 17.04
  + Added helpers for BPF_PERCPU_ARRAY (#1230)
  + Add an option to strip leading zeros from histograms (#1226)
  + gethostlatency was rounding to full ms
  + Change clang frontend optimization level from 0 to 2
  + fix cc: error: unrecognized command line option -no-pie
  + fix incorrect code generation in usdt</changelog>
  <changelog author="glin@suse.com" date="1510228800">- Update to 0.4.0
  + Fix helper to access stack pointer for powerpc
  + bpf: rename helper function bpf_get_stackid
  + bpf: print out the src debug info to a temporary file
  + attempt to compile with system bpf.h if default compile failed
  + sync src/cc/compat/linux headers with latest net-next
  + Fix segfault with enumerations
  + Allow BCC to parse vDSO symbols
  + libbpf: print error to error stream
  + Avoid potential SEGFAULT when resolving Kernel symbols
  + Fix 'tools/statsnoop' from failing to attach kprobes
  + Update USDT argument constraint for powerpc and powerpc64
  + examples:dns_matching: make it work as DNS sniffer
  + add debug option to dump asm insns embedded with source
  + examples:dns_matching: helper function for adding cache entry
  + Traces external pointers in parenthesized expressions
  + examples:dns_matching: fixed loop break condition
  + Fix bcc_resolve_global_addr on shared libraries
  + BCC macro for the creation of LPM trie maps (#1359)
  + bpf_probe_read*: src argument should be const void *.
  + hardirqs, softirqs: Fix distribution mode units handling
  + Add a generic utility to check any binary availability
  + Fix 'test_debuginfo' from failing if a symbol has multiple
    aliases
  + nfsdist tool (#1347)
  + annotate program tag
  + add helpers to access program tag
  + examples: fixed http_filter example
  + nfsslower: trace slow NFS operations
  + Update after lookup in map.increment for HASH types
  + fix a bug introduced by previous lua-bcc build fix commit
  + Better check for compiler standard support
  + fix lua-bcc build issue with cmake try_compile
  + Fix segfault on incomplete types
  + Trace external pointers from helpers
  + Allow the flags to be specified in remove_xdp()
  + bcc-lua: --no-pie, not -no-pie
  + solisten, tcpconnlat, tcpretrans: Remove unnecessary
    bpf_probe_reads
- Add the new subpackage libbpf0
- Add bcc-bsc1065593-llvm4-hack.patch to work around the llvm
  libraries searching issue (bsc#1065593)
  (Also add clang4-devel-static to BuildRequires)
- Add bcc-bsc1065593-switch-to-mcjit.patch to switch from OrcJIT
  to MCJIT. OrcJIT actually doesn't work for bcc, and the bug was
  covered until we start to use the unified LLVM shared library.
  (bsc#1065593)
- Add bcc-add-soname-to-libbpf.patch to install the shared library
  properly
- Update the group of packages
- Disable USDT for ARM and AArch64 since it's not ready.</changelog>
  <changelog author="glin@suse.com" date="1510920000">- Use the python3 package by default
- Provide and obsolete python-bcc (it's python2-bcc now)</changelog>
  <changelog author="manfred.h@gmx.net" date="1511524800">- Add patch (bcc-python3.patch) to explicitly use "/usr/bin/python3"</changelog>
  <changelog author="glin@suse.com" date="1512129600">- Update to 0.5.0 (bsc#1070563)
  + Explain possible reason of an error in scripts that rely on
    /proc/kallsyms
  + bpf: fix a couple of issues related to arm64
  + bpf: Add support for prog_name and map_name
  + Add a few introspection helpers
  + Introduce BPF Program Snapshot helper (bps)
  + Trace external pointers through maps
  + Merge BType, Map, and Probe Consumers
  + Fix exception handling in python3
  + Add usdt support for ARM64
  + bpf: make test py_test_tools_smoke pass on arm64
  + Add soname to libbpf.so
  + Fix Module display for unreadable Modules
  + Use bpf_prog_load_flag in APIs
  + Add flag to enable verifier log_level 2
  + bpf: use MCJIT explicitly for ExecutionEngine
  + change frontend rewriter to better handle anonymous struct/union
  + Move BCC debug options to an installed header file
  + use user-provided log_level in bpf_prog_load
  + Add utility for cc tests to read command outputs
  + Fix 'test_libbcc' from failing due to symbol name mismatch
  + Update perf event type and config checks
  + libbpf: Support unbound raw socket creation
  + force linking the whole api-static library into shared library
  + man/bps: Add a man page for introspection/bps.c
  + Do not keep Loader instances around
  + python: make _decode_table_types aware of __int128
  + python: Avoid unnecessary pointer object creations
- Only exclude ppc and s390 build (FATE#322227, bsc#1070362)
- Add _constraints to reserve 2GB memory for linking with
  clang4-devel-static
- Rename armv7.patch as bcc-check_int128.patch to check if the
  compiler support int128 or not
- Drop upstreamed patches:
  + bcc-bsc1065593-switch-to-mcjit.patch
  + bcc-add-soname-to-libbpf.patch</changelog>
  <changelog author="glin@suse.com" date="1512388800">- Tweak the installation path of bps directly instead of installing
  it manually. For those architectures without luajit, %{_bindir}
  wasn't created and it failed the previous install command.
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1512648000">- Request at least 4G RAM for the s390x build
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1513339200">- Request at least 10GB disk since the clang4-devel-static needs
  more than 3GB and sometimes caused build fail (FATE#322227)</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Replace clang4-devel-static BuildRequires with
  clang-devel-static: use the unversioned one, folling the llvm
  meta package version (like all the other llvm/clang packages in
  the build chain).</changelog>
  <changelog author="glin@suse.com" date="1516363200">- Add bcc-fix-build-for-llvm-5.0.1.patch to fix the compilation
  error against llvm-5.0.1</changelog>
  <changelog author="glin@suse.com" date="1518091200">- Update bcc-python3.patch to make python3 default for all the
  python scripts (bsc#1079961)</changelog>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)
- Remove bps due to the incomplete support in kernel (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1540382400">- Add bcc-fix-compilation-error-with-latest-llvm.patch,
  bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  and bcc-compilation-error-with-latest-llvm.patch to fix build
  with llvm7 (fate#325696)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571918400">- Add bcc-bsc1154926-update-kernel-headers.patch to update the
  built-in header in bcc to match the one (uapi/linux/bpf.h) from
  kernel-devel or the compilation error may happen when including
  some kernel headers in bpf programs (bsc#1154926)</changelog>
</package>
<package pkgid="7a9c581d06b273d055e2c3be1a9877e3836fed462e13dd80a11bb83af959fb8a" name="bcc-docs" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="lp151.12.6.1"/>
  <changelog author="glin@suse.com" date="1489147200">- Update to 0.3.0
  + Added s390x support. Needs 4.10 Kernel
  + Restrict rewrite of unary operators to dereference operator
  + cmake: Explicitly mark static libraries as such
  + Fix bpf_dins_pkt rewrite in BinaryOperator
  + cc: Symbol resolution with multiple executable regions per
    module
  + cc: Fix assertion for debug builds
  + cc: Don't parse the same module multiple times for USDT probes
  + add XDP return values to python interface
  + python: handle null module in BPF.sym
  + filetop: support specifying sort column via cmdline argument
  + cc: Retry symbol resolution using perfmap
  + cc: Handle nested functions correctly when resolving symbols</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 0.3.0+git1496334311.6fa3681
  + Improve PerfEventArray clean up
  + make libbpf standalone-ready
  + Add support for generic XDP mode
  + Add option to control bcc_elf_foreach_sym behavior
  + Add bpf_get_first_key helper
  + Enable recursive scanf support for char[] as string
  + Fix computation of LUAJIT_INCLUDE_DIR
  + cc: Work around verifier error when reading USDT probe arguments
  + Disable non-static function calls
  + Added the option(USINGISYSTEM) of Cmake for controling whether
    using -isystem. (#1064)
  + softirqs: Migrate to kernel tracepoints instead of kprobes
    (#1091)
  + lua/bpf: implemented packet direct access
  + lua/bpf: support for NET_OFF for dissector
  + KVM hypercall analysis example (#1082)
  + cc: add support for prog table
  + cc: add support for array table
  + Add TableStorage class for wrapping bpf map tracking
  + funcslower: Trace slow kernel or user function calls
  + map.insert bcc helper to expose the BPF_NOEXIST flag (#1085)
  + bcc container improvements (#1051)
  + cc: define load_func and unload_func public
  + Python 3 compatibility fixes around string handling (#986)
  + Verify format specifiers in bpf_trace_printk in rewriter
  + Add build option for installing C++ examples
  + bpflist: Display processes with running BPF programs and maps
  + python: Allow module=None when resolving kernel symbols
  + mdflush: Add missing #include &lt;linux/bio.h&gt;
- Enable AArch64 build (FATE#322227)
- Remove remove-isystem.patch since it can be controlled by the
  cmake option now.
- Add gcc-c++ to the BuildRequires and switch to gcc/g++</changelog>
  <changelog author="glin@suse.com" date="1503057600">- Update to 0.3.0+git1502955391.9de830a
  + avoid large map memory allocation in userspace
  + python - set attach_xdp's default flag value to 0
  + have uniform uprobe event names for python and C++
  + Remove extra S_MAXSTAT array allocation in some tools
  + Omit include of ptrace.h for empty usdt contexts
  + Add clang check for -nopie option
  + Correct commit id for BPF_FUNC_get_socket_cookie
  + tools/tcptracer: add timestamp option
  + Since LUA_GLOBALSINDEX is obsolete from Lua 5.2, use
    lua_getglobal function instead.
  + better state default value handling
  + add --state to offcputime
  + tcptop: Filter out negative values in receive probe
  + tcptop: Cleanup argument parsing
  + Use unsigned conversion specifier for nlmsg_pid
  + Fix wrong netlink port id check
  + 1. Use more safe snprintf instead of sprintf;
    2. Modify procfilename buffer length in bcc_procutils_language
    function.
  + permit multiple pids attaching to the same probe
  + generate proper usdt code to prevent llvm meddling with
    ctx-&gt;#fields
  + MySQL tracing without USDT (#1239)
  + Fix a clang memory leak
  + Update bpf.h and virtual_bpf.h to 4.13-rc1
  + Fix trace.py for library filenames containing colons (#1252)
  + cc: Add open_perf_event to the C/C++ API (#1232)
  + memleak: expand allocator coverage (#1214)
  + libbpf: fix build warning on setns (#1246)
  + usdt: Use ProcMountNS
  + proc: Enhance bcc_mapping_is_file_backed
  + Fix bcc.lua build issue in Ubuntu 17.04
  + Added helpers for BPF_PERCPU_ARRAY (#1230)
  + Add an option to strip leading zeros from histograms (#1226)
  + gethostlatency was rounding to full ms
  + Change clang frontend optimization level from 0 to 2
  + fix cc: error: unrecognized command line option -no-pie
  + fix incorrect code generation in usdt</changelog>
  <changelog author="glin@suse.com" date="1510228800">- Update to 0.4.0
  + Fix helper to access stack pointer for powerpc
  + bpf: rename helper function bpf_get_stackid
  + bpf: print out the src debug info to a temporary file
  + attempt to compile with system bpf.h if default compile failed
  + sync src/cc/compat/linux headers with latest net-next
  + Fix segfault with enumerations
  + Allow BCC to parse vDSO symbols
  + libbpf: print error to error stream
  + Avoid potential SEGFAULT when resolving Kernel symbols
  + Fix 'tools/statsnoop' from failing to attach kprobes
  + Update USDT argument constraint for powerpc and powerpc64
  + examples:dns_matching: make it work as DNS sniffer
  + add debug option to dump asm insns embedded with source
  + examples:dns_matching: helper function for adding cache entry
  + Traces external pointers in parenthesized expressions
  + examples:dns_matching: fixed loop break condition
  + Fix bcc_resolve_global_addr on shared libraries
  + BCC macro for the creation of LPM trie maps (#1359)
  + bpf_probe_read*: src argument should be const void *.
  + hardirqs, softirqs: Fix distribution mode units handling
  + Add a generic utility to check any binary availability
  + Fix 'test_debuginfo' from failing if a symbol has multiple
    aliases
  + nfsdist tool (#1347)
  + annotate program tag
  + add helpers to access program tag
  + examples: fixed http_filter example
  + nfsslower: trace slow NFS operations
  + Update after lookup in map.increment for HASH types
  + fix a bug introduced by previous lua-bcc build fix commit
  + Better check for compiler standard support
  + fix lua-bcc build issue with cmake try_compile
  + Fix segfault on incomplete types
  + Trace external pointers from helpers
  + Allow the flags to be specified in remove_xdp()
  + bcc-lua: --no-pie, not -no-pie
  + solisten, tcpconnlat, tcpretrans: Remove unnecessary
    bpf_probe_reads
- Add the new subpackage libbpf0
- Add bcc-bsc1065593-llvm4-hack.patch to work around the llvm
  libraries searching issue (bsc#1065593)
  (Also add clang4-devel-static to BuildRequires)
- Add bcc-bsc1065593-switch-to-mcjit.patch to switch from OrcJIT
  to MCJIT. OrcJIT actually doesn't work for bcc, and the bug was
  covered until we start to use the unified LLVM shared library.
  (bsc#1065593)
- Add bcc-add-soname-to-libbpf.patch to install the shared library
  properly
- Update the group of packages
- Disable USDT for ARM and AArch64 since it's not ready.</changelog>
  <changelog author="glin@suse.com" date="1510920000">- Use the python3 package by default
- Provide and obsolete python-bcc (it's python2-bcc now)</changelog>
  <changelog author="manfred.h@gmx.net" date="1511524800">- Add patch (bcc-python3.patch) to explicitly use "/usr/bin/python3"</changelog>
  <changelog author="glin@suse.com" date="1512129600">- Update to 0.5.0 (bsc#1070563)
  + Explain possible reason of an error in scripts that rely on
    /proc/kallsyms
  + bpf: fix a couple of issues related to arm64
  + bpf: Add support for prog_name and map_name
  + Add a few introspection helpers
  + Introduce BPF Program Snapshot helper (bps)
  + Trace external pointers through maps
  + Merge BType, Map, and Probe Consumers
  + Fix exception handling in python3
  + Add usdt support for ARM64
  + bpf: make test py_test_tools_smoke pass on arm64
  + Add soname to libbpf.so
  + Fix Module display for unreadable Modules
  + Use bpf_prog_load_flag in APIs
  + Add flag to enable verifier log_level 2
  + bpf: use MCJIT explicitly for ExecutionEngine
  + change frontend rewriter to better handle anonymous struct/union
  + Move BCC debug options to an installed header file
  + use user-provided log_level in bpf_prog_load
  + Add utility for cc tests to read command outputs
  + Fix 'test_libbcc' from failing due to symbol name mismatch
  + Update perf event type and config checks
  + libbpf: Support unbound raw socket creation
  + force linking the whole api-static library into shared library
  + man/bps: Add a man page for introspection/bps.c
  + Do not keep Loader instances around
  + python: make _decode_table_types aware of __int128
  + python: Avoid unnecessary pointer object creations
- Only exclude ppc and s390 build (FATE#322227, bsc#1070362)
- Add _constraints to reserve 2GB memory for linking with
  clang4-devel-static
- Rename armv7.patch as bcc-check_int128.patch to check if the
  compiler support int128 or not
- Drop upstreamed patches:
  + bcc-bsc1065593-switch-to-mcjit.patch
  + bcc-add-soname-to-libbpf.patch</changelog>
  <changelog author="glin@suse.com" date="1512388800">- Tweak the installation path of bps directly instead of installing
  it manually. For those architectures without luajit, %{_bindir}
  wasn't created and it failed the previous install command.
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1512648000">- Request at least 4G RAM for the s390x build
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1513339200">- Request at least 10GB disk since the clang4-devel-static needs
  more than 3GB and sometimes caused build fail (FATE#322227)</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Replace clang4-devel-static BuildRequires with
  clang-devel-static: use the unversioned one, folling the llvm
  meta package version (like all the other llvm/clang packages in
  the build chain).</changelog>
  <changelog author="glin@suse.com" date="1516363200">- Add bcc-fix-build-for-llvm-5.0.1.patch to fix the compilation
  error against llvm-5.0.1</changelog>
  <changelog author="glin@suse.com" date="1518091200">- Update bcc-python3.patch to make python3 default for all the
  python scripts (bsc#1079961)</changelog>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)
- Remove bps due to the incomplete support in kernel (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1540382400">- Add bcc-fix-compilation-error-with-latest-llvm.patch,
  bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  and bcc-compilation-error-with-latest-llvm.patch to fix build
  with llvm7 (fate#325696)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571918400">- Add bcc-bsc1154926-update-kernel-headers.patch to update the
  built-in header in bcc to match the one (uapi/linux/bpf.h) from
  kernel-devel or the compilation error may happen when including
  some kernel headers in bpf programs (bsc#1154926)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Recommends kernel-default-devel if kernel-default or
  kernel-default-base present (bsc#1172230)</changelog>
</package>
<package pkgid="e919b00b4fc2c2ad0260dd9860b0d5189aa88835f5b340c1cca0b6918de6e9f6" name="bcc-examples" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="lp151.12.3.1"/>
  <changelog author="idonmez@suse.com" date="1488456000">- Add remove-isystem.patch to unconditionally removing -isystem,
  looks like the gcc check is broken.
- Add armv7.patch to disable __uint128_t usage which does not
  exist on ARMv7.
- Always use clang as C compiler, note that the build system will
  always use clang++ ad CXX compiler if it finds it.</changelog>
  <changelog author="glin@suse.com" date="1489147200">- Update to 0.3.0
  + Added s390x support. Needs 4.10 Kernel
  + Restrict rewrite of unary operators to dereference operator
  + cmake: Explicitly mark static libraries as such
  + Fix bpf_dins_pkt rewrite in BinaryOperator
  + cc: Symbol resolution with multiple executable regions per
    module
  + cc: Fix assertion for debug builds
  + cc: Don't parse the same module multiple times for USDT probes
  + add XDP return values to python interface
  + python: handle null module in BPF.sym
  + filetop: support specifying sort column via cmdline argument
  + cc: Retry symbol resolution using perfmap
  + cc: Handle nested functions correctly when resolving symbols</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 0.3.0+git1496334311.6fa3681
  + Improve PerfEventArray clean up
  + make libbpf standalone-ready
  + Add support for generic XDP mode
  + Add option to control bcc_elf_foreach_sym behavior
  + Add bpf_get_first_key helper
  + Enable recursive scanf support for char[] as string
  + Fix computation of LUAJIT_INCLUDE_DIR
  + cc: Work around verifier error when reading USDT probe arguments
  + Disable non-static function calls
  + Added the option(USINGISYSTEM) of Cmake for controling whether
    using -isystem. (#1064)
  + softirqs: Migrate to kernel tracepoints instead of kprobes
    (#1091)
  + lua/bpf: implemented packet direct access
  + lua/bpf: support for NET_OFF for dissector
  + KVM hypercall analysis example (#1082)
  + cc: add support for prog table
  + cc: add support for array table
  + Add TableStorage class for wrapping bpf map tracking
  + funcslower: Trace slow kernel or user function calls
  + map.insert bcc helper to expose the BPF_NOEXIST flag (#1085)
  + bcc container improvements (#1051)
  + cc: define load_func and unload_func public
  + Python 3 compatibility fixes around string handling (#986)
  + Verify format specifiers in bpf_trace_printk in rewriter
  + Add build option for installing C++ examples
  + bpflist: Display processes with running BPF programs and maps
  + python: Allow module=None when resolving kernel symbols
  + mdflush: Add missing #include &lt;linux/bio.h&gt;
- Enable AArch64 build (FATE#322227)
- Remove remove-isystem.patch since it can be controlled by the
  cmake option now.
- Add gcc-c++ to the BuildRequires and switch to gcc/g++</changelog>
  <changelog author="glin@suse.com" date="1503057600">- Update to 0.3.0+git1502955391.9de830a
  + avoid large map memory allocation in userspace
  + python - set attach_xdp's default flag value to 0
  + have uniform uprobe event names for python and C++
  + Remove extra S_MAXSTAT array allocation in some tools
  + Omit include of ptrace.h for empty usdt contexts
  + Add clang check for -nopie option
  + Correct commit id for BPF_FUNC_get_socket_cookie
  + tools/tcptracer: add timestamp option
  + Since LUA_GLOBALSINDEX is obsolete from Lua 5.2, use
    lua_getglobal function instead.
  + better state default value handling
  + add --state to offcputime
  + tcptop: Filter out negative values in receive probe
  + tcptop: Cleanup argument parsing
  + Use unsigned conversion specifier for nlmsg_pid
  + Fix wrong netlink port id check
  + 1. Use more safe snprintf instead of sprintf;
    2. Modify procfilename buffer length in bcc_procutils_language
    function.
  + permit multiple pids attaching to the same probe
  + generate proper usdt code to prevent llvm meddling with
    ctx-&gt;#fields
  + MySQL tracing without USDT (#1239)
  + Fix a clang memory leak
  + Update bpf.h and virtual_bpf.h to 4.13-rc1
  + Fix trace.py for library filenames containing colons (#1252)
  + cc: Add open_perf_event to the C/C++ API (#1232)
  + memleak: expand allocator coverage (#1214)
  + libbpf: fix build warning on setns (#1246)
  + usdt: Use ProcMountNS
  + proc: Enhance bcc_mapping_is_file_backed
  + Fix bcc.lua build issue in Ubuntu 17.04
  + Added helpers for BPF_PERCPU_ARRAY (#1230)
  + Add an option to strip leading zeros from histograms (#1226)
  + gethostlatency was rounding to full ms
  + Change clang frontend optimization level from 0 to 2
  + fix cc: error: unrecognized command line option -no-pie
  + fix incorrect code generation in usdt</changelog>
  <changelog author="glin@suse.com" date="1510228800">- Update to 0.4.0
  + Fix helper to access stack pointer for powerpc
  + bpf: rename helper function bpf_get_stackid
  + bpf: print out the src debug info to a temporary file
  + attempt to compile with system bpf.h if default compile failed
  + sync src/cc/compat/linux headers with latest net-next
  + Fix segfault with enumerations
  + Allow BCC to parse vDSO symbols
  + libbpf: print error to error stream
  + Avoid potential SEGFAULT when resolving Kernel symbols
  + Fix 'tools/statsnoop' from failing to attach kprobes
  + Update USDT argument constraint for powerpc and powerpc64
  + examples:dns_matching: make it work as DNS sniffer
  + add debug option to dump asm insns embedded with source
  + examples:dns_matching: helper function for adding cache entry
  + Traces external pointers in parenthesized expressions
  + examples:dns_matching: fixed loop break condition
  + Fix bcc_resolve_global_addr on shared libraries
  + BCC macro for the creation of LPM trie maps (#1359)
  + bpf_probe_read*: src argument should be const void *.
  + hardirqs, softirqs: Fix distribution mode units handling
  + Add a generic utility to check any binary availability
  + Fix 'test_debuginfo' from failing if a symbol has multiple
    aliases
  + nfsdist tool (#1347)
  + annotate program tag
  + add helpers to access program tag
  + examples: fixed http_filter example
  + nfsslower: trace slow NFS operations
  + Update after lookup in map.increment for HASH types
  + fix a bug introduced by previous lua-bcc build fix commit
  + Better check for compiler standard support
  + fix lua-bcc build issue with cmake try_compile
  + Fix segfault on incomplete types
  + Trace external pointers from helpers
  + Allow the flags to be specified in remove_xdp()
  + bcc-lua: --no-pie, not -no-pie
  + solisten, tcpconnlat, tcpretrans: Remove unnecessary
    bpf_probe_reads
- Add the new subpackage libbpf0
- Add bcc-bsc1065593-llvm4-hack.patch to work around the llvm
  libraries searching issue (bsc#1065593)
  (Also add clang4-devel-static to BuildRequires)
- Add bcc-bsc1065593-switch-to-mcjit.patch to switch from OrcJIT
  to MCJIT. OrcJIT actually doesn't work for bcc, and the bug was
  covered until we start to use the unified LLVM shared library.
  (bsc#1065593)
- Add bcc-add-soname-to-libbpf.patch to install the shared library
  properly
- Update the group of packages
- Disable USDT for ARM and AArch64 since it's not ready.</changelog>
  <changelog author="glin@suse.com" date="1510920000">- Use the python3 package by default
- Provide and obsolete python-bcc (it's python2-bcc now)</changelog>
  <changelog author="manfred.h@gmx.net" date="1511524800">- Add patch (bcc-python3.patch) to explicitly use "/usr/bin/python3"</changelog>
  <changelog author="glin@suse.com" date="1512129600">- Update to 0.5.0 (bsc#1070563)
  + Explain possible reason of an error in scripts that rely on
    /proc/kallsyms
  + bpf: fix a couple of issues related to arm64
  + bpf: Add support for prog_name and map_name
  + Add a few introspection helpers
  + Introduce BPF Program Snapshot helper (bps)
  + Trace external pointers through maps
  + Merge BType, Map, and Probe Consumers
  + Fix exception handling in python3
  + Add usdt support for ARM64
  + bpf: make test py_test_tools_smoke pass on arm64
  + Add soname to libbpf.so
  + Fix Module display for unreadable Modules
  + Use bpf_prog_load_flag in APIs
  + Add flag to enable verifier log_level 2
  + bpf: use MCJIT explicitly for ExecutionEngine
  + change frontend rewriter to better handle anonymous struct/union
  + Move BCC debug options to an installed header file
  + use user-provided log_level in bpf_prog_load
  + Add utility for cc tests to read command outputs
  + Fix 'test_libbcc' from failing due to symbol name mismatch
  + Update perf event type and config checks
  + libbpf: Support unbound raw socket creation
  + force linking the whole api-static library into shared library
  + man/bps: Add a man page for introspection/bps.c
  + Do not keep Loader instances around
  + python: make _decode_table_types aware of __int128
  + python: Avoid unnecessary pointer object creations
- Only exclude ppc and s390 build (FATE#322227, bsc#1070362)
- Add _constraints to reserve 2GB memory for linking with
  clang4-devel-static
- Rename armv7.patch as bcc-check_int128.patch to check if the
  compiler support int128 or not
- Drop upstreamed patches:
  + bcc-bsc1065593-switch-to-mcjit.patch
  + bcc-add-soname-to-libbpf.patch</changelog>
  <changelog author="glin@suse.com" date="1512388800">- Tweak the installation path of bps directly instead of installing
  it manually. For those architectures without luajit, %{_bindir}
  wasn't created and it failed the previous install command.
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1512648000">- Request at least 4G RAM for the s390x build
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1513339200">- Request at least 10GB disk since the clang4-devel-static needs
  more than 3GB and sometimes caused build fail (FATE#322227)</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Replace clang4-devel-static BuildRequires with
  clang-devel-static: use the unversioned one, folling the llvm
  meta package version (like all the other llvm/clang packages in
  the build chain).</changelog>
  <changelog author="glin@suse.com" date="1516363200">- Add bcc-fix-build-for-llvm-5.0.1.patch to fix the compilation
  error against llvm-5.0.1</changelog>
  <changelog author="glin@suse.com" date="1518091200">- Update bcc-python3.patch to make python3 default for all the
  python scripts (bsc#1079961)</changelog>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)
- Remove bps due to the incomplete support in kernel (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1540382400">- Add bcc-fix-compilation-error-with-latest-llvm.patch,
  bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  and bcc-compilation-error-with-latest-llvm.patch to fix build
  with llvm7 (fate#325696)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571918400">- Add bcc-bsc1154926-update-kernel-headers.patch to update the
  built-in header in bcc to match the one (uapi/linux/bpf.h) from
  kernel-devel or the compilation error may happen when including
  some kernel headers in bpf programs (bsc#1154926)</changelog>
</package>
<package pkgid="a2783dd5a702b285d82054666faf6a8b2a25b2bc3ad20aa5843f485292c0c658" name="bcc-examples" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="lp151.12.6.1"/>
  <changelog author="glin@suse.com" date="1489147200">- Update to 0.3.0
  + Added s390x support. Needs 4.10 Kernel
  + Restrict rewrite of unary operators to dereference operator
  + cmake: Explicitly mark static libraries as such
  + Fix bpf_dins_pkt rewrite in BinaryOperator
  + cc: Symbol resolution with multiple executable regions per
    module
  + cc: Fix assertion for debug builds
  + cc: Don't parse the same module multiple times for USDT probes
  + add XDP return values to python interface
  + python: handle null module in BPF.sym
  + filetop: support specifying sort column via cmdline argument
  + cc: Retry symbol resolution using perfmap
  + cc: Handle nested functions correctly when resolving symbols</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 0.3.0+git1496334311.6fa3681
  + Improve PerfEventArray clean up
  + make libbpf standalone-ready
  + Add support for generic XDP mode
  + Add option to control bcc_elf_foreach_sym behavior
  + Add bpf_get_first_key helper
  + Enable recursive scanf support for char[] as string
  + Fix computation of LUAJIT_INCLUDE_DIR
  + cc: Work around verifier error when reading USDT probe arguments
  + Disable non-static function calls
  + Added the option(USINGISYSTEM) of Cmake for controling whether
    using -isystem. (#1064)
  + softirqs: Migrate to kernel tracepoints instead of kprobes
    (#1091)
  + lua/bpf: implemented packet direct access
  + lua/bpf: support for NET_OFF for dissector
  + KVM hypercall analysis example (#1082)
  + cc: add support for prog table
  + cc: add support for array table
  + Add TableStorage class for wrapping bpf map tracking
  + funcslower: Trace slow kernel or user function calls
  + map.insert bcc helper to expose the BPF_NOEXIST flag (#1085)
  + bcc container improvements (#1051)
  + cc: define load_func and unload_func public
  + Python 3 compatibility fixes around string handling (#986)
  + Verify format specifiers in bpf_trace_printk in rewriter
  + Add build option for installing C++ examples
  + bpflist: Display processes with running BPF programs and maps
  + python: Allow module=None when resolving kernel symbols
  + mdflush: Add missing #include &lt;linux/bio.h&gt;
- Enable AArch64 build (FATE#322227)
- Remove remove-isystem.patch since it can be controlled by the
  cmake option now.
- Add gcc-c++ to the BuildRequires and switch to gcc/g++</changelog>
  <changelog author="glin@suse.com" date="1503057600">- Update to 0.3.0+git1502955391.9de830a
  + avoid large map memory allocation in userspace
  + python - set attach_xdp's default flag value to 0
  + have uniform uprobe event names for python and C++
  + Remove extra S_MAXSTAT array allocation in some tools
  + Omit include of ptrace.h for empty usdt contexts
  + Add clang check for -nopie option
  + Correct commit id for BPF_FUNC_get_socket_cookie
  + tools/tcptracer: add timestamp option
  + Since LUA_GLOBALSINDEX is obsolete from Lua 5.2, use
    lua_getglobal function instead.
  + better state default value handling
  + add --state to offcputime
  + tcptop: Filter out negative values in receive probe
  + tcptop: Cleanup argument parsing
  + Use unsigned conversion specifier for nlmsg_pid
  + Fix wrong netlink port id check
  + 1. Use more safe snprintf instead of sprintf;
    2. Modify procfilename buffer length in bcc_procutils_language
    function.
  + permit multiple pids attaching to the same probe
  + generate proper usdt code to prevent llvm meddling with
    ctx-&gt;#fields
  + MySQL tracing without USDT (#1239)
  + Fix a clang memory leak
  + Update bpf.h and virtual_bpf.h to 4.13-rc1
  + Fix trace.py for library filenames containing colons (#1252)
  + cc: Add open_perf_event to the C/C++ API (#1232)
  + memleak: expand allocator coverage (#1214)
  + libbpf: fix build warning on setns (#1246)
  + usdt: Use ProcMountNS
  + proc: Enhance bcc_mapping_is_file_backed
  + Fix bcc.lua build issue in Ubuntu 17.04
  + Added helpers for BPF_PERCPU_ARRAY (#1230)
  + Add an option to strip leading zeros from histograms (#1226)
  + gethostlatency was rounding to full ms
  + Change clang frontend optimization level from 0 to 2
  + fix cc: error: unrecognized command line option -no-pie
  + fix incorrect code generation in usdt</changelog>
  <changelog author="glin@suse.com" date="1510228800">- Update to 0.4.0
  + Fix helper to access stack pointer for powerpc
  + bpf: rename helper function bpf_get_stackid
  + bpf: print out the src debug info to a temporary file
  + attempt to compile with system bpf.h if default compile failed
  + sync src/cc/compat/linux headers with latest net-next
  + Fix segfault with enumerations
  + Allow BCC to parse vDSO symbols
  + libbpf: print error to error stream
  + Avoid potential SEGFAULT when resolving Kernel symbols
  + Fix 'tools/statsnoop' from failing to attach kprobes
  + Update USDT argument constraint for powerpc and powerpc64
  + examples:dns_matching: make it work as DNS sniffer
  + add debug option to dump asm insns embedded with source
  + examples:dns_matching: helper function for adding cache entry
  + Traces external pointers in parenthesized expressions
  + examples:dns_matching: fixed loop break condition
  + Fix bcc_resolve_global_addr on shared libraries
  + BCC macro for the creation of LPM trie maps (#1359)
  + bpf_probe_read*: src argument should be const void *.
  + hardirqs, softirqs: Fix distribution mode units handling
  + Add a generic utility to check any binary availability
  + Fix 'test_debuginfo' from failing if a symbol has multiple
    aliases
  + nfsdist tool (#1347)
  + annotate program tag
  + add helpers to access program tag
  + examples: fixed http_filter example
  + nfsslower: trace slow NFS operations
  + Update after lookup in map.increment for HASH types
  + fix a bug introduced by previous lua-bcc build fix commit
  + Better check for compiler standard support
  + fix lua-bcc build issue with cmake try_compile
  + Fix segfault on incomplete types
  + Trace external pointers from helpers
  + Allow the flags to be specified in remove_xdp()
  + bcc-lua: --no-pie, not -no-pie
  + solisten, tcpconnlat, tcpretrans: Remove unnecessary
    bpf_probe_reads
- Add the new subpackage libbpf0
- Add bcc-bsc1065593-llvm4-hack.patch to work around the llvm
  libraries searching issue (bsc#1065593)
  (Also add clang4-devel-static to BuildRequires)
- Add bcc-bsc1065593-switch-to-mcjit.patch to switch from OrcJIT
  to MCJIT. OrcJIT actually doesn't work for bcc, and the bug was
  covered until we start to use the unified LLVM shared library.
  (bsc#1065593)
- Add bcc-add-soname-to-libbpf.patch to install the shared library
  properly
- Update the group of packages
- Disable USDT for ARM and AArch64 since it's not ready.</changelog>
  <changelog author="glin@suse.com" date="1510920000">- Use the python3 package by default
- Provide and obsolete python-bcc (it's python2-bcc now)</changelog>
  <changelog author="manfred.h@gmx.net" date="1511524800">- Add patch (bcc-python3.patch) to explicitly use "/usr/bin/python3"</changelog>
  <changelog author="glin@suse.com" date="1512129600">- Update to 0.5.0 (bsc#1070563)
  + Explain possible reason of an error in scripts that rely on
    /proc/kallsyms
  + bpf: fix a couple of issues related to arm64
  + bpf: Add support for prog_name and map_name
  + Add a few introspection helpers
  + Introduce BPF Program Snapshot helper (bps)
  + Trace external pointers through maps
  + Merge BType, Map, and Probe Consumers
  + Fix exception handling in python3
  + Add usdt support for ARM64
  + bpf: make test py_test_tools_smoke pass on arm64
  + Add soname to libbpf.so
  + Fix Module display for unreadable Modules
  + Use bpf_prog_load_flag in APIs
  + Add flag to enable verifier log_level 2
  + bpf: use MCJIT explicitly for ExecutionEngine
  + change frontend rewriter to better handle anonymous struct/union
  + Move BCC debug options to an installed header file
  + use user-provided log_level in bpf_prog_load
  + Add utility for cc tests to read command outputs
  + Fix 'test_libbcc' from failing due to symbol name mismatch
  + Update perf event type and config checks
  + libbpf: Support unbound raw socket creation
  + force linking the whole api-static library into shared library
  + man/bps: Add a man page for introspection/bps.c
  + Do not keep Loader instances around
  + python: make _decode_table_types aware of __int128
  + python: Avoid unnecessary pointer object creations
- Only exclude ppc and s390 build (FATE#322227, bsc#1070362)
- Add _constraints to reserve 2GB memory for linking with
  clang4-devel-static
- Rename armv7.patch as bcc-check_int128.patch to check if the
  compiler support int128 or not
- Drop upstreamed patches:
  + bcc-bsc1065593-switch-to-mcjit.patch
  + bcc-add-soname-to-libbpf.patch</changelog>
  <changelog author="glin@suse.com" date="1512388800">- Tweak the installation path of bps directly instead of installing
  it manually. For those architectures without luajit, %{_bindir}
  wasn't created and it failed the previous install command.
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1512648000">- Request at least 4G RAM for the s390x build
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1513339200">- Request at least 10GB disk since the clang4-devel-static needs
  more than 3GB and sometimes caused build fail (FATE#322227)</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Replace clang4-devel-static BuildRequires with
  clang-devel-static: use the unversioned one, folling the llvm
  meta package version (like all the other llvm/clang packages in
  the build chain).</changelog>
  <changelog author="glin@suse.com" date="1516363200">- Add bcc-fix-build-for-llvm-5.0.1.patch to fix the compilation
  error against llvm-5.0.1</changelog>
  <changelog author="glin@suse.com" date="1518091200">- Update bcc-python3.patch to make python3 default for all the
  python scripts (bsc#1079961)</changelog>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)
- Remove bps due to the incomplete support in kernel (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1540382400">- Add bcc-fix-compilation-error-with-latest-llvm.patch,
  bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  and bcc-compilation-error-with-latest-llvm.patch to fix build
  with llvm7 (fate#325696)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571918400">- Add bcc-bsc1154926-update-kernel-headers.patch to update the
  built-in header in bcc to match the one (uapi/linux/bpf.h) from
  kernel-devel or the compilation error may happen when including
  some kernel headers in bpf programs (bsc#1154926)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Recommends kernel-default-devel if kernel-default or
  kernel-default-base present (bsc#1172230)</changelog>
</package>
<package pkgid="7a9cc64dc83b0fbc4f491372b455dc15fec2a8b632966c25553f53af6c2ddf2b" name="bcc-lua" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="lp151.12.3.1"/>
  <changelog author="idonmez@suse.com" date="1488456000">- Add remove-isystem.patch to unconditionally removing -isystem,
  looks like the gcc check is broken.
- Add armv7.patch to disable __uint128_t usage which does not
  exist on ARMv7.
- Always use clang as C compiler, note that the build system will
  always use clang++ ad CXX compiler if it finds it.</changelog>
  <changelog author="glin@suse.com" date="1489147200">- Update to 0.3.0
  + Added s390x support. Needs 4.10 Kernel
  + Restrict rewrite of unary operators to dereference operator
  + cmake: Explicitly mark static libraries as such
  + Fix bpf_dins_pkt rewrite in BinaryOperator
  + cc: Symbol resolution with multiple executable regions per
    module
  + cc: Fix assertion for debug builds
  + cc: Don't parse the same module multiple times for USDT probes
  + add XDP return values to python interface
  + python: handle null module in BPF.sym
  + filetop: support specifying sort column via cmdline argument
  + cc: Retry symbol resolution using perfmap
  + cc: Handle nested functions correctly when resolving symbols</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 0.3.0+git1496334311.6fa3681
  + Improve PerfEventArray clean up
  + make libbpf standalone-ready
  + Add support for generic XDP mode
  + Add option to control bcc_elf_foreach_sym behavior
  + Add bpf_get_first_key helper
  + Enable recursive scanf support for char[] as string
  + Fix computation of LUAJIT_INCLUDE_DIR
  + cc: Work around verifier error when reading USDT probe arguments
  + Disable non-static function calls
  + Added the option(USINGISYSTEM) of Cmake for controling whether
    using -isystem. (#1064)
  + softirqs: Migrate to kernel tracepoints instead of kprobes
    (#1091)
  + lua/bpf: implemented packet direct access
  + lua/bpf: support for NET_OFF for dissector
  + KVM hypercall analysis example (#1082)
  + cc: add support for prog table
  + cc: add support for array table
  + Add TableStorage class for wrapping bpf map tracking
  + funcslower: Trace slow kernel or user function calls
  + map.insert bcc helper to expose the BPF_NOEXIST flag (#1085)
  + bcc container improvements (#1051)
  + cc: define load_func and unload_func public
  + Python 3 compatibility fixes around string handling (#986)
  + Verify format specifiers in bpf_trace_printk in rewriter
  + Add build option for installing C++ examples
  + bpflist: Display processes with running BPF programs and maps
  + python: Allow module=None when resolving kernel symbols
  + mdflush: Add missing #include &lt;linux/bio.h&gt;
- Enable AArch64 build (FATE#322227)
- Remove remove-isystem.patch since it can be controlled by the
  cmake option now.
- Add gcc-c++ to the BuildRequires and switch to gcc/g++</changelog>
  <changelog author="glin@suse.com" date="1503057600">- Update to 0.3.0+git1502955391.9de830a
  + avoid large map memory allocation in userspace
  + python - set attach_xdp's default flag value to 0
  + have uniform uprobe event names for python and C++
  + Remove extra S_MAXSTAT array allocation in some tools
  + Omit include of ptrace.h for empty usdt contexts
  + Add clang check for -nopie option
  + Correct commit id for BPF_FUNC_get_socket_cookie
  + tools/tcptracer: add timestamp option
  + Since LUA_GLOBALSINDEX is obsolete from Lua 5.2, use
    lua_getglobal function instead.
  + better state default value handling
  + add --state to offcputime
  + tcptop: Filter out negative values in receive probe
  + tcptop: Cleanup argument parsing
  + Use unsigned conversion specifier for nlmsg_pid
  + Fix wrong netlink port id check
  + 1. Use more safe snprintf instead of sprintf;
    2. Modify procfilename buffer length in bcc_procutils_language
    function.
  + permit multiple pids attaching to the same probe
  + generate proper usdt code to prevent llvm meddling with
    ctx-&gt;#fields
  + MySQL tracing without USDT (#1239)
  + Fix a clang memory leak
  + Update bpf.h and virtual_bpf.h to 4.13-rc1
  + Fix trace.py for library filenames containing colons (#1252)
  + cc: Add open_perf_event to the C/C++ API (#1232)
  + memleak: expand allocator coverage (#1214)
  + libbpf: fix build warning on setns (#1246)
  + usdt: Use ProcMountNS
  + proc: Enhance bcc_mapping_is_file_backed
  + Fix bcc.lua build issue in Ubuntu 17.04
  + Added helpers for BPF_PERCPU_ARRAY (#1230)
  + Add an option to strip leading zeros from histograms (#1226)
  + gethostlatency was rounding to full ms
  + Change clang frontend optimization level from 0 to 2
  + fix cc: error: unrecognized command line option -no-pie
  + fix incorrect code generation in usdt</changelog>
  <changelog author="glin@suse.com" date="1510228800">- Update to 0.4.0
  + Fix helper to access stack pointer for powerpc
  + bpf: rename helper function bpf_get_stackid
  + bpf: print out the src debug info to a temporary file
  + attempt to compile with system bpf.h if default compile failed
  + sync src/cc/compat/linux headers with latest net-next
  + Fix segfault with enumerations
  + Allow BCC to parse vDSO symbols
  + libbpf: print error to error stream
  + Avoid potential SEGFAULT when resolving Kernel symbols
  + Fix 'tools/statsnoop' from failing to attach kprobes
  + Update USDT argument constraint for powerpc and powerpc64
  + examples:dns_matching: make it work as DNS sniffer
  + add debug option to dump asm insns embedded with source
  + examples:dns_matching: helper function for adding cache entry
  + Traces external pointers in parenthesized expressions
  + examples:dns_matching: fixed loop break condition
  + Fix bcc_resolve_global_addr on shared libraries
  + BCC macro for the creation of LPM trie maps (#1359)
  + bpf_probe_read*: src argument should be const void *.
  + hardirqs, softirqs: Fix distribution mode units handling
  + Add a generic utility to check any binary availability
  + Fix 'test_debuginfo' from failing if a symbol has multiple
    aliases
  + nfsdist tool (#1347)
  + annotate program tag
  + add helpers to access program tag
  + examples: fixed http_filter example
  + nfsslower: trace slow NFS operations
  + Update after lookup in map.increment for HASH types
  + fix a bug introduced by previous lua-bcc build fix commit
  + Better check for compiler standard support
  + fix lua-bcc build issue with cmake try_compile
  + Fix segfault on incomplete types
  + Trace external pointers from helpers
  + Allow the flags to be specified in remove_xdp()
  + bcc-lua: --no-pie, not -no-pie
  + solisten, tcpconnlat, tcpretrans: Remove unnecessary
    bpf_probe_reads
- Add the new subpackage libbpf0
- Add bcc-bsc1065593-llvm4-hack.patch to work around the llvm
  libraries searching issue (bsc#1065593)
  (Also add clang4-devel-static to BuildRequires)
- Add bcc-bsc1065593-switch-to-mcjit.patch to switch from OrcJIT
  to MCJIT. OrcJIT actually doesn't work for bcc, and the bug was
  covered until we start to use the unified LLVM shared library.
  (bsc#1065593)
- Add bcc-add-soname-to-libbpf.patch to install the shared library
  properly
- Update the group of packages
- Disable USDT for ARM and AArch64 since it's not ready.</changelog>
  <changelog author="glin@suse.com" date="1510920000">- Use the python3 package by default
- Provide and obsolete python-bcc (it's python2-bcc now)</changelog>
  <changelog author="manfred.h@gmx.net" date="1511524800">- Add patch (bcc-python3.patch) to explicitly use "/usr/bin/python3"</changelog>
  <changelog author="glin@suse.com" date="1512129600">- Update to 0.5.0 (bsc#1070563)
  + Explain possible reason of an error in scripts that rely on
    /proc/kallsyms
  + bpf: fix a couple of issues related to arm64
  + bpf: Add support for prog_name and map_name
  + Add a few introspection helpers
  + Introduce BPF Program Snapshot helper (bps)
  + Trace external pointers through maps
  + Merge BType, Map, and Probe Consumers
  + Fix exception handling in python3
  + Add usdt support for ARM64
  + bpf: make test py_test_tools_smoke pass on arm64
  + Add soname to libbpf.so
  + Fix Module display for unreadable Modules
  + Use bpf_prog_load_flag in APIs
  + Add flag to enable verifier log_level 2
  + bpf: use MCJIT explicitly for ExecutionEngine
  + change frontend rewriter to better handle anonymous struct/union
  + Move BCC debug options to an installed header file
  + use user-provided log_level in bpf_prog_load
  + Add utility for cc tests to read command outputs
  + Fix 'test_libbcc' from failing due to symbol name mismatch
  + Update perf event type and config checks
  + libbpf: Support unbound raw socket creation
  + force linking the whole api-static library into shared library
  + man/bps: Add a man page for introspection/bps.c
  + Do not keep Loader instances around
  + python: make _decode_table_types aware of __int128
  + python: Avoid unnecessary pointer object creations
- Only exclude ppc and s390 build (FATE#322227, bsc#1070362)
- Add _constraints to reserve 2GB memory for linking with
  clang4-devel-static
- Rename armv7.patch as bcc-check_int128.patch to check if the
  compiler support int128 or not
- Drop upstreamed patches:
  + bcc-bsc1065593-switch-to-mcjit.patch
  + bcc-add-soname-to-libbpf.patch</changelog>
  <changelog author="glin@suse.com" date="1512388800">- Tweak the installation path of bps directly instead of installing
  it manually. For those architectures without luajit, %{_bindir}
  wasn't created and it failed the previous install command.
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1512648000">- Request at least 4G RAM for the s390x build
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1513339200">- Request at least 10GB disk since the clang4-devel-static needs
  more than 3GB and sometimes caused build fail (FATE#322227)</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Replace clang4-devel-static BuildRequires with
  clang-devel-static: use the unversioned one, folling the llvm
  meta package version (like all the other llvm/clang packages in
  the build chain).</changelog>
  <changelog author="glin@suse.com" date="1516363200">- Add bcc-fix-build-for-llvm-5.0.1.patch to fix the compilation
  error against llvm-5.0.1</changelog>
  <changelog author="glin@suse.com" date="1518091200">- Update bcc-python3.patch to make python3 default for all the
  python scripts (bsc#1079961)</changelog>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)
- Remove bps due to the incomplete support in kernel (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1540382400">- Add bcc-fix-compilation-error-with-latest-llvm.patch,
  bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  and bcc-compilation-error-with-latest-llvm.patch to fix build
  with llvm7 (fate#325696)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571918400">- Add bcc-bsc1154926-update-kernel-headers.patch to update the
  built-in header in bcc to match the one (uapi/linux/bpf.h) from
  kernel-devel or the compilation error may happen when including
  some kernel headers in bpf programs (bsc#1154926)</changelog>
</package>
<package pkgid="67e590dd18e88e8256f41c6cebd9a757c2a798b625daf4ce55e786f14be3e0f4" name="bcc-lua" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="lp151.12.6.1"/>
  <changelog author="glin@suse.com" date="1489147200">- Update to 0.3.0
  + Added s390x support. Needs 4.10 Kernel
  + Restrict rewrite of unary operators to dereference operator
  + cmake: Explicitly mark static libraries as such
  + Fix bpf_dins_pkt rewrite in BinaryOperator
  + cc: Symbol resolution with multiple executable regions per
    module
  + cc: Fix assertion for debug builds
  + cc: Don't parse the same module multiple times for USDT probes
  + add XDP return values to python interface
  + python: handle null module in BPF.sym
  + filetop: support specifying sort column via cmdline argument
  + cc: Retry symbol resolution using perfmap
  + cc: Handle nested functions correctly when resolving symbols</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 0.3.0+git1496334311.6fa3681
  + Improve PerfEventArray clean up
  + make libbpf standalone-ready
  + Add support for generic XDP mode
  + Add option to control bcc_elf_foreach_sym behavior
  + Add bpf_get_first_key helper
  + Enable recursive scanf support for char[] as string
  + Fix computation of LUAJIT_INCLUDE_DIR
  + cc: Work around verifier error when reading USDT probe arguments
  + Disable non-static function calls
  + Added the option(USINGISYSTEM) of Cmake for controling whether
    using -isystem. (#1064)
  + softirqs: Migrate to kernel tracepoints instead of kprobes
    (#1091)
  + lua/bpf: implemented packet direct access
  + lua/bpf: support for NET_OFF for dissector
  + KVM hypercall analysis example (#1082)
  + cc: add support for prog table
  + cc: add support for array table
  + Add TableStorage class for wrapping bpf map tracking
  + funcslower: Trace slow kernel or user function calls
  + map.insert bcc helper to expose the BPF_NOEXIST flag (#1085)
  + bcc container improvements (#1051)
  + cc: define load_func and unload_func public
  + Python 3 compatibility fixes around string handling (#986)
  + Verify format specifiers in bpf_trace_printk in rewriter
  + Add build option for installing C++ examples
  + bpflist: Display processes with running BPF programs and maps
  + python: Allow module=None when resolving kernel symbols
  + mdflush: Add missing #include &lt;linux/bio.h&gt;
- Enable AArch64 build (FATE#322227)
- Remove remove-isystem.patch since it can be controlled by the
  cmake option now.
- Add gcc-c++ to the BuildRequires and switch to gcc/g++</changelog>
  <changelog author="glin@suse.com" date="1503057600">- Update to 0.3.0+git1502955391.9de830a
  + avoid large map memory allocation in userspace
  + python - set attach_xdp's default flag value to 0
  + have uniform uprobe event names for python and C++
  + Remove extra S_MAXSTAT array allocation in some tools
  + Omit include of ptrace.h for empty usdt contexts
  + Add clang check for -nopie option
  + Correct commit id for BPF_FUNC_get_socket_cookie
  + tools/tcptracer: add timestamp option
  + Since LUA_GLOBALSINDEX is obsolete from Lua 5.2, use
    lua_getglobal function instead.
  + better state default value handling
  + add --state to offcputime
  + tcptop: Filter out negative values in receive probe
  + tcptop: Cleanup argument parsing
  + Use unsigned conversion specifier for nlmsg_pid
  + Fix wrong netlink port id check
  + 1. Use more safe snprintf instead of sprintf;
    2. Modify procfilename buffer length in bcc_procutils_language
    function.
  + permit multiple pids attaching to the same probe
  + generate proper usdt code to prevent llvm meddling with
    ctx-&gt;#fields
  + MySQL tracing without USDT (#1239)
  + Fix a clang memory leak
  + Update bpf.h and virtual_bpf.h to 4.13-rc1
  + Fix trace.py for library filenames containing colons (#1252)
  + cc: Add open_perf_event to the C/C++ API (#1232)
  + memleak: expand allocator coverage (#1214)
  + libbpf: fix build warning on setns (#1246)
  + usdt: Use ProcMountNS
  + proc: Enhance bcc_mapping_is_file_backed
  + Fix bcc.lua build issue in Ubuntu 17.04
  + Added helpers for BPF_PERCPU_ARRAY (#1230)
  + Add an option to strip leading zeros from histograms (#1226)
  + gethostlatency was rounding to full ms
  + Change clang frontend optimization level from 0 to 2
  + fix cc: error: unrecognized command line option -no-pie
  + fix incorrect code generation in usdt</changelog>
  <changelog author="glin@suse.com" date="1510228800">- Update to 0.4.0
  + Fix helper to access stack pointer for powerpc
  + bpf: rename helper function bpf_get_stackid
  + bpf: print out the src debug info to a temporary file
  + attempt to compile with system bpf.h if default compile failed
  + sync src/cc/compat/linux headers with latest net-next
  + Fix segfault with enumerations
  + Allow BCC to parse vDSO symbols
  + libbpf: print error to error stream
  + Avoid potential SEGFAULT when resolving Kernel symbols
  + Fix 'tools/statsnoop' from failing to attach kprobes
  + Update USDT argument constraint for powerpc and powerpc64
  + examples:dns_matching: make it work as DNS sniffer
  + add debug option to dump asm insns embedded with source
  + examples:dns_matching: helper function for adding cache entry
  + Traces external pointers in parenthesized expressions
  + examples:dns_matching: fixed loop break condition
  + Fix bcc_resolve_global_addr on shared libraries
  + BCC macro for the creation of LPM trie maps (#1359)
  + bpf_probe_read*: src argument should be const void *.
  + hardirqs, softirqs: Fix distribution mode units handling
  + Add a generic utility to check any binary availability
  + Fix 'test_debuginfo' from failing if a symbol has multiple
    aliases
  + nfsdist tool (#1347)
  + annotate program tag
  + add helpers to access program tag
  + examples: fixed http_filter example
  + nfsslower: trace slow NFS operations
  + Update after lookup in map.increment for HASH types
  + fix a bug introduced by previous lua-bcc build fix commit
  + Better check for compiler standard support
  + fix lua-bcc build issue with cmake try_compile
  + Fix segfault on incomplete types
  + Trace external pointers from helpers
  + Allow the flags to be specified in remove_xdp()
  + bcc-lua: --no-pie, not -no-pie
  + solisten, tcpconnlat, tcpretrans: Remove unnecessary
    bpf_probe_reads
- Add the new subpackage libbpf0
- Add bcc-bsc1065593-llvm4-hack.patch to work around the llvm
  libraries searching issue (bsc#1065593)
  (Also add clang4-devel-static to BuildRequires)
- Add bcc-bsc1065593-switch-to-mcjit.patch to switch from OrcJIT
  to MCJIT. OrcJIT actually doesn't work for bcc, and the bug was
  covered until we start to use the unified LLVM shared library.
  (bsc#1065593)
- Add bcc-add-soname-to-libbpf.patch to install the shared library
  properly
- Update the group of packages
- Disable USDT for ARM and AArch64 since it's not ready.</changelog>
  <changelog author="glin@suse.com" date="1510920000">- Use the python3 package by default
- Provide and obsolete python-bcc (it's python2-bcc now)</changelog>
  <changelog author="manfred.h@gmx.net" date="1511524800">- Add patch (bcc-python3.patch) to explicitly use "/usr/bin/python3"</changelog>
  <changelog author="glin@suse.com" date="1512129600">- Update to 0.5.0 (bsc#1070563)
  + Explain possible reason of an error in scripts that rely on
    /proc/kallsyms
  + bpf: fix a couple of issues related to arm64
  + bpf: Add support for prog_name and map_name
  + Add a few introspection helpers
  + Introduce BPF Program Snapshot helper (bps)
  + Trace external pointers through maps
  + Merge BType, Map, and Probe Consumers
  + Fix exception handling in python3
  + Add usdt support for ARM64
  + bpf: make test py_test_tools_smoke pass on arm64
  + Add soname to libbpf.so
  + Fix Module display for unreadable Modules
  + Use bpf_prog_load_flag in APIs
  + Add flag to enable verifier log_level 2
  + bpf: use MCJIT explicitly for ExecutionEngine
  + change frontend rewriter to better handle anonymous struct/union
  + Move BCC debug options to an installed header file
  + use user-provided log_level in bpf_prog_load
  + Add utility for cc tests to read command outputs
  + Fix 'test_libbcc' from failing due to symbol name mismatch
  + Update perf event type and config checks
  + libbpf: Support unbound raw socket creation
  + force linking the whole api-static library into shared library
  + man/bps: Add a man page for introspection/bps.c
  + Do not keep Loader instances around
  + python: make _decode_table_types aware of __int128
  + python: Avoid unnecessary pointer object creations
- Only exclude ppc and s390 build (FATE#322227, bsc#1070362)
- Add _constraints to reserve 2GB memory for linking with
  clang4-devel-static
- Rename armv7.patch as bcc-check_int128.patch to check if the
  compiler support int128 or not
- Drop upstreamed patches:
  + bcc-bsc1065593-switch-to-mcjit.patch
  + bcc-add-soname-to-libbpf.patch</changelog>
  <changelog author="glin@suse.com" date="1512388800">- Tweak the installation path of bps directly instead of installing
  it manually. For those architectures without luajit, %{_bindir}
  wasn't created and it failed the previous install command.
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1512648000">- Request at least 4G RAM for the s390x build
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1513339200">- Request at least 10GB disk since the clang4-devel-static needs
  more than 3GB and sometimes caused build fail (FATE#322227)</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Replace clang4-devel-static BuildRequires with
  clang-devel-static: use the unversioned one, folling the llvm
  meta package version (like all the other llvm/clang packages in
  the build chain).</changelog>
  <changelog author="glin@suse.com" date="1516363200">- Add bcc-fix-build-for-llvm-5.0.1.patch to fix the compilation
  error against llvm-5.0.1</changelog>
  <changelog author="glin@suse.com" date="1518091200">- Update bcc-python3.patch to make python3 default for all the
  python scripts (bsc#1079961)</changelog>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)
- Remove bps due to the incomplete support in kernel (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1540382400">- Add bcc-fix-compilation-error-with-latest-llvm.patch,
  bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  and bcc-compilation-error-with-latest-llvm.patch to fix build
  with llvm7 (fate#325696)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571918400">- Add bcc-bsc1154926-update-kernel-headers.patch to update the
  built-in header in bcc to match the one (uapi/linux/bpf.h) from
  kernel-devel or the compilation error may happen when including
  some kernel headers in bpf programs (bsc#1154926)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Recommends kernel-default-devel if kernel-default or
  kernel-default-base present (bsc#1172230)</changelog>
</package>
<package pkgid="7c8b180a02e3b7fbcf5e64dea75119cf0a456856af0064da531e437281ac8ceb" name="bcc-tools" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="lp151.12.3.1"/>
  <changelog author="idonmez@suse.com" date="1488456000">- Add remove-isystem.patch to unconditionally removing -isystem,
  looks like the gcc check is broken.
- Add armv7.patch to disable __uint128_t usage which does not
  exist on ARMv7.
- Always use clang as C compiler, note that the build system will
  always use clang++ ad CXX compiler if it finds it.</changelog>
  <changelog author="glin@suse.com" date="1489147200">- Update to 0.3.0
  + Added s390x support. Needs 4.10 Kernel
  + Restrict rewrite of unary operators to dereference operator
  + cmake: Explicitly mark static libraries as such
  + Fix bpf_dins_pkt rewrite in BinaryOperator
  + cc: Symbol resolution with multiple executable regions per
    module
  + cc: Fix assertion for debug builds
  + cc: Don't parse the same module multiple times for USDT probes
  + add XDP return values to python interface
  + python: handle null module in BPF.sym
  + filetop: support specifying sort column via cmdline argument
  + cc: Retry symbol resolution using perfmap
  + cc: Handle nested functions correctly when resolving symbols</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 0.3.0+git1496334311.6fa3681
  + Improve PerfEventArray clean up
  + make libbpf standalone-ready
  + Add support for generic XDP mode
  + Add option to control bcc_elf_foreach_sym behavior
  + Add bpf_get_first_key helper
  + Enable recursive scanf support for char[] as string
  + Fix computation of LUAJIT_INCLUDE_DIR
  + cc: Work around verifier error when reading USDT probe arguments
  + Disable non-static function calls
  + Added the option(USINGISYSTEM) of Cmake for controling whether
    using -isystem. (#1064)
  + softirqs: Migrate to kernel tracepoints instead of kprobes
    (#1091)
  + lua/bpf: implemented packet direct access
  + lua/bpf: support for NET_OFF for dissector
  + KVM hypercall analysis example (#1082)
  + cc: add support for prog table
  + cc: add support for array table
  + Add TableStorage class for wrapping bpf map tracking
  + funcslower: Trace slow kernel or user function calls
  + map.insert bcc helper to expose the BPF_NOEXIST flag (#1085)
  + bcc container improvements (#1051)
  + cc: define load_func and unload_func public
  + Python 3 compatibility fixes around string handling (#986)
  + Verify format specifiers in bpf_trace_printk in rewriter
  + Add build option for installing C++ examples
  + bpflist: Display processes with running BPF programs and maps
  + python: Allow module=None when resolving kernel symbols
  + mdflush: Add missing #include &lt;linux/bio.h&gt;
- Enable AArch64 build (FATE#322227)
- Remove remove-isystem.patch since it can be controlled by the
  cmake option now.
- Add gcc-c++ to the BuildRequires and switch to gcc/g++</changelog>
  <changelog author="glin@suse.com" date="1503057600">- Update to 0.3.0+git1502955391.9de830a
  + avoid large map memory allocation in userspace
  + python - set attach_xdp's default flag value to 0
  + have uniform uprobe event names for python and C++
  + Remove extra S_MAXSTAT array allocation in some tools
  + Omit include of ptrace.h for empty usdt contexts
  + Add clang check for -nopie option
  + Correct commit id for BPF_FUNC_get_socket_cookie
  + tools/tcptracer: add timestamp option
  + Since LUA_GLOBALSINDEX is obsolete from Lua 5.2, use
    lua_getglobal function instead.
  + better state default value handling
  + add --state to offcputime
  + tcptop: Filter out negative values in receive probe
  + tcptop: Cleanup argument parsing
  + Use unsigned conversion specifier for nlmsg_pid
  + Fix wrong netlink port id check
  + 1. Use more safe snprintf instead of sprintf;
    2. Modify procfilename buffer length in bcc_procutils_language
    function.
  + permit multiple pids attaching to the same probe
  + generate proper usdt code to prevent llvm meddling with
    ctx-&gt;#fields
  + MySQL tracing without USDT (#1239)
  + Fix a clang memory leak
  + Update bpf.h and virtual_bpf.h to 4.13-rc1
  + Fix trace.py for library filenames containing colons (#1252)
  + cc: Add open_perf_event to the C/C++ API (#1232)
  + memleak: expand allocator coverage (#1214)
  + libbpf: fix build warning on setns (#1246)
  + usdt: Use ProcMountNS
  + proc: Enhance bcc_mapping_is_file_backed
  + Fix bcc.lua build issue in Ubuntu 17.04
  + Added helpers for BPF_PERCPU_ARRAY (#1230)
  + Add an option to strip leading zeros from histograms (#1226)
  + gethostlatency was rounding to full ms
  + Change clang frontend optimization level from 0 to 2
  + fix cc: error: unrecognized command line option -no-pie
  + fix incorrect code generation in usdt</changelog>
  <changelog author="glin@suse.com" date="1510228800">- Update to 0.4.0
  + Fix helper to access stack pointer for powerpc
  + bpf: rename helper function bpf_get_stackid
  + bpf: print out the src debug info to a temporary file
  + attempt to compile with system bpf.h if default compile failed
  + sync src/cc/compat/linux headers with latest net-next
  + Fix segfault with enumerations
  + Allow BCC to parse vDSO symbols
  + libbpf: print error to error stream
  + Avoid potential SEGFAULT when resolving Kernel symbols
  + Fix 'tools/statsnoop' from failing to attach kprobes
  + Update USDT argument constraint for powerpc and powerpc64
  + examples:dns_matching: make it work as DNS sniffer
  + add debug option to dump asm insns embedded with source
  + examples:dns_matching: helper function for adding cache entry
  + Traces external pointers in parenthesized expressions
  + examples:dns_matching: fixed loop break condition
  + Fix bcc_resolve_global_addr on shared libraries
  + BCC macro for the creation of LPM trie maps (#1359)
  + bpf_probe_read*: src argument should be const void *.
  + hardirqs, softirqs: Fix distribution mode units handling
  + Add a generic utility to check any binary availability
  + Fix 'test_debuginfo' from failing if a symbol has multiple
    aliases
  + nfsdist tool (#1347)
  + annotate program tag
  + add helpers to access program tag
  + examples: fixed http_filter example
  + nfsslower: trace slow NFS operations
  + Update after lookup in map.increment for HASH types
  + fix a bug introduced by previous lua-bcc build fix commit
  + Better check for compiler standard support
  + fix lua-bcc build issue with cmake try_compile
  + Fix segfault on incomplete types
  + Trace external pointers from helpers
  + Allow the flags to be specified in remove_xdp()
  + bcc-lua: --no-pie, not -no-pie
  + solisten, tcpconnlat, tcpretrans: Remove unnecessary
    bpf_probe_reads
- Add the new subpackage libbpf0
- Add bcc-bsc1065593-llvm4-hack.patch to work around the llvm
  libraries searching issue (bsc#1065593)
  (Also add clang4-devel-static to BuildRequires)
- Add bcc-bsc1065593-switch-to-mcjit.patch to switch from OrcJIT
  to MCJIT. OrcJIT actually doesn't work for bcc, and the bug was
  covered until we start to use the unified LLVM shared library.
  (bsc#1065593)
- Add bcc-add-soname-to-libbpf.patch to install the shared library
  properly
- Update the group of packages
- Disable USDT for ARM and AArch64 since it's not ready.</changelog>
  <changelog author="glin@suse.com" date="1510920000">- Use the python3 package by default
- Provide and obsolete python-bcc (it's python2-bcc now)</changelog>
  <changelog author="manfred.h@gmx.net" date="1511524800">- Add patch (bcc-python3.patch) to explicitly use "/usr/bin/python3"</changelog>
  <changelog author="glin@suse.com" date="1512129600">- Update to 0.5.0 (bsc#1070563)
  + Explain possible reason of an error in scripts that rely on
    /proc/kallsyms
  + bpf: fix a couple of issues related to arm64
  + bpf: Add support for prog_name and map_name
  + Add a few introspection helpers
  + Introduce BPF Program Snapshot helper (bps)
  + Trace external pointers through maps
  + Merge BType, Map, and Probe Consumers
  + Fix exception handling in python3
  + Add usdt support for ARM64
  + bpf: make test py_test_tools_smoke pass on arm64
  + Add soname to libbpf.so
  + Fix Module display for unreadable Modules
  + Use bpf_prog_load_flag in APIs
  + Add flag to enable verifier log_level 2
  + bpf: use MCJIT explicitly for ExecutionEngine
  + change frontend rewriter to better handle anonymous struct/union
  + Move BCC debug options to an installed header file
  + use user-provided log_level in bpf_prog_load
  + Add utility for cc tests to read command outputs
  + Fix 'test_libbcc' from failing due to symbol name mismatch
  + Update perf event type and config checks
  + libbpf: Support unbound raw socket creation
  + force linking the whole api-static library into shared library
  + man/bps: Add a man page for introspection/bps.c
  + Do not keep Loader instances around
  + python: make _decode_table_types aware of __int128
  + python: Avoid unnecessary pointer object creations
- Only exclude ppc and s390 build (FATE#322227, bsc#1070362)
- Add _constraints to reserve 2GB memory for linking with
  clang4-devel-static
- Rename armv7.patch as bcc-check_int128.patch to check if the
  compiler support int128 or not
- Drop upstreamed patches:
  + bcc-bsc1065593-switch-to-mcjit.patch
  + bcc-add-soname-to-libbpf.patch</changelog>
  <changelog author="glin@suse.com" date="1512388800">- Tweak the installation path of bps directly instead of installing
  it manually. For those architectures without luajit, %{_bindir}
  wasn't created and it failed the previous install command.
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1512648000">- Request at least 4G RAM for the s390x build
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1513339200">- Request at least 10GB disk since the clang4-devel-static needs
  more than 3GB and sometimes caused build fail (FATE#322227)</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Replace clang4-devel-static BuildRequires with
  clang-devel-static: use the unversioned one, folling the llvm
  meta package version (like all the other llvm/clang packages in
  the build chain).</changelog>
  <changelog author="glin@suse.com" date="1516363200">- Add bcc-fix-build-for-llvm-5.0.1.patch to fix the compilation
  error against llvm-5.0.1</changelog>
  <changelog author="glin@suse.com" date="1518091200">- Update bcc-python3.patch to make python3 default for all the
  python scripts (bsc#1079961)</changelog>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)
- Remove bps due to the incomplete support in kernel (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1540382400">- Add bcc-fix-compilation-error-with-latest-llvm.patch,
  bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  and bcc-compilation-error-with-latest-llvm.patch to fix build
  with llvm7 (fate#325696)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571918400">- Add bcc-bsc1154926-update-kernel-headers.patch to update the
  built-in header in bcc to match the one (uapi/linux/bpf.h) from
  kernel-devel or the compilation error may happen when including
  some kernel headers in bpf programs (bsc#1154926)</changelog>
</package>
<package pkgid="728d7c15c65461cb2750bb0c48877e72f80af176b4dfe3db561312f795e5e83f" name="bcc-tools" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="lp151.12.6.1"/>
  <changelog author="glin@suse.com" date="1489147200">- Update to 0.3.0
  + Added s390x support. Needs 4.10 Kernel
  + Restrict rewrite of unary operators to dereference operator
  + cmake: Explicitly mark static libraries as such
  + Fix bpf_dins_pkt rewrite in BinaryOperator
  + cc: Symbol resolution with multiple executable regions per
    module
  + cc: Fix assertion for debug builds
  + cc: Don't parse the same module multiple times for USDT probes
  + add XDP return values to python interface
  + python: handle null module in BPF.sym
  + filetop: support specifying sort column via cmdline argument
  + cc: Retry symbol resolution using perfmap
  + cc: Handle nested functions correctly when resolving symbols</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 0.3.0+git1496334311.6fa3681
  + Improve PerfEventArray clean up
  + make libbpf standalone-ready
  + Add support for generic XDP mode
  + Add option to control bcc_elf_foreach_sym behavior
  + Add bpf_get_first_key helper
  + Enable recursive scanf support for char[] as string
  + Fix computation of LUAJIT_INCLUDE_DIR
  + cc: Work around verifier error when reading USDT probe arguments
  + Disable non-static function calls
  + Added the option(USINGISYSTEM) of Cmake for controling whether
    using -isystem. (#1064)
  + softirqs: Migrate to kernel tracepoints instead of kprobes
    (#1091)
  + lua/bpf: implemented packet direct access
  + lua/bpf: support for NET_OFF for dissector
  + KVM hypercall analysis example (#1082)
  + cc: add support for prog table
  + cc: add support for array table
  + Add TableStorage class for wrapping bpf map tracking
  + funcslower: Trace slow kernel or user function calls
  + map.insert bcc helper to expose the BPF_NOEXIST flag (#1085)
  + bcc container improvements (#1051)
  + cc: define load_func and unload_func public
  + Python 3 compatibility fixes around string handling (#986)
  + Verify format specifiers in bpf_trace_printk in rewriter
  + Add build option for installing C++ examples
  + bpflist: Display processes with running BPF programs and maps
  + python: Allow module=None when resolving kernel symbols
  + mdflush: Add missing #include &lt;linux/bio.h&gt;
- Enable AArch64 build (FATE#322227)
- Remove remove-isystem.patch since it can be controlled by the
  cmake option now.
- Add gcc-c++ to the BuildRequires and switch to gcc/g++</changelog>
  <changelog author="glin@suse.com" date="1503057600">- Update to 0.3.0+git1502955391.9de830a
  + avoid large map memory allocation in userspace
  + python - set attach_xdp's default flag value to 0
  + have uniform uprobe event names for python and C++
  + Remove extra S_MAXSTAT array allocation in some tools
  + Omit include of ptrace.h for empty usdt contexts
  + Add clang check for -nopie option
  + Correct commit id for BPF_FUNC_get_socket_cookie
  + tools/tcptracer: add timestamp option
  + Since LUA_GLOBALSINDEX is obsolete from Lua 5.2, use
    lua_getglobal function instead.
  + better state default value handling
  + add --state to offcputime
  + tcptop: Filter out negative values in receive probe
  + tcptop: Cleanup argument parsing
  + Use unsigned conversion specifier for nlmsg_pid
  + Fix wrong netlink port id check
  + 1. Use more safe snprintf instead of sprintf;
    2. Modify procfilename buffer length in bcc_procutils_language
    function.
  + permit multiple pids attaching to the same probe
  + generate proper usdt code to prevent llvm meddling with
    ctx-&gt;#fields
  + MySQL tracing without USDT (#1239)
  + Fix a clang memory leak
  + Update bpf.h and virtual_bpf.h to 4.13-rc1
  + Fix trace.py for library filenames containing colons (#1252)
  + cc: Add open_perf_event to the C/C++ API (#1232)
  + memleak: expand allocator coverage (#1214)
  + libbpf: fix build warning on setns (#1246)
  + usdt: Use ProcMountNS
  + proc: Enhance bcc_mapping_is_file_backed
  + Fix bcc.lua build issue in Ubuntu 17.04
  + Added helpers for BPF_PERCPU_ARRAY (#1230)
  + Add an option to strip leading zeros from histograms (#1226)
  + gethostlatency was rounding to full ms
  + Change clang frontend optimization level from 0 to 2
  + fix cc: error: unrecognized command line option -no-pie
  + fix incorrect code generation in usdt</changelog>
  <changelog author="glin@suse.com" date="1510228800">- Update to 0.4.0
  + Fix helper to access stack pointer for powerpc
  + bpf: rename helper function bpf_get_stackid
  + bpf: print out the src debug info to a temporary file
  + attempt to compile with system bpf.h if default compile failed
  + sync src/cc/compat/linux headers with latest net-next
  + Fix segfault with enumerations
  + Allow BCC to parse vDSO symbols
  + libbpf: print error to error stream
  + Avoid potential SEGFAULT when resolving Kernel symbols
  + Fix 'tools/statsnoop' from failing to attach kprobes
  + Update USDT argument constraint for powerpc and powerpc64
  + examples:dns_matching: make it work as DNS sniffer
  + add debug option to dump asm insns embedded with source
  + examples:dns_matching: helper function for adding cache entry
  + Traces external pointers in parenthesized expressions
  + examples:dns_matching: fixed loop break condition
  + Fix bcc_resolve_global_addr on shared libraries
  + BCC macro for the creation of LPM trie maps (#1359)
  + bpf_probe_read*: src argument should be const void *.
  + hardirqs, softirqs: Fix distribution mode units handling
  + Add a generic utility to check any binary availability
  + Fix 'test_debuginfo' from failing if a symbol has multiple
    aliases
  + nfsdist tool (#1347)
  + annotate program tag
  + add helpers to access program tag
  + examples: fixed http_filter example
  + nfsslower: trace slow NFS operations
  + Update after lookup in map.increment for HASH types
  + fix a bug introduced by previous lua-bcc build fix commit
  + Better check for compiler standard support
  + fix lua-bcc build issue with cmake try_compile
  + Fix segfault on incomplete types
  + Trace external pointers from helpers
  + Allow the flags to be specified in remove_xdp()
  + bcc-lua: --no-pie, not -no-pie
  + solisten, tcpconnlat, tcpretrans: Remove unnecessary
    bpf_probe_reads
- Add the new subpackage libbpf0
- Add bcc-bsc1065593-llvm4-hack.patch to work around the llvm
  libraries searching issue (bsc#1065593)
  (Also add clang4-devel-static to BuildRequires)
- Add bcc-bsc1065593-switch-to-mcjit.patch to switch from OrcJIT
  to MCJIT. OrcJIT actually doesn't work for bcc, and the bug was
  covered until we start to use the unified LLVM shared library.
  (bsc#1065593)
- Add bcc-add-soname-to-libbpf.patch to install the shared library
  properly
- Update the group of packages
- Disable USDT for ARM and AArch64 since it's not ready.</changelog>
  <changelog author="glin@suse.com" date="1510920000">- Use the python3 package by default
- Provide and obsolete python-bcc (it's python2-bcc now)</changelog>
  <changelog author="manfred.h@gmx.net" date="1511524800">- Add patch (bcc-python3.patch) to explicitly use "/usr/bin/python3"</changelog>
  <changelog author="glin@suse.com" date="1512129600">- Update to 0.5.0 (bsc#1070563)
  + Explain possible reason of an error in scripts that rely on
    /proc/kallsyms
  + bpf: fix a couple of issues related to arm64
  + bpf: Add support for prog_name and map_name
  + Add a few introspection helpers
  + Introduce BPF Program Snapshot helper (bps)
  + Trace external pointers through maps
  + Merge BType, Map, and Probe Consumers
  + Fix exception handling in python3
  + Add usdt support for ARM64
  + bpf: make test py_test_tools_smoke pass on arm64
  + Add soname to libbpf.so
  + Fix Module display for unreadable Modules
  + Use bpf_prog_load_flag in APIs
  + Add flag to enable verifier log_level 2
  + bpf: use MCJIT explicitly for ExecutionEngine
  + change frontend rewriter to better handle anonymous struct/union
  + Move BCC debug options to an installed header file
  + use user-provided log_level in bpf_prog_load
  + Add utility for cc tests to read command outputs
  + Fix 'test_libbcc' from failing due to symbol name mismatch
  + Update perf event type and config checks
  + libbpf: Support unbound raw socket creation
  + force linking the whole api-static library into shared library
  + man/bps: Add a man page for introspection/bps.c
  + Do not keep Loader instances around
  + python: make _decode_table_types aware of __int128
  + python: Avoid unnecessary pointer object creations
- Only exclude ppc and s390 build (FATE#322227, bsc#1070362)
- Add _constraints to reserve 2GB memory for linking with
  clang4-devel-static
- Rename armv7.patch as bcc-check_int128.patch to check if the
  compiler support int128 or not
- Drop upstreamed patches:
  + bcc-bsc1065593-switch-to-mcjit.patch
  + bcc-add-soname-to-libbpf.patch</changelog>
  <changelog author="glin@suse.com" date="1512388800">- Tweak the installation path of bps directly instead of installing
  it manually. For those architectures without luajit, %{_bindir}
  wasn't created and it failed the previous install command.
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1512648000">- Request at least 4G RAM for the s390x build
  (FATE#322227, bsc#1070362)</changelog>
  <changelog author="glin@suse.com" date="1513339200">- Request at least 10GB disk since the clang4-devel-static needs
  more than 3GB and sometimes caused build fail (FATE#322227)</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Replace clang4-devel-static BuildRequires with
  clang-devel-static: use the unversioned one, folling the llvm
  meta package version (like all the other llvm/clang packages in
  the build chain).</changelog>
  <changelog author="glin@suse.com" date="1516363200">- Add bcc-fix-build-for-llvm-5.0.1.patch to fix the compilation
  error against llvm-5.0.1</changelog>
  <changelog author="glin@suse.com" date="1518091200">- Update bcc-python3.patch to make python3 default for all the
  python scripts (bsc#1079961)</changelog>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)
- Remove bps due to the incomplete support in kernel (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1540382400">- Add bcc-fix-compilation-error-with-latest-llvm.patch,
  bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  and bcc-compilation-error-with-latest-llvm.patch to fix build
  with llvm7 (fate#325696)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571918400">- Add bcc-bsc1154926-update-kernel-headers.patch to update the
  built-in header in bcc to match the one (uapi/linux/bpf.h) from
  kernel-devel or the compilation error may happen when including
  some kernel headers in bpf programs (bsc#1154926)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Recommends kernel-default-devel if kernel-default or
  kernel-default-base present (bsc#1172230)</changelog>
</package>
<package pkgid="bda2ee3247cf4f6c9d0d153fc2268bea25ab0b82dca44fd9d2b961c241543d80" name="bcm20702a1-firmware" arch="noarch">
  <version epoch="0" ver="1201650" rel="lp151.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1455451200">- Initial commit, adapted from AUR</changelog>
  <changelog author="tchvatal@suse.com" date="1455883200">- Convert to download on user machine rather than have unknown license file</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- Update the filelist to avoid conflict with kernel-firmware</changelog>
  <changelog author="tchvatal@suse.com" date="1458734400">- Try to add modalias to auto install on hardware that requires it</changelog>
  <changelog author="matz.fuchs@gmx.at" date="1487073600">- Fix typo in filelist, add one additional firmware file</changelog>
  <changelog author="tiwai@suse.de" date="1540814400">- Fetch &amp; install another variant firmware (0a5c:21e8) (bsc#1087996)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Avoid bashisms in %post</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572350400">- Use https to fetch the archive bsc#1154083</changelog>
</package>
<package pkgid="1958e1911a7c000a90467530c1b8f5763958327e8455743d51ecfda978e90dac" name="bcm20702a1-firmware" arch="src">
  <version epoch="0" ver="1201650" rel="lp151.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1455451200">- Initial commit, adapted from AUR</changelog>
  <changelog author="tchvatal@suse.com" date="1455883200">- Convert to download on user machine rather than have unknown license file</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- Update the filelist to avoid conflict with kernel-firmware</changelog>
  <changelog author="tchvatal@suse.com" date="1458734400">- Try to add modalias to auto install on hardware that requires it</changelog>
  <changelog author="matz.fuchs@gmx.at" date="1487073600">- Fix typo in filelist, add one additional firmware file</changelog>
  <changelog author="tiwai@suse.de" date="1540814400">- Fetch &amp; install another variant firmware (0a5c:21e8) (bsc#1087996)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Avoid bashisms in %post</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572350400">- Use https to fetch the archive bsc#1154083</changelog>
</package>
<package pkgid="03ed9d5d28a7105b0284300cf6e751b3c9aeb7861e27fd1ad252877e0cea25fb" name="bcm43xx-firmware" arch="noarch">
  <version epoch="0" ver="20180314" rel="lp151.6.3.1"/>
  <changelog author="fvogt@suse.com" date="1472126400">- Add initial package</changelog>
  <changelog author="fvogt@suse.com" date="1472472000">- Make Source: URLs absolute
- Update brcmfmac43430-sdio.bin to 7.45.41.26</changelog>
  <changelog author="afaerber@suse.de" date="1472558400">- Renamed package from brcm43430-firmware to bcm43430-firmware</changelog>
  <changelog author="afaerber@suse.de" date="1472904000">- Renamed package from bcm43430-firmware to bcm43xx-firmware (duwe)
- Renamed brcmfmac43430-sdio.txt to brcmfmac43430-sdio-rpi3.txt and
  added post-install script to symlink
  * Added brcmfmac43362-sdio-{cubietruck,bananapi-{m1+,m2}}.txt</changelog>
  <changelog author="afaerber@suse.de" date="1473249600">- Move %post script to install-brcmfmac.sh, add 50-brcmfmac.conf.
  This avoids workarounds for Kiwi images. (tiwai)</changelog>
  <changelog author="afaerber@suse.de" date="1476792000">- Dropped brcmfmac43430-sdio.bin (in kernel-firmware now)</changelog>
  <changelog author="tbechtold@suse.com" date="1483444800">- Add brcmfmac4329-sdio-cubox-i.txt and brcmfmac4330-sdio-cubox-i.txt.</changelog>
  <changelog author="afaerber@suse.de" date="1483876800">- Add vendor prefix for CuBox-i compatible string
- Reorder by board name</changelog>
  <changelog author="afaerber@suse.de" date="1484481600">- Add brcmfmac4339-sdio-vega-s95-telos.txt</changelog>
  <changelog author="afaerber@suse.de" date="1491825600">- Require kernel-firmware, suggested by fvogt. (bsc#1033137)
  Don't require version 20161005 or later, to remain compatible
  with older distributions.
- Bump version to today's date. This will allow other packages
  such as kernel-firmware to conflict against our older version.</changelog>
  <changelog author="afaerber@suse.de" date="1497268800">- Add Supplements for Raspberry Pi 3 (bsc#1041823)
- Resolve NUL char warning on modprobe for Tumbleweed by properly
  iterating over zero-separated DT compatible strings</changelog>
  <changelog author="agraf@suse.com" date="1521028800">- Add support for RPi 3 B+ (bcm43455, bsc#1085262)</changelog>
  <changelog author="tiwai@suse.de" date="1530014400">- Add brcmfmac4356-pcie.txt for BCM 4356 PCI (bsc#1099149)</changelog>
  <changelog author="fvogt@suse.com" date="1535630400">- Add bluetooth firmware for RPi 3 B+ (bsc#1103587)
- Update brcmfmac43430-sdio.txt and brcmfmac43455-sdio.txt:
  * Improved brcmfmac BT coexistence parameters
- Switch BCM43430A1.hcd to official source:
  * No changelog available
- Use %license
- Run spec-cleaner</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1548331200">- Remove files that are now present in kernel-firmware (fate#326215).
- Delete softlink creation for this files. (bsc#1098041).</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1600257600">- Update bluetooth firmware to address Sweyntooth and Spectra issues (bsc#1176631):
  * BCM43430A1.hcd
  * BCM4345C0.hcd</changelog>
</package>
<package pkgid="a399c8da0cb163062f44def86a7a0946be154f33a153e8bd72c67fe1da3d86f8" name="bcm43xx-firmware" arch="src">
  <version epoch="0" ver="20180314" rel="lp151.6.3.1"/>
  <changelog author="fvogt@suse.com" date="1472126400">- Add initial package</changelog>
  <changelog author="fvogt@suse.com" date="1472472000">- Make Source: URLs absolute
- Update brcmfmac43430-sdio.bin to 7.45.41.26</changelog>
  <changelog author="afaerber@suse.de" date="1472558400">- Renamed package from brcm43430-firmware to bcm43430-firmware</changelog>
  <changelog author="afaerber@suse.de" date="1472904000">- Renamed package from bcm43430-firmware to bcm43xx-firmware (duwe)
- Renamed brcmfmac43430-sdio.txt to brcmfmac43430-sdio-rpi3.txt and
  added post-install script to symlink
  * Added brcmfmac43362-sdio-{cubietruck,bananapi-{m1+,m2}}.txt</changelog>
  <changelog author="afaerber@suse.de" date="1473249600">- Move %post script to install-brcmfmac.sh, add 50-brcmfmac.conf.
  This avoids workarounds for Kiwi images. (tiwai)</changelog>
  <changelog author="afaerber@suse.de" date="1476792000">- Dropped brcmfmac43430-sdio.bin (in kernel-firmware now)</changelog>
  <changelog author="tbechtold@suse.com" date="1483444800">- Add brcmfmac4329-sdio-cubox-i.txt and brcmfmac4330-sdio-cubox-i.txt.</changelog>
  <changelog author="afaerber@suse.de" date="1483876800">- Add vendor prefix for CuBox-i compatible string
- Reorder by board name</changelog>
  <changelog author="afaerber@suse.de" date="1484481600">- Add brcmfmac4339-sdio-vega-s95-telos.txt</changelog>
  <changelog author="afaerber@suse.de" date="1491825600">- Require kernel-firmware, suggested by fvogt. (bsc#1033137)
  Don't require version 20161005 or later, to remain compatible
  with older distributions.
- Bump version to today's date. This will allow other packages
  such as kernel-firmware to conflict against our older version.</changelog>
  <changelog author="afaerber@suse.de" date="1497268800">- Add Supplements for Raspberry Pi 3 (bsc#1041823)
- Resolve NUL char warning on modprobe for Tumbleweed by properly
  iterating over zero-separated DT compatible strings</changelog>
  <changelog author="agraf@suse.com" date="1521028800">- Add support for RPi 3 B+ (bcm43455, bsc#1085262)</changelog>
  <changelog author="tiwai@suse.de" date="1530014400">- Add brcmfmac4356-pcie.txt for BCM 4356 PCI (bsc#1099149)</changelog>
  <changelog author="fvogt@suse.com" date="1535630400">- Add bluetooth firmware for RPi 3 B+ (bsc#1103587)
- Update brcmfmac43430-sdio.txt and brcmfmac43455-sdio.txt:
  * Improved brcmfmac BT coexistence parameters
- Switch BCM43430A1.hcd to official source:
  * No changelog available
- Use %license
- Run spec-cleaner</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1548331200">- Remove files that are now present in kernel-firmware (fate#326215).
- Delete softlink creation for this files. (bsc#1098041).</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1600257600">- Update bluetooth firmware to address Sweyntooth and Spectra issues (bsc#1176631):
  * BCM43430A1.hcd
  * BCM4345C0.hcd</changelog>
</package>
<package pkgid="447e0b838b691430903a34f60f8527a9ed11e77585d484cc40674175b1491fbf" name="bind" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="48f308496c963c14f9eef25f4bb619a8cc096734b28c5b502be09551599f1e18" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="101e6aad1a5db68b6455b188304d771682782d36f313c3037a8a06c5e5248f83" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="d0823abb998f2473c3dd1dfb47828a783a0f743edce7239beb8b4740f02cd972" name="bind" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="a172c6697442f6068fc80bd00ee846396104ed82e33b1700505a09cc2c9c29ac" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="1d8c9b144fdcdb571ef7d2667981c24e0bd344bb27f8647a8f38553df7f3e570" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="17eaf611a1ec0dcfaaecad6c31f524c9743d81f75429281dda6041d49fdc240a" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp151.11.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="42ae3068be68964da36d57118f752cb119bac7bc1dd3aaa8913a09e2c9ce007e" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="lp151.11.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="09b90fce87aedf6b740e0b2a402a0bae4b67284e9b6233b0bf0a84896d68fad8" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="3b790c24e335a1b878ccc9d40956536ae7c031b3716e13098348e916b94d0f2c" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp151.11.15.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="b8eed704b8799741b04bf674e0e40948bcff323021d55c229eaba14991055f61" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="lp151.11.15.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="567e1babb8aaee428a3a6e25e0798ac4e8dbae6233cb0d97866dc52c43da2dd4" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.15.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="afa086ce43cd41359fdda52497be7557d8070aca9cd27bf07a0f5a4b2ee35ea2" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp151.11.9.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="339bcfc57594278b4df89eb7caa47a607a59b42db77f6f16bdd5b7f56a829c8c" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="lp151.11.9.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="c671873e6f58bf6f4e32d8beca6c590411cbcb1469e3ab376c519deb324c55eb" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.9.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="81a1480f81864051bbbf2805f4f473d3c05c733cf7e3ffd32bf6458424ac1471" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="8ad17b9506b7aca3fcc0d07065edced0d68d0cc29175b433688c64beaa98f185" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="460dff89398019efa4a0872c1eb2947977c47d3f14202f49c8ab93316bd2d31b" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="e870449277471088299d2f13fac825d488fde4f5b73a8df7343d8b0305ea5b89" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="c44321b06f76cd0668e39e0e267175ff3ad92d0985a4114d68db8eff93c11900" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp151.11.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="a0186b89633732cb519ee1e14e197f45650313b420a631da136cde8d49923118" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="6b8cb91d26e448b004bffda62d88201417b7c9f5c814c35dd2a1cafdcb450812" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp151.11.15.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="3e1c73d00d6f42df1ae875fa3eb7811228440499f764075d6e4d57a39dbd5439" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.15.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="95b15a163de8e4b181c7abe728719749e48969468ec72a107cbdff2a8f1abbc7" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp151.11.9.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="30989bf6a8663b1aa43cf72d0342957e3e73718902be63033401774cfa756af4" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.9.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="01d0effddb6fc68156033906368aa2dd0a46caa6314e2e04884663002ed7a9e8" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="d2380770a0980da814b8acb379f608aa8ce11550b158bcb7da2f0e9540de4ec9" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="bd04898532363fd32af229d9bb35c8de5a60f502049902fe5aad8b7b172e41fe" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="d9f2e4b2c6fa5768a21da34ea2f40e1e9999e308ea1e581b61f73a5b98f5b44c" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.15.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="d2ec094a17690b4726e17b1e0192cf848f948d354299b0a3cbc2b4a581eb77a5" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.9.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="37d9ec12a722956c3618c0c08fb384c58fec2c07caf5f7c12388acaccbcbf842" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="65c4af3562415fde9c66e9191fe798f8252e84c468521c6bd078af1d1370583c" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="1a0eed4072700e7a1d1296866cd1e4da4ddf0109b31cf3350a20b483034f9c21" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="db8bdec736529d53e65a4e20498ed5891dabe781ae4d1e9c7766a8c6471ecb02" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="9de654c7266c211315c9e3603cf563c2a83849ee29752b03806cf1057a801819" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp151.11.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="28317a8cf098d360798ba0c23d37121187bff235b98785f43b3ac669ab750e71" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="53b4965059e418c816a40caa7b96e2c7abb1e8d16c954eb092d744bbbb87ce9c" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp151.11.15.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="c6cb3742fe73221391d1cd698f26861ba94fe5d0b20074da6bf08bb9bde40a6a" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.15.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="3a5c5fe500f0d5a7e6094e8b8d2f9db947eb642ccec53a5dc954d015c13f7baa" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp151.11.9.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="3893d359625274ee85b3bc2c3f39148894d06ceca7521a30d4235504796c210e" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.9.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="49a474897df12ee1a442da1e43b273fadb399ba07d8fe4cc40e757b6052f0c4a" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="7399117365ae3475cb788d06cb6f3a4b7eed282709c2ee5f65f42667adc2468c" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="e54c9f80e76358294094a5b2bebae6e20b949fe6e3c5ca420c15e8f5abfe7e29" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="lp151.11.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="52c70f6a651af858567b6b49db338798694ecedf4bd4b924113cb82676f5434f" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="lp151.11.15.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="231c137411107896761c4820d2fe5de835dc8b7cd4c97e8370e8329be4e5accc" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="lp151.11.9.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="3f3838f42b7fde084d43c0fa1a7aa2aaec871f5076cb62fb3c41f7d0e54628bc" name="bind-lwresd" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="4fef5a72ad2f4621ad65aa66c9f770f49c18d25c500d636fb8f80881c6f0d6d7" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="27a2ea693ebb2584c477e8eec2430f9a95ddd432687d50098f11bf38074493f7" name="bind-lwresd" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="ca4a62818b7e10cf6ada287d8bb0308829d6f2d12240b6879fdd3e71d57812e3" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="aad2685b6b58f1481cf3bd54fdd557fda8c7bee1a5cedb1bb528e263b0e50a2f" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="cb946c44efd26c5b5e97ee67f5b125c0b0b3ae6c3708e7e28c68feab31f73bd4" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="f628d6dce602c7dd0a84ce677506a34a560e9f5d75313523cf0083093582e181" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="86ee2d733e0d6a96f88d7dd0f940bbb48ef4b4bb5dbe4c1c6e3af1d14a49bb41" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="1b20d9f26820eda9b1af832e36fda259221cd7d96112e63b5901bd16ae6a4bfd" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp151.11.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="a6dba5d1563ba484d6e95ff4ee3df39651e2172511bfaa0e000ed5d609ded270" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="94a04e1a25ccb57fbcafcaa1ba9e3e714befbb63c30b041060f3c2fc7ea1d161" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp151.11.15.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="506d658554fd2e43ae15a6865e6c02369d51de0f44630933b3c7784a98a7f451" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.15.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="fdb504d34982063d087cf5ade89627c224214cb86715841be6235004f26ff845" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp151.11.9.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="2ac0590d2428979a45b08ed19c69cffdae79f78bdc9d71195f28f52526502375" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp151.11.9.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="3a87aea61b03064731a3a1ecfb2454276b06af45338f8063cc87d4d70d864501" name="binutils" arch="i586">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="c68dc38adb7ae1334c2d09e33e087f54776708c541eed4f522dc4f69a292543b" name="binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="ec241a081da6d3000782f908ef04007566b7038605a2c29b4c8532845eea045f" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="721aae5a9a9400fa60088b71ba39b24dc04bf40a340752437ac29fc699f436f7" name="binutils" arch="i586">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="9fc636b4a97e4bf7ea673100f66e8c43e470fe637dcb29ea79c7a8b47fc57fa3" name="binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="f358939443e2738b4a7b6fe9c23820e9bc7a59080bc0c33b7072d0cf8852fcb6" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="efa8643e591afb08e44b10c5df6775f297341df4f7538cf43830434ad5f60cf6" name="binutils" arch="i586">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="0c3647b9ea8f9579074721daae6c32b2ea2e2260ff7cdc4ada53c050e04e1464" name="binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="c419dcd7502b1aaf06c476f3ca9d437afbd3c40df4c76c07676e3ce5dc7114ac" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="287de7547c82abdb950df1fdfce58fbec1866d06d9056920a55f8afb475fce25" name="binutils" arch="i586">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="bb78b56d98e74ba31c34324de9358bd3f5cc485933f60ac1494254c4875b795a" name="binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="45ae64c3ad3a6ce8ab00a57f26d719f1f1c1cd9733ed44ad02e0e9cfd1955654" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="17fa1eaf359612effb63c27d671a4312d3d5ad145a0ec1f65b2abb08c79a7237" name="binutils-devel" arch="i586">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="c095bedaa76c3f235c65e06b3f7e067cddc3ebfccbb656511c1fc5db88959cc5" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="36ecd7ed0295c6be341ab446b631cf02fd5d549eaf6e346d581e4f604fda55e1" name="binutils-devel" arch="i586">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="f4e193d96988b7edd44b4aee286db3e573ef81264671154170abb99da4f8519a" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="44b2760eae7ab521778af6218a21a70bf32f1ac1e366f16ff96c092833541d6b" name="binutils-devel" arch="i586">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="bef2b25a3487e65791d5255c28a54b9b2872cc64881b0990d67d27d8fd524f1f" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="ed6a43d2bc186b7ba4ac92b126b3fc0934ffff700d34d3ec31296cca06230607" name="binutils-devel" arch="i586">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="cf000bcf089ad5ee031ed6a234f81dbd584a45092e92b4b8b6acf4cb83fbcb34" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="628aa3f5ba0b5dd5838385423ac736bfbb79f2ddb42ed037c2f769636cbd76a2" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="dd1ebdc3e3f3e3c9e09ea762d7e65272b11ab57b01f4af8834989930e15ce12f" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="30a91ad9d7af29fd83e71abf33fe2c25d456f9218b8b112da065a831703b4869" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="2b3ba04737b5b8ca993db89692aa0f6a3dddb814e5c137a794bd98f731c235b2" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="d86652fdc1e7235fd57cf3c8f38fc93d5d2910de7d49ccf2a1eefedb4c87d190" name="binutils-gold" arch="i586">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="3a383e3d40dfe58b3237563cb9a04566749324271f2380ead52cd28356854737" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="9e50f5c645ae214ae736b077c4e51eb32b80f845aebbc31d39131772e61ab269" name="binutils-gold" arch="i586">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="d8fb21d38d32a1e2cdd95ec8a6f5ca9b249b2e849e9e5f02a309bcce2c553773" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="60260a3ccd6141f890e112c872c9ca8e20489c2fda6615ef84a75de421176064" name="binutils-gold" arch="i586">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="446a05c4e433c5725bc385f68f0ce34a7a496ca5bc4e6db45a1e4558185370ca" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="e71acff491621ddda0f721eda80a656e19b43f065317b6a0d5d0fb4830c5bf2a" name="binutils-gold" arch="i586">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="1f6a659b288e37c3a969d837ef0e5d533f20403afa9f3516af6ba10a7ccfad42" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="8e47e2c173c96c30a14f4d3d2049a3d53cd7ff91e89f099eb4a58cecc41d6d5c" name="biosdevname" arch="i586">
  <version epoch="0" ver="0.7.3" rel="lp151.5.3.1"/>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="93c8ef73431885aa5d4933d196797d1f924a371c8537f36984ab2b7935723b9b" name="biosdevname" arch="src">
  <version epoch="0" ver="0.7.3" rel="lp151.5.3.1"/>
  <changelog author="trenn@suse.de" date="1402660800">- For some reason /usr/lib/udev/rules.d/99-systemd.rules seem not to exist
  anymore. This is used to determine which udev rules.d to use.
  Use 95-udev-late.rules instead.
  Modified: udev-rule-path.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660801">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="73262e8233547caba16009c74af627196e26ebd06fef6a30f8c281dcf859065d" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="lp151.5.3.1"/>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="b56144ab5fb5bd5ceb0b5b2f407b3f54011c7ca637d893a2733b02bf94a5b443" name="bird" arch="src">
  <version epoch="0" ver="1.6.8" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1444996800">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1445083200">- no longer run as root but as user/group bird.
- add tmpfiles.d file for /var/run/bird
- merged spec file from bird6 again</changelog>
  <changelog author="mrueckert@suse.de" date="1445083201">- add $BIRD_OPTIONS to the service files</changelog>
  <changelog author="mardnh@gmx.de" date="1466510400">- update to version 1.6.0
- if possible use /run instead of /var/run for the runtimedir
- removed patch: bird-1.5.0-rip_auth_bufferoverflow.patch
  A similar issue still exists but it's a false positive.</changelog>
  <changelog author="mrueckert@suse.de" date="1503057600">- update to 1.6.3
  - Large BGP communities
  - BFD authentication (MD5, SHA1)
  - SHA1 and SHA2 authentication for RIP and OSPF
  - Improved documentation
  - Several bug fixes
- changes from version 1.6.2
  - Fixes serious bug introduced in the previous version
- changes from version 1.6.1
  - Support for IPv6 ECMP
  - Better handling of IPv6 tentative addresses
  - Several updates and fixes in Babel protocol
  - Filter: New !~ operator
  - Filter: ASN ranges in bgpmask
  - KRT: New kernel protocol option 'metric'
  - KRT: New route attribute 'krt_scope'
  - Improved BIRD help messages
  - Fixes memory leak in BGP multipath
  - Fixes handling of empty path segments in BGP AS_PATH
  - Several bug fixes
- drop bird-1.5.0-rip_auth_bufferoverflow.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1503057601">- added bird-1.6.3_verbose.build.patch:
  - no longer print false CC lines
  - print the actuall gcc calls instead
- properly fix the FORTIFY_SOURCE fix from the earlier commit.
  - we just replace the -D_FORTIFY_SOURCE value with what we want
    instead of appending another value which leads to warnings</changelog>
  <changelog author="mrueckert@suse.de" date="1503057602">- ignore some warnings to make the output more readable</changelog>
  <changelog author="mrueckert@suse.de" date="1503057603">- downgrade to _FORTIFY_SOURCE=0 as 1 still fails on TW</changelog>
  <changelog author="mrueckert@suse.de" date="1503057604">- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.</changelog>
  <changelog author="mardnh@gmx.de" date="1542196800">- Update to version 1.6.4
  * Basic VRF support
  * Simplified autoconf scripts
  * BGP: Shutdown communication (RFC 8203)
  * BGP: Allow exchanging LOCAL_PREF with eBGP peers
  * BGP: Allow to specify interface for regular sessions
  * BGP: New option 'disable after cease'
  * RAdv: Support for more specific routes (RFC 4191)
  * RAdv: Proper handling of prefix retraction
  * Filter: Allow silent filter execution
  * Filter: Fixed stack overflow in BGP mask expressions.
  * Several bug fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1544097600">- Specfile cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Kill off em dashes in summaries. Remove future
  aims from descriptions.</changelog>
  <changelog author="mardnh@gmx.de" date="1549195200">- Update to version 1.6.5
  * MRT table dumps (RFC 6396)
  * BGP Long-lived graceful restart
  * Filter: Make ifname attribute modifiable
  * Improved keeping track of IPv6 link-local addresses
  * Many bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551441600">- Update to version 1.6.6
  * Several bugfixes related to route propagation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568808000">- Update to version 1.6.8
  * Fix CVE-2019-16159:
    BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through
    2.0.5 has a stack-based buffer overflow. The BGP daemon's
    support for RFC 8203 administrative shutdown communication
    messages included an incorrect logical expression when checking
    the validity of an input message. Sending a shutdown
    communication with a sufficient message length causes a four-byte
    overflow to occur while processing the message, where two of the
    overflow bytes are attacker-controlled and two are fixed.
  * Several important bugfixes
  * BFD: Support for VRFs</changelog>
</package>
<package pkgid="41625574d6b9489fefdf8f1c2860fef3a2818164794af90f4b1742d5881cec22" name="bird" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1444996800">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1445083200">- no longer run as root but as user/group bird.
- add tmpfiles.d file for /var/run/bird
- merged spec file from bird6 again</changelog>
  <changelog author="mrueckert@suse.de" date="1445083201">- add $BIRD_OPTIONS to the service files</changelog>
  <changelog author="mardnh@gmx.de" date="1466510400">- update to version 1.6.0
- if possible use /run instead of /var/run for the runtimedir
- removed patch: bird-1.5.0-rip_auth_bufferoverflow.patch
  A similar issue still exists but it's a false positive.</changelog>
  <changelog author="mrueckert@suse.de" date="1503057600">- update to 1.6.3
  - Large BGP communities
  - BFD authentication (MD5, SHA1)
  - SHA1 and SHA2 authentication for RIP and OSPF
  - Improved documentation
  - Several bug fixes
- changes from version 1.6.2
  - Fixes serious bug introduced in the previous version
- changes from version 1.6.1
  - Support for IPv6 ECMP
  - Better handling of IPv6 tentative addresses
  - Several updates and fixes in Babel protocol
  - Filter: New !~ operator
  - Filter: ASN ranges in bgpmask
  - KRT: New kernel protocol option 'metric'
  - KRT: New route attribute 'krt_scope'
  - Improved BIRD help messages
  - Fixes memory leak in BGP multipath
  - Fixes handling of empty path segments in BGP AS_PATH
  - Several bug fixes
- drop bird-1.5.0-rip_auth_bufferoverflow.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1503057601">- added bird-1.6.3_verbose.build.patch:
  - no longer print false CC lines
  - print the actuall gcc calls instead
- properly fix the FORTIFY_SOURCE fix from the earlier commit.
  - we just replace the -D_FORTIFY_SOURCE value with what we want
    instead of appending another value which leads to warnings</changelog>
  <changelog author="mrueckert@suse.de" date="1503057602">- ignore some warnings to make the output more readable</changelog>
  <changelog author="mrueckert@suse.de" date="1503057603">- downgrade to _FORTIFY_SOURCE=0 as 1 still fails on TW</changelog>
  <changelog author="mrueckert@suse.de" date="1503057604">- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.</changelog>
  <changelog author="mardnh@gmx.de" date="1542196800">- Update to version 1.6.4
  * Basic VRF support
  * Simplified autoconf scripts
  * BGP: Shutdown communication (RFC 8203)
  * BGP: Allow exchanging LOCAL_PREF with eBGP peers
  * BGP: Allow to specify interface for regular sessions
  * BGP: New option 'disable after cease'
  * RAdv: Support for more specific routes (RFC 4191)
  * RAdv: Proper handling of prefix retraction
  * Filter: Allow silent filter execution
  * Filter: Fixed stack overflow in BGP mask expressions.
  * Several bug fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1544097600">- Specfile cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Kill off em dashes in summaries. Remove future
  aims from descriptions.</changelog>
  <changelog author="mardnh@gmx.de" date="1549195200">- Update to version 1.6.5
  * MRT table dumps (RFC 6396)
  * BGP Long-lived graceful restart
  * Filter: Make ifname attribute modifiable
  * Improved keeping track of IPv6 link-local addresses
  * Many bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551441600">- Update to version 1.6.6
  * Several bugfixes related to route propagation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568808000">- Update to version 1.6.8
  * Fix CVE-2019-16159:
    BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through
    2.0.5 has a stack-based buffer overflow. The BGP daemon's
    support for RFC 8203 administrative shutdown communication
    messages included an incorrect logical expression when checking
    the validity of an input message. Sending a shutdown
    communication with a sufficient message length causes a four-byte
    overflow to occur while processing the message, where two of the
    overflow bytes are attacker-controlled and two are fixed.
  * Several important bugfixes
  * BFD: Support for VRFs</changelog>
</package>
<package pkgid="220db5387d7e0b0e82c3eaa9a1191b6114902215eb120d62349330e4621827ac" name="bird-common" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1444996800">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1445083200">- no longer run as root but as user/group bird.
- add tmpfiles.d file for /var/run/bird
- merged spec file from bird6 again</changelog>
  <changelog author="mrueckert@suse.de" date="1445083201">- add $BIRD_OPTIONS to the service files</changelog>
  <changelog author="mardnh@gmx.de" date="1466510400">- update to version 1.6.0
- if possible use /run instead of /var/run for the runtimedir
- removed patch: bird-1.5.0-rip_auth_bufferoverflow.patch
  A similar issue still exists but it's a false positive.</changelog>
  <changelog author="mrueckert@suse.de" date="1503057600">- update to 1.6.3
  - Large BGP communities
  - BFD authentication (MD5, SHA1)
  - SHA1 and SHA2 authentication for RIP and OSPF
  - Improved documentation
  - Several bug fixes
- changes from version 1.6.2
  - Fixes serious bug introduced in the previous version
- changes from version 1.6.1
  - Support for IPv6 ECMP
  - Better handling of IPv6 tentative addresses
  - Several updates and fixes in Babel protocol
  - Filter: New !~ operator
  - Filter: ASN ranges in bgpmask
  - KRT: New kernel protocol option 'metric'
  - KRT: New route attribute 'krt_scope'
  - Improved BIRD help messages
  - Fixes memory leak in BGP multipath
  - Fixes handling of empty path segments in BGP AS_PATH
  - Several bug fixes
- drop bird-1.5.0-rip_auth_bufferoverflow.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1503057601">- added bird-1.6.3_verbose.build.patch:
  - no longer print false CC lines
  - print the actuall gcc calls instead
- properly fix the FORTIFY_SOURCE fix from the earlier commit.
  - we just replace the -D_FORTIFY_SOURCE value with what we want
    instead of appending another value which leads to warnings</changelog>
  <changelog author="mrueckert@suse.de" date="1503057602">- ignore some warnings to make the output more readable</changelog>
  <changelog author="mrueckert@suse.de" date="1503057603">- downgrade to _FORTIFY_SOURCE=0 as 1 still fails on TW</changelog>
  <changelog author="mrueckert@suse.de" date="1503057604">- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.</changelog>
  <changelog author="mardnh@gmx.de" date="1542196800">- Update to version 1.6.4
  * Basic VRF support
  * Simplified autoconf scripts
  * BGP: Shutdown communication (RFC 8203)
  * BGP: Allow exchanging LOCAL_PREF with eBGP peers
  * BGP: Allow to specify interface for regular sessions
  * BGP: New option 'disable after cease'
  * RAdv: Support for more specific routes (RFC 4191)
  * RAdv: Proper handling of prefix retraction
  * Filter: Allow silent filter execution
  * Filter: Fixed stack overflow in BGP mask expressions.
  * Several bug fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1544097600">- Specfile cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Kill off em dashes in summaries. Remove future
  aims from descriptions.</changelog>
  <changelog author="mardnh@gmx.de" date="1549195200">- Update to version 1.6.5
  * MRT table dumps (RFC 6396)
  * BGP Long-lived graceful restart
  * Filter: Make ifname attribute modifiable
  * Improved keeping track of IPv6 link-local addresses
  * Many bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551441600">- Update to version 1.6.6
  * Several bugfixes related to route propagation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568808000">- Update to version 1.6.8
  * Fix CVE-2019-16159:
    BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through
    2.0.5 has a stack-based buffer overflow. The BGP daemon's
    support for RFC 8203 administrative shutdown communication
    messages included an incorrect logical expression when checking
    the validity of an input message. Sending a shutdown
    communication with a sufficient message length causes a four-byte
    overflow to occur while processing the message, where two of the
    overflow bytes are attacker-controlled and two are fixed.
  * Several important bugfixes
  * BFD: Support for VRFs</changelog>
</package>
<package pkgid="b40fdbba8f82ec19a20b5b6794c00c900754d0550de3b76cc1f7f0ef7aba252a" name="bird-doc" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1444996800">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1445083200">- no longer run as root but as user/group bird.
- add tmpfiles.d file for /var/run/bird
- merged spec file from bird6 again</changelog>
  <changelog author="mrueckert@suse.de" date="1445083201">- add $BIRD_OPTIONS to the service files</changelog>
  <changelog author="mardnh@gmx.de" date="1466510400">- update to version 1.6.0
- if possible use /run instead of /var/run for the runtimedir
- removed patch: bird-1.5.0-rip_auth_bufferoverflow.patch
  A similar issue still exists but it's a false positive.</changelog>
  <changelog author="mrueckert@suse.de" date="1503057600">- update to 1.6.3
  - Large BGP communities
  - BFD authentication (MD5, SHA1)
  - SHA1 and SHA2 authentication for RIP and OSPF
  - Improved documentation
  - Several bug fixes
- changes from version 1.6.2
  - Fixes serious bug introduced in the previous version
- changes from version 1.6.1
  - Support for IPv6 ECMP
  - Better handling of IPv6 tentative addresses
  - Several updates and fixes in Babel protocol
  - Filter: New !~ operator
  - Filter: ASN ranges in bgpmask
  - KRT: New kernel protocol option 'metric'
  - KRT: New route attribute 'krt_scope'
  - Improved BIRD help messages
  - Fixes memory leak in BGP multipath
  - Fixes handling of empty path segments in BGP AS_PATH
  - Several bug fixes
- drop bird-1.5.0-rip_auth_bufferoverflow.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1503057601">- added bird-1.6.3_verbose.build.patch:
  - no longer print false CC lines
  - print the actuall gcc calls instead
- properly fix the FORTIFY_SOURCE fix from the earlier commit.
  - we just replace the -D_FORTIFY_SOURCE value with what we want
    instead of appending another value which leads to warnings</changelog>
  <changelog author="mrueckert@suse.de" date="1503057602">- ignore some warnings to make the output more readable</changelog>
  <changelog author="mrueckert@suse.de" date="1503057603">- downgrade to _FORTIFY_SOURCE=0 as 1 still fails on TW</changelog>
  <changelog author="mrueckert@suse.de" date="1503057604">- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.</changelog>
  <changelog author="mardnh@gmx.de" date="1542196800">- Update to version 1.6.4
  * Basic VRF support
  * Simplified autoconf scripts
  * BGP: Shutdown communication (RFC 8203)
  * BGP: Allow exchanging LOCAL_PREF with eBGP peers
  * BGP: Allow to specify interface for regular sessions
  * BGP: New option 'disable after cease'
  * RAdv: Support for more specific routes (RFC 4191)
  * RAdv: Proper handling of prefix retraction
  * Filter: Allow silent filter execution
  * Filter: Fixed stack overflow in BGP mask expressions.
  * Several bug fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1544097600">- Specfile cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Kill off em dashes in summaries. Remove future
  aims from descriptions.</changelog>
  <changelog author="mardnh@gmx.de" date="1549195200">- Update to version 1.6.5
  * MRT table dumps (RFC 6396)
  * BGP Long-lived graceful restart
  * Filter: Make ifname attribute modifiable
  * Improved keeping track of IPv6 link-local addresses
  * Many bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551441600">- Update to version 1.6.6
  * Several bugfixes related to route propagation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568808000">- Update to version 1.6.8
  * Fix CVE-2019-16159:
    BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through
    2.0.5 has a stack-based buffer overflow. The BGP daemon's
    support for RFC 8203 administrative shutdown communication
    messages included an incorrect logical expression when checking
    the validity of an input message. Sending a shutdown
    communication with a sufficient message length causes a four-byte
    overflow to occur while processing the message, where two of the
    overflow bytes are attacker-controlled and two are fixed.
  * Several important bugfixes
  * BFD: Support for VRFs</changelog>
</package>
<package pkgid="23cbe1637537dca90a259dd4145296d3f15a5d2371d3c0aed20fa68b1a896b4a" name="bird6" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1444996800">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1445083200">- no longer run as root but as user/group bird.
- add tmpfiles.d file for /var/run/bird
- merged spec file from bird6 again</changelog>
  <changelog author="mrueckert@suse.de" date="1445083201">- add $BIRD_OPTIONS to the service files</changelog>
  <changelog author="mardnh@gmx.de" date="1466510400">- update to version 1.6.0
- if possible use /run instead of /var/run for the runtimedir
- removed patch: bird-1.5.0-rip_auth_bufferoverflow.patch
  A similar issue still exists but it's a false positive.</changelog>
  <changelog author="mrueckert@suse.de" date="1503057600">- update to 1.6.3
  - Large BGP communities
  - BFD authentication (MD5, SHA1)
  - SHA1 and SHA2 authentication for RIP and OSPF
  - Improved documentation
  - Several bug fixes
- changes from version 1.6.2
  - Fixes serious bug introduced in the previous version
- changes from version 1.6.1
  - Support for IPv6 ECMP
  - Better handling of IPv6 tentative addresses
  - Several updates and fixes in Babel protocol
  - Filter: New !~ operator
  - Filter: ASN ranges in bgpmask
  - KRT: New kernel protocol option 'metric'
  - KRT: New route attribute 'krt_scope'
  - Improved BIRD help messages
  - Fixes memory leak in BGP multipath
  - Fixes handling of empty path segments in BGP AS_PATH
  - Several bug fixes
- drop bird-1.5.0-rip_auth_bufferoverflow.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1503057601">- added bird-1.6.3_verbose.build.patch:
  - no longer print false CC lines
  - print the actuall gcc calls instead
- properly fix the FORTIFY_SOURCE fix from the earlier commit.
  - we just replace the -D_FORTIFY_SOURCE value with what we want
    instead of appending another value which leads to warnings</changelog>
  <changelog author="mrueckert@suse.de" date="1503057602">- ignore some warnings to make the output more readable</changelog>
  <changelog author="mrueckert@suse.de" date="1503057603">- downgrade to _FORTIFY_SOURCE=0 as 1 still fails on TW</changelog>
  <changelog author="mrueckert@suse.de" date="1503057604">- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.</changelog>
  <changelog author="mardnh@gmx.de" date="1542196800">- Update to version 1.6.4
  * Basic VRF support
  * Simplified autoconf scripts
  * BGP: Shutdown communication (RFC 8203)
  * BGP: Allow exchanging LOCAL_PREF with eBGP peers
  * BGP: Allow to specify interface for regular sessions
  * BGP: New option 'disable after cease'
  * RAdv: Support for more specific routes (RFC 4191)
  * RAdv: Proper handling of prefix retraction
  * Filter: Allow silent filter execution
  * Filter: Fixed stack overflow in BGP mask expressions.
  * Several bug fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1544097600">- Specfile cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Kill off em dashes in summaries. Remove future
  aims from descriptions.</changelog>
  <changelog author="mardnh@gmx.de" date="1549195200">- Update to version 1.6.5
  * MRT table dumps (RFC 6396)
  * BGP Long-lived graceful restart
  * Filter: Make ifname attribute modifiable
  * Improved keeping track of IPv6 link-local addresses
  * Many bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551441600">- Update to version 1.6.6
  * Several bugfixes related to route propagation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568808000">- Update to version 1.6.8
  * Fix CVE-2019-16159:
    BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through
    2.0.5 has a stack-based buffer overflow. The BGP daemon's
    support for RFC 8203 administrative shutdown communication
    messages included an incorrect logical expression when checking
    the validity of an input message. Sending a shutdown
    communication with a sufficient message length causes a four-byte
    overflow to occur while processing the message, where two of the
    overflow bytes are attacker-controlled and two are fixed.
  * Several important bugfixes
  * BFD: Support for VRFs</changelog>
</package>
<package pkgid="cf4c0738e91f5aeeda8772f24a22d9ac5f048aff8d193faa766b21f38c01482c" name="bitcoin" arch="src">
  <version epoch="0" ver="0.19.0.1" rel="lp151.2.3.13"/>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538568000">- Update to version 0.17.0:
  * For complete list of changes see:
    + release-notes-0.17.0.md</changelog>
  <changelog author="sean@suspend.net" date="1541160000">- Update to version 0.17.0.1:
  * Resolves bcc#14416 Fix OSX dmg issue
  * Resolves bcc#14509 doc:use SegWit in getblocktemplate example</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1550059200">- Update to version 0.17.1
  * `listtransactions` label support
  See release-notes-0.17.1.md for complete changelog
- fix previous entry date</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1562760000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1562846400">- Update to version 0.18.0
  See release-notes.md for complete list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1562846401">- Fix downloaded source</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1575460800">- Update to version 0.19.0.1:
  * New RPCs
    + `getbalances` returns an object with all balances
    + `setwalletflag` sets and unsets wallet flags that enable or
    disable features specific to that existing wallet
    + `getblockfilter` fets the BIP158 filter for the specified
    block
  * New settings
    + `-blockfilterindex` enables the creation of BIP158 block
    filters for the entire blockchain
  * Updated settings
    + `whitebind` and `whitelist` now accept a list of permissions
    to provide peers connecting using the indicated interfaces or
    IP addresses
    + Users setting custom `dbcache` values can increase their
    setting slightly without using any more real memory
  * Updated RPCs
    + `sendmany` no longer has a `minconf` argument
    + `getbalance` and `sendtoaddress`, plus the new RPCs
    `getbalances` and `createwaller`, now accept an `acoid_reuse`
    parameter that controls whether already used addresses should
    be included in the operation
    + RPCs which have an `include_watchonly` argument or
    `includeWatching` option now default to true for watch-only
    wallets
    + `listunspent` now returns a `reused` bool for each output if
    the wallet flag `avoid_reuse` is enabled
    + `getblockstats` now uses BlockUndo data instead of the
    transaction index, making it much faster, no longer dependent
    on the `-txindex` configuration option, and functional for
    all non-pruned blocks
    + `utxoupdatepsbt` now accepts a `descriptors` parameter that
    will fill out input and output scripts and keys when known
    + `sendrawtransaction` and `testmempoolaccept` no longer accept
    a allowhighfees parameter to fail mempool acceptance if the
    transaction fee exceeds the value of the configuration option
    `-maxtxfee`
    + `getmempoolancestors`, `getmempooldescendants`,
    `getmempoolentry`, and `getrawmempool` no longer return a
    size field unless the configuration option
    `-deprecatedrpc=size` is used
    + `getwalletinfo` now includes a scanning field that is either
    false (no scanning) or an object with information about the
    duration and progress of the wallet's scanning historical
    blocks for transactions affecting its balances
    + `gettransaction` now accepts a third (boolean) argument
    `verbose`
    + `createwallet` accepts a new passphrase parameter
    + `getchaintxstats` RPC now returns the additional key of
    `window_final_block_height`
    + `getmempoolentry` now provides a weight field containing the
    transaction weight as defined in BIP141
    + The `getnetworkinfo` and `getpeerinfo` commands now contain a
    new field with decoded network service flags
    + `getdescriptorinfo` now returns an additional `checksum`
    field containing the checksum for the unmodified descriptor
    provided by the user
    + `joinpsbts` now shuffles the order of the inputs and outputs
    of the resulting joined PSBT
    + `walletcreatefundedpsbt` now signals BIP125 Replace-by-Fee if
    the -walletrbf configuration option is set to true
  * GUI changes
    + The GUI wallet now provides bech32 addresses by default. The
    user may change the address type during invoice generation
    using a GUI toggle, or the default address type may be
    changed with the -addresstype configuration option.
    + In 0.18.0, a ./configure flag was introduced to allow
    disabling BIP70 support in the GUI (support was enabled by
    default). In 0.19.0, this flag is now disabled by default.
  * P2P changes
    + BIP 61 reject messages were deprecated in version 0.18. They
    are now disabled by default, but can be enabled by setting
    the -enablebip61 command line option.
    + To eliminate well-known denial-of-service vectors in Bitcoin
    Core, especially for nodes with spinning disks, the default
    value for the -peerbloomfilters configuration option has been
    changed to false.
    + By default, Bitcoin Core will now make two additional
    outbound connections that are exclusively used for
    block-relay.
  * CLI changes
    + The testnet field in bitcoin-cli -getinfo has been renamed to
    chain and now returns the current network name as defined in
    BIP70
- Fix installation of desktop file</changelog>
</package>
<package pkgid="eb5bb2c23b84978aa62b9c02560d0c7e8a67f625150fb95df4109a03faa284a9" name="bitcoin-qt5" arch="x86_64">
  <version epoch="0" ver="0.19.0.1" rel="lp151.2.3.13"/>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538568000">- Update to version 0.17.0:
  * For complete list of changes see:
    + release-notes-0.17.0.md</changelog>
  <changelog author="sean@suspend.net" date="1541160000">- Update to version 0.17.0.1:
  * Resolves bcc#14416 Fix OSX dmg issue
  * Resolves bcc#14509 doc:use SegWit in getblocktemplate example</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1550059200">- Update to version 0.17.1
  * `listtransactions` label support
  See release-notes-0.17.1.md for complete changelog
- fix previous entry date</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1562760000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1562846400">- Update to version 0.18.0
  See release-notes.md for complete list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1562846401">- Fix downloaded source</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1575460800">- Update to version 0.19.0.1:
  * New RPCs
    + `getbalances` returns an object with all balances
    + `setwalletflag` sets and unsets wallet flags that enable or
    disable features specific to that existing wallet
    + `getblockfilter` fets the BIP158 filter for the specified
    block
  * New settings
    + `-blockfilterindex` enables the creation of BIP158 block
    filters for the entire blockchain
  * Updated settings
    + `whitebind` and `whitelist` now accept a list of permissions
    to provide peers connecting using the indicated interfaces or
    IP addresses
    + Users setting custom `dbcache` values can increase their
    setting slightly without using any more real memory
  * Updated RPCs
    + `sendmany` no longer has a `minconf` argument
    + `getbalance` and `sendtoaddress`, plus the new RPCs
    `getbalances` and `createwaller`, now accept an `acoid_reuse`
    parameter that controls whether already used addresses should
    be included in the operation
    + RPCs which have an `include_watchonly` argument or
    `includeWatching` option now default to true for watch-only
    wallets
    + `listunspent` now returns a `reused` bool for each output if
    the wallet flag `avoid_reuse` is enabled
    + `getblockstats` now uses BlockUndo data instead of the
    transaction index, making it much faster, no longer dependent
    on the `-txindex` configuration option, and functional for
    all non-pruned blocks
    + `utxoupdatepsbt` now accepts a `descriptors` parameter that
    will fill out input and output scripts and keys when known
    + `sendrawtransaction` and `testmempoolaccept` no longer accept
    a allowhighfees parameter to fail mempool acceptance if the
    transaction fee exceeds the value of the configuration option
    `-maxtxfee`
    + `getmempoolancestors`, `getmempooldescendants`,
    `getmempoolentry`, and `getrawmempool` no longer return a
    size field unless the configuration option
    `-deprecatedrpc=size` is used
    + `getwalletinfo` now includes a scanning field that is either
    false (no scanning) or an object with information about the
    duration and progress of the wallet's scanning historical
    blocks for transactions affecting its balances
    + `gettransaction` now accepts a third (boolean) argument
    `verbose`
    + `createwallet` accepts a new passphrase parameter
    + `getchaintxstats` RPC now returns the additional key of
    `window_final_block_height`
    + `getmempoolentry` now provides a weight field containing the
    transaction weight as defined in BIP141
    + The `getnetworkinfo` and `getpeerinfo` commands now contain a
    new field with decoded network service flags
    + `getdescriptorinfo` now returns an additional `checksum`
    field containing the checksum for the unmodified descriptor
    provided by the user
    + `joinpsbts` now shuffles the order of the inputs and outputs
    of the resulting joined PSBT
    + `walletcreatefundedpsbt` now signals BIP125 Replace-by-Fee if
    the -walletrbf configuration option is set to true
  * GUI changes
    + The GUI wallet now provides bech32 addresses by default. The
    user may change the address type during invoice generation
    using a GUI toggle, or the default address type may be
    changed with the -addresstype configuration option.
    + In 0.18.0, a ./configure flag was introduced to allow
    disabling BIP70 support in the GUI (support was enabled by
    default). In 0.19.0, this flag is now disabled by default.
  * P2P changes
    + BIP 61 reject messages were deprecated in version 0.18. They
    are now disabled by default, but can be enabled by setting
    the -enablebip61 command line option.
    + To eliminate well-known denial-of-service vectors in Bitcoin
    Core, especially for nodes with spinning disks, the default
    value for the -peerbloomfilters configuration option has been
    changed to false.
    + By default, Bitcoin Core will now make two additional
    outbound connections that are exclusively used for
    block-relay.
  * CLI changes
    + The testnet field in bitcoin-cli -getinfo has been renamed to
    chain and now returns the current network name as defined in
    BIP70
- Fix installation of desktop file</changelog>
</package>
<package pkgid="81c3318130c8f8d28a520ad1f6d900bf20c6533ed13c5a417bf4ef6f2843c1eb" name="bitcoin-test" arch="x86_64">
  <version epoch="0" ver="0.19.0.1" rel="lp151.2.3.13"/>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538568000">- Update to version 0.17.0:
  * For complete list of changes see:
    + release-notes-0.17.0.md</changelog>
  <changelog author="sean@suspend.net" date="1541160000">- Update to version 0.17.0.1:
  * Resolves bcc#14416 Fix OSX dmg issue
  * Resolves bcc#14509 doc:use SegWit in getblocktemplate example</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1550059200">- Update to version 0.17.1
  * `listtransactions` label support
  See release-notes-0.17.1.md for complete changelog
- fix previous entry date</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1562760000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1562846400">- Update to version 0.18.0
  See release-notes.md for complete list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1562846401">- Fix downloaded source</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1575460800">- Update to version 0.19.0.1:
  * New RPCs
    + `getbalances` returns an object with all balances
    + `setwalletflag` sets and unsets wallet flags that enable or
    disable features specific to that existing wallet
    + `getblockfilter` fets the BIP158 filter for the specified
    block
  * New settings
    + `-blockfilterindex` enables the creation of BIP158 block
    filters for the entire blockchain
  * Updated settings
    + `whitebind` and `whitelist` now accept a list of permissions
    to provide peers connecting using the indicated interfaces or
    IP addresses
    + Users setting custom `dbcache` values can increase their
    setting slightly without using any more real memory
  * Updated RPCs
    + `sendmany` no longer has a `minconf` argument
    + `getbalance` and `sendtoaddress`, plus the new RPCs
    `getbalances` and `createwaller`, now accept an `acoid_reuse`
    parameter that controls whether already used addresses should
    be included in the operation
    + RPCs which have an `include_watchonly` argument or
    `includeWatching` option now default to true for watch-only
    wallets
    + `listunspent` now returns a `reused` bool for each output if
    the wallet flag `avoid_reuse` is enabled
    + `getblockstats` now uses BlockUndo data instead of the
    transaction index, making it much faster, no longer dependent
    on the `-txindex` configuration option, and functional for
    all non-pruned blocks
    + `utxoupdatepsbt` now accepts a `descriptors` parameter that
    will fill out input and output scripts and keys when known
    + `sendrawtransaction` and `testmempoolaccept` no longer accept
    a allowhighfees parameter to fail mempool acceptance if the
    transaction fee exceeds the value of the configuration option
    `-maxtxfee`
    + `getmempoolancestors`, `getmempooldescendants`,
    `getmempoolentry`, and `getrawmempool` no longer return a
    size field unless the configuration option
    `-deprecatedrpc=size` is used
    + `getwalletinfo` now includes a scanning field that is either
    false (no scanning) or an object with information about the
    duration and progress of the wallet's scanning historical
    blocks for transactions affecting its balances
    + `gettransaction` now accepts a third (boolean) argument
    `verbose`
    + `createwallet` accepts a new passphrase parameter
    + `getchaintxstats` RPC now returns the additional key of
    `window_final_block_height`
    + `getmempoolentry` now provides a weight field containing the
    transaction weight as defined in BIP141
    + The `getnetworkinfo` and `getpeerinfo` commands now contain a
    new field with decoded network service flags
    + `getdescriptorinfo` now returns an additional `checksum`
    field containing the checksum for the unmodified descriptor
    provided by the user
    + `joinpsbts` now shuffles the order of the inputs and outputs
    of the resulting joined PSBT
    + `walletcreatefundedpsbt` now signals BIP125 Replace-by-Fee if
    the -walletrbf configuration option is set to true
  * GUI changes
    + The GUI wallet now provides bech32 addresses by default. The
    user may change the address type during invoice generation
    using a GUI toggle, or the default address type may be
    changed with the -addresstype configuration option.
    + In 0.18.0, a ./configure flag was introduced to allow
    disabling BIP70 support in the GUI (support was enabled by
    default). In 0.19.0, this flag is now disabled by default.
  * P2P changes
    + BIP 61 reject messages were deprecated in version 0.18. They
    are now disabled by default, but can be enabled by setting
    the -enablebip61 command line option.
    + To eliminate well-known denial-of-service vectors in Bitcoin
    Core, especially for nodes with spinning disks, the default
    value for the -peerbloomfilters configuration option has been
    changed to false.
    + By default, Bitcoin Core will now make two additional
    outbound connections that are exclusively used for
    block-relay.
  * CLI changes
    + The testnet field in bitcoin-cli -getinfo has been renamed to
    chain and now returns the current network name as defined in
    BIP70
- Fix installation of desktop file</changelog>
</package>
<package pkgid="4f060545a8e098b0bee97d94fa744caa7bd5eaa9fd8016f2a45377a43c066fa9" name="bitcoin-utils" arch="x86_64">
  <version epoch="0" ver="0.19.0.1" rel="lp151.2.3.13"/>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538568000">- Update to version 0.17.0:
  * For complete list of changes see:
    + release-notes-0.17.0.md</changelog>
  <changelog author="sean@suspend.net" date="1541160000">- Update to version 0.17.0.1:
  * Resolves bcc#14416 Fix OSX dmg issue
  * Resolves bcc#14509 doc:use SegWit in getblocktemplate example</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1550059200">- Update to version 0.17.1
  * `listtransactions` label support
  See release-notes-0.17.1.md for complete changelog
- fix previous entry date</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1562760000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1562846400">- Update to version 0.18.0
  See release-notes.md for complete list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1562846401">- Fix downloaded source</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1575460800">- Update to version 0.19.0.1:
  * New RPCs
    + `getbalances` returns an object with all balances
    + `setwalletflag` sets and unsets wallet flags that enable or
    disable features specific to that existing wallet
    + `getblockfilter` fets the BIP158 filter for the specified
    block
  * New settings
    + `-blockfilterindex` enables the creation of BIP158 block
    filters for the entire blockchain
  * Updated settings
    + `whitebind` and `whitelist` now accept a list of permissions
    to provide peers connecting using the indicated interfaces or
    IP addresses
    + Users setting custom `dbcache` values can increase their
    setting slightly without using any more real memory
  * Updated RPCs
    + `sendmany` no longer has a `minconf` argument
    + `getbalance` and `sendtoaddress`, plus the new RPCs
    `getbalances` and `createwaller`, now accept an `acoid_reuse`
    parameter that controls whether already used addresses should
    be included in the operation
    + RPCs which have an `include_watchonly` argument or
    `includeWatching` option now default to true for watch-only
    wallets
    + `listunspent` now returns a `reused` bool for each output if
    the wallet flag `avoid_reuse` is enabled
    + `getblockstats` now uses BlockUndo data instead of the
    transaction index, making it much faster, no longer dependent
    on the `-txindex` configuration option, and functional for
    all non-pruned blocks
    + `utxoupdatepsbt` now accepts a `descriptors` parameter that
    will fill out input and output scripts and keys when known
    + `sendrawtransaction` and `testmempoolaccept` no longer accept
    a allowhighfees parameter to fail mempool acceptance if the
    transaction fee exceeds the value of the configuration option
    `-maxtxfee`
    + `getmempoolancestors`, `getmempooldescendants`,
    `getmempoolentry`, and `getrawmempool` no longer return a
    size field unless the configuration option
    `-deprecatedrpc=size` is used
    + `getwalletinfo` now includes a scanning field that is either
    false (no scanning) or an object with information about the
    duration and progress of the wallet's scanning historical
    blocks for transactions affecting its balances
    + `gettransaction` now accepts a third (boolean) argument
    `verbose`
    + `createwallet` accepts a new passphrase parameter
    + `getchaintxstats` RPC now returns the additional key of
    `window_final_block_height`
    + `getmempoolentry` now provides a weight field containing the
    transaction weight as defined in BIP141
    + The `getnetworkinfo` and `getpeerinfo` commands now contain a
    new field with decoded network service flags
    + `getdescriptorinfo` now returns an additional `checksum`
    field containing the checksum for the unmodified descriptor
    provided by the user
    + `joinpsbts` now shuffles the order of the inputs and outputs
    of the resulting joined PSBT
    + `walletcreatefundedpsbt` now signals BIP125 Replace-by-Fee if
    the -walletrbf configuration option is set to true
  * GUI changes
    + The GUI wallet now provides bech32 addresses by default. The
    user may change the address type during invoice generation
    using a GUI toggle, or the default address type may be
    changed with the -addresstype configuration option.
    + In 0.18.0, a ./configure flag was introduced to allow
    disabling BIP70 support in the GUI (support was enabled by
    default). In 0.19.0, this flag is now disabled by default.
  * P2P changes
    + BIP 61 reject messages were deprecated in version 0.18. They
    are now disabled by default, but can be enabled by setting
    the -enablebip61 command line option.
    + To eliminate well-known denial-of-service vectors in Bitcoin
    Core, especially for nodes with spinning disks, the default
    value for the -peerbloomfilters configuration option has been
    changed to false.
    + By default, Bitcoin Core will now make two additional
    outbound connections that are exclusively used for
    block-relay.
  * CLI changes
    + The testnet field in bitcoin-cli -getinfo has been renamed to
    chain and now returns the current network name as defined in
    BIP70
- Fix installation of desktop file</changelog>
</package>
<package pkgid="dbc65eb65851bbd160241ef0e6435fd7568c3049f20cd462f118dee79429a456" name="bitcoind" arch="x86_64">
  <version epoch="0" ver="0.19.0.1" rel="lp151.2.3.13"/>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538568000">- Update to version 0.17.0:
  * For complete list of changes see:
    + release-notes-0.17.0.md</changelog>
  <changelog author="sean@suspend.net" date="1541160000">- Update to version 0.17.0.1:
  * Resolves bcc#14416 Fix OSX dmg issue
  * Resolves bcc#14509 doc:use SegWit in getblocktemplate example</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1550059200">- Update to version 0.17.1
  * `listtransactions` label support
  See release-notes-0.17.1.md for complete changelog
- fix previous entry date</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1562760000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1562846400">- Update to version 0.18.0
  See release-notes.md for complete list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1562846401">- Fix downloaded source</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1575460800">- Update to version 0.19.0.1:
  * New RPCs
    + `getbalances` returns an object with all balances
    + `setwalletflag` sets and unsets wallet flags that enable or
    disable features specific to that existing wallet
    + `getblockfilter` fets the BIP158 filter for the specified
    block
  * New settings
    + `-blockfilterindex` enables the creation of BIP158 block
    filters for the entire blockchain
  * Updated settings
    + `whitebind` and `whitelist` now accept a list of permissions
    to provide peers connecting using the indicated interfaces or
    IP addresses
    + Users setting custom `dbcache` values can increase their
    setting slightly without using any more real memory
  * Updated RPCs
    + `sendmany` no longer has a `minconf` argument
    + `getbalance` and `sendtoaddress`, plus the new RPCs
    `getbalances` and `createwaller`, now accept an `acoid_reuse`
    parameter that controls whether already used addresses should
    be included in the operation
    + RPCs which have an `include_watchonly` argument or
    `includeWatching` option now default to true for watch-only
    wallets
    + `listunspent` now returns a `reused` bool for each output if
    the wallet flag `avoid_reuse` is enabled
    + `getblockstats` now uses BlockUndo data instead of the
    transaction index, making it much faster, no longer dependent
    on the `-txindex` configuration option, and functional for
    all non-pruned blocks
    + `utxoupdatepsbt` now accepts a `descriptors` parameter that
    will fill out input and output scripts and keys when known
    + `sendrawtransaction` and `testmempoolaccept` no longer accept
    a allowhighfees parameter to fail mempool acceptance if the
    transaction fee exceeds the value of the configuration option
    `-maxtxfee`
    + `getmempoolancestors`, `getmempooldescendants`,
    `getmempoolentry`, and `getrawmempool` no longer return a
    size field unless the configuration option
    `-deprecatedrpc=size` is used
    + `getwalletinfo` now includes a scanning field that is either
    false (no scanning) or an object with information about the
    duration and progress of the wallet's scanning historical
    blocks for transactions affecting its balances
    + `gettransaction` now accepts a third (boolean) argument
    `verbose`
    + `createwallet` accepts a new passphrase parameter
    + `getchaintxstats` RPC now returns the additional key of
    `window_final_block_height`
    + `getmempoolentry` now provides a weight field containing the
    transaction weight as defined in BIP141
    + The `getnetworkinfo` and `getpeerinfo` commands now contain a
    new field with decoded network service flags
    + `getdescriptorinfo` now returns an additional `checksum`
    field containing the checksum for the unmodified descriptor
    provided by the user
    + `joinpsbts` now shuffles the order of the inputs and outputs
    of the resulting joined PSBT
    + `walletcreatefundedpsbt` now signals BIP125 Replace-by-Fee if
    the -walletrbf configuration option is set to true
  * GUI changes
    + The GUI wallet now provides bech32 addresses by default. The
    user may change the address type during invoice generation
    using a GUI toggle, or the default address type may be
    changed with the -addresstype configuration option.
    + In 0.18.0, a ./configure flag was introduced to allow
    disabling BIP70 support in the GUI (support was enabled by
    default). In 0.19.0, this flag is now disabled by default.
  * P2P changes
    + BIP 61 reject messages were deprecated in version 0.18. They
    are now disabled by default, but can be enabled by setting
    the -enablebip61 command line option.
    + To eliminate well-known denial-of-service vectors in Bitcoin
    Core, especially for nodes with spinning disks, the default
    value for the -peerbloomfilters configuration option has been
    changed to false.
    + By default, Bitcoin Core will now make two additional
    outbound connections that are exclusively used for
    block-relay.
  * CLI changes
    + The testnet field in bitcoin-cli -getinfo has been renamed to
    chain and now returns the current network name as defined in
    BIP70
- Fix installation of desktop file</changelog>
</package>
<package pkgid="cb50243763faff65aff80b8ee9160a1e5568e9383a60d1dd9b139b8e3a584c1e" name="bluez" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.12.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="4db844420b0a0adbc1d075958ca73394f08988d23a6049c46297e1115e35a5d8" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp151.8.12.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="8f83ad72e6bf7ed8356b7af3c80475514f1f83ee841534c74aa6caadcad7836c" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.12.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="1edc20743d5ecc594b460e323dc06112636fd4405ae8245decab2e67796df900" name="bluez" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.15.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="51ac29a2fd05ffa34c62a35749d19b85ae773172ebc244a9be4abcaf99b763cc" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp151.8.15.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="9a1b8dd801565a04623514b43b6abd61c4f05a58911c52dc93cfc9089abc3a91" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.15.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="ce97aa8f28072a8d6239201fc8758fc70c6709f87af2001de8853f2db843185b" name="bluez" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="76744b989a1fcfc4823c491052ab26f6803639faf4a9f6eb673ccf499945c85b" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="2a65c4c8649cdae1c2d26a34f66d75e845659828b20a06e8a3d163c8aaf54b21" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="e6ae1ce7581e3b146e790e6cd7efc966ac641ba8e5263619b0d641e5459fb6f5" name="bluez" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="74663c29ad66d6a10d0eec2227efef7606861d17d1bebb2dffd5a1a678f2fb29" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="719cdfccd86732c154113934e291d1c85a292c12e5a71e407fd8d87a6d879532" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="531ab226f0638dedd0eb23ed3e7b49c20d1b8f52c78f070d20e964f97ea91b28" name="bluez" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.9.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488369600">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
</package>
<package pkgid="f533f6fcb58e03e66bb31e3b8a8bc2a691f2c9ff2eff51b02ec0f8fca18fff88" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp151.8.9.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488369600">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
</package>
<package pkgid="4f2f3c427d78c5ce3843c33dbc878e19b76b19c07435441a212ac9deb292a30a" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.9.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488369600">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
</package>
<package pkgid="0914776a322463ebc93bf1a699c44b0ea4077ec603111c834480353f7555df35" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp151.8.12.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="60239be2abc7ef6100d9f30dbc9a7410affecb066800d981a2cb7fa4b162e82c" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp151.8.15.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="21e323128e518566bfaeacb30c793f4279cbec6894efc5164cb97cf306be8fc3" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="bdc704731de9779262ac47348d9f278e8f7be0da92a78e50067080a483c6be9a" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="3b1de02bf6a85e9986b905d2e2e55c648a3412b3b54123e5b3be7e441927e6c0" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp151.8.9.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488369600">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
</package>
<package pkgid="c2bc742268904481afcc8868de65d07c81a2a301c6982a90e40c87c06f2900f6" name="bluez-cups" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.12.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="3c7257f57b577d36c698024fcc5120cb4adb74c52d9df7365ddc343be93ede09" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.12.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="5d0e5d9b6a36a8881385b56327c0e88f677bce7b7441641dd3a3e87468b04e6a" name="bluez-cups" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.15.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="b0d3a9f84d32d29d9bda3cd49251a8597ade36abeebed86dd4292f1bd2fbd66f" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.15.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="05abbd9f3aa1403a6aa77b2f7206a7913d3f40ff74235eb88bc7763468be273d" name="bluez-cups" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="f97f4c75e0b24548c940bd50bf36ecad1979559c9ee7a8f7ba85bf996c53d0ea" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="d0c9abbbb746425e78e3abb6cf6f857c27aebb6e9b2fe30489c3017cdb3be52a" name="bluez-cups" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="c2f8f09c10390f40758e31f9094689acee729d95f90ae8188b523282f15a2545" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="084141870c89e02039c4ed976c04a59e93dbc73d783c21b10dd0c25ad8882da8" name="bluez-cups" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.9.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488369600">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
</package>
<package pkgid="823f221a4062a506ab6680a5423f3f2afa8ee2ee37fc27b5005510ed53a0cf6b" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.9.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488369600">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
</package>
<package pkgid="7618993e7d2cbc1d2ebda673f6659f218e66057f5884cbdb033257154272454d" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.12.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="c9665d1f8fbf66de1877311cd82ffe4e8d55c1227d0a7d5f65b5c9cdf13bd3b6" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.15.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="08cdb01c0fb9f2825389a2991494c45fcc4e5cd466ea1f13fd90a20e1f15a74c" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="1ed5111af6abdc9e44f691f62723f4744daaecc307db90be175e9fb7a127add4" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="6b26e3f9ca80df5048bbeaf17efe70bbf0f07db10f14ca18552a99b921040c9c" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.9.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488369600">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
</package>
<package pkgid="5b1e7297b9cbc31c2d5ac4b2f2bc3c21d53e006965dcd4c408920fa2419ba2a5" name="bluez-devel" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.12.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="1890648689a3e0f7e4297e29f2eea9a73fbdafb4bf18a81844c7f0409ae4dba7" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.12.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="00c886781e8e44b0fcd734652adb4871326f3445e67221505b657b86efdadca9" name="bluez-devel" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.15.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="349284598953583555fda8b0fd5a23bc8a5d6ffa92bcf0dcc362c41e646ee0b4" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.15.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="145475426a71ad3273cdb938f2791e2f4d7fc65684bb99dcd1529dd302e539bc" name="bluez-devel" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="70f6cc3eeeb8a60f51a3a8d62c2472f3f8792de9affe2cc8a73486b95cf19c88" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="be05208cb08de85f49b4fbb191ee2fb8958c4d1b21df98ce85912d7b12540001" name="bluez-devel" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="faea4a1ec532e7620f285592a77c30844bd7885f92e1e819465621c1eae38d95" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="652530ba53c1f14579cb5871e7a579ecbcd4c9c5a300713d97893420abe24b8e" name="bluez-devel" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.9.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488369600">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
</package>
<package pkgid="cecb4eb340d1ec4ee4fa81b61c131d8cfb7c1544f1a54d88fcfea1f6eaea2898" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.9.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488369600">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
</package>
<package pkgid="85427b20d841c1a435837f20dc61394cab8925b3e6ef5890e448dcce5bd9a2b4" name="bluez-test" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.12.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="c006bd65b70a941be124a4a59cd725bebd5e1e12e3a168e743566a601b31e48c" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.12.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="223a117993a88ea8a56b26ff8946c3dc5828e6b0df18772269648426df0aa99d" name="bluez-test" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.15.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="97490fcaabccd23194d862601aa62e2a7ed1a900e59967b8d10d16c469ca61ea" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.15.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="7fbafd4303f4933c95496131c43a6fb1f545982f38207b9ad471969dac1c816f" name="bluez-test" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="64a0aee8b16182396a9ad9fabc70cb3d98c86d3d6bf2f86b1bc4bc3b015a48ae" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="bb078e29b1667a3fc02dca7ec4c682e9ac7cfb3906f5f17c02dfd0734b87198f" name="bluez-test" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="be091aa93ae486db22d45db258eecfdedf98b17cf2605c9a6dcfb7ea3c6e75a5" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="dbeb443389d1a9198d550081573c3707341d01065a84006abcc2834c4bc22c31" name="bluez-test" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.9.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488369600">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
</package>
<package pkgid="8df475f1d28a4d625c5434fbbcce8a84e7c8e1eb7e1952a42f5df7b5b1d90786" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.9.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488369600">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
</package>
<package pkgid="60f721779ed28424f8e5b6b5857b7f3b024420fea0d7a8f6b6ccbd1373ec5ea3" name="boost" arch="src">
  <version epoch="0" ver="1.66.0" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1478174400">- Rectify groups and description</changelog>
  <changelog author="adam.majer@suse.de" date="1478606400">- Revert upstream change that set default python version and
  ignored user configuration.
  python-2059618.patch (boo#1006584)</changelog>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
</package>
<package pkgid="4c845977d5ee0c0ddd0642cc5adb64de88d750ea825fd5ff64d514aa928b4b0e" name="boost-base" arch="src">
  <version epoch="0" ver="1.66.0" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1478174400">- Rectify groups and description</changelog>
  <changelog author="adam.majer@suse.de" date="1478606400">- Revert upstream change that set default python version and
  ignored user configuration.
  python-2059618.patch (boo#1006584)</changelog>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
</package>
<package pkgid="146f876d66bf30c1d22db896bfc18c0c37fc5296a8f44bf5e8b4d0e6318fd480" name="boost-license1_66_0" arch="noarch">
  <version epoch="0" ver="1.66.0" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1478174400">- Rectify groups and description</changelog>
  <changelog author="adam.majer@suse.de" date="1478606400">- Revert upstream change that set default python version and
  ignored user configuration.
  python-2059618.patch (boo#1006584)</changelog>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
</package>
<package pkgid="be1fbe72ae6d43526580c628a4fdae36f39ec722b50409707414eda2296f3ee0" name="boost_1_66-doc-html" arch="noarch">
  <version epoch="0" ver="1.66.0" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1478174400">- Rectify groups and description</changelog>
  <changelog author="adam.majer@suse.de" date="1478606400">- Revert upstream change that set default python version and
  ignored user configuration.
  python-2059618.patch (boo#1006584)</changelog>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
</package>
<package pkgid="5cf5cc34678bccfa8065c863ba48b1cdda962f0c8ccfeb28ff714f38bea66504" name="boost_1_66-doc-pdf" arch="noarch">
  <version epoch="0" ver="1.66.0" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1478174400">- Rectify groups and description</changelog>
  <changelog author="adam.majer@suse.de" date="1478606400">- Revert upstream change that set default python version and
  ignored user configuration.
  python-2059618.patch (boo#1006584)</changelog>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
</package>
<package pkgid="ef407b30850f171108d4ae5eb16a058bfb4f709e0ccbe08fc9a569dff9887440" name="boost_1_66-jam" arch="i586">
  <version epoch="0" ver="1.66.0" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1478174400">- Rectify groups and description</changelog>
  <changelog author="adam.majer@suse.de" date="1478606400">- Revert upstream change that set default python version and
  ignored user configuration.
  python-2059618.patch (boo#1006584)</changelog>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
</package>
<package pkgid="32cd6ea6b07cebedeead7141a0d55886b5e5acab9998408b81f3384e07bd2349" name="boost_1_66-jam" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1478174400">- Rectify groups and description</changelog>
  <changelog author="adam.majer@suse.de" date="1478606400">- Revert upstream change that set default python version and
  ignored user configuration.
  python-2059618.patch (boo#1006584)</changelog>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
</package>
<package pkgid="ca74a5f5c9133eb3562cb14a2ece1c5c26a1601d7f521f6d070c94c12ecf2011" name="boost_1_66-quickbook" arch="i586">
  <version epoch="0" ver="1.66.0" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1478174400">- Rectify groups and description</changelog>
  <changelog author="adam.majer@suse.de" date="1478606400">- Revert upstream change that set default python version and
  ignored user configuration.
  python-2059618.patch (boo#1006584)</changelog>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
</package>
<package pkgid="3adbfbc7aee632dba003dbac89fa7fa95f6b18c8bbd406c8a69c1d4946999b8c" name="boost_1_66-quickbook" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1478174400">- Rectify groups and description</changelog>
  <changelog author="adam.majer@suse.de" date="1478606400">- Revert upstream change that set default python version and
  ignored user configuration.
  python-2059618.patch (boo#1006584)</changelog>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
</package>
<package pkgid="2b021fbaf3af6ff6e5f096b9a04a046f867ea2731ce41f0d42eca70ee359a7d0" name="borgbackup" arch="src">
  <version epoch="0" ver="1.1.9" rel="lp151.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1510315200">- Fix build on Leap 42.2 by BuildRequiring bash-completion</changelog>
  <changelog author="alarrosa@suse.com" date="1512993600">- Update to borgbackup 1.1.3
- Fixes:
  * Security Fix for CVE-2017-15914: Incorrect implementation of access
    controls allows remote users to override repository restrictions in Borg
    servers. A user able to access a remote Borg SSH server is able to
    circumvent access controls post-authentication.
    Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.
  * crc32: deal with unaligned buffer, add tests - this broke borg on older ARM
    CPUs that can not deal with unaligned 32bit memory accesses and raise a bus
    error in such cases. the fix might also improve performance on some CPUs as
    all 32bit memory accesses by the crc32 code are properly aligned now.
  * mount: fixed support of --consider-part-files and do not show .borg_part_N
    files by default in the mounted FUSE filesystem.
  * fixed cache/repo timestamp inconsistency message, highlight that
    information is obtained from security dir (deleting the cache will not
    bypass this error in case the user knows this is a legitimate repo).
  * borgfs: don't show sub-command in borgfs help
  * create: show an error when --dry-run and --stats are used together
- New features:
  * mount: added exclusion group options and paths.
    Reused some code to support similar options/paths as borg extract offers -
    making good use of these to only mount a smaller subset of dirs/files can
    speed up mounting a lot and also will consume way less memory.
    borg mount [options] repo_or_archive mountpoint path [paths...]
    paths: you can just give some "root paths" (like for borg extract) to only
    partially populate the FUSE filesystem.
    new options: --exclude[-from], --pattern[s-from], --strip-components
  * create/extract: support st_birthtime on platforms supporting it
  * add "borg config" command for querying/setting/deleting config values
- Other changes:
  * clean up and simplify packaging (only package committed files,
  do not install .c/.h/.pyx files)
  * docs:
  * point out tuning options for borg create
  * add instructions for using ntfsclone, zerofree
  * move image backup-related FAQ entries to a new page
  * clarify key aliases for borg list --format
  * mention break-lock in checkpointing FAQ entry
  * document sshfs rename workaround
  * add FAQ about removing files from existing archives
  * add FAQ about different prune policies
  * usage and man page for borgfs
  * clarify create --stats duration vs. wall time
  * clarify encrypted key format for borg key export
  * update release checklist about security fixes
  * document good and problematic option placements, fix examples
  * add note on using --nobsdflags to avoid speed penalty related to bsdflags
  * move most of support section to www.borgbackup.org</changelog>
  <changelog author="alarrosa@suse.com" date="1515585600">- Update to borgbackup 1.1.4
  * Fix a potential data corruption issue with 'borg check --repair'
    happening in borg &gt;= 1.1 and &lt; 1.1.4
  * zstd compression is new in borg 1.1.4, older borg can't handle it.
  * new minimum requirements for the compression libraries:
    + added requirement: libzstd &gt;= 1.3.0
    + updated requirement: liblz4 &gt;= 1.7.0 / r129
- Fixes:
  * check: data corruption fix: fix for borg check --repair malfunction. See
  the more detailed notes at
  https://github.com/borgbackup/borg/blob/1.1.4/docs/changes.rst
  * delete: also delete security dir when deleting a repo
  * prune: fix building the "borg prune" man page
  * init: use given --storage-quota for local repo
  * init: properly quote repo path in output
  * fix startup delay with dns-only own fqdn resolving
- New features:
  * added zstd compression.
  * added placeholder {reverse-fqdn} for fqdn in reverse notation
  * added BORG_BASE_DIR environment variable
- Other changes:
  * list help topics when invalid topic is requested
  * fix lz4 deprecation warning, requires lz4 &gt;= 1.7.0 (r129)
  * add parens for C preprocessor macro argument usages (did not cause
    malfunction)
  * exclude broken pytest 3.3.0 release
  * updated fish/bash completions
  * init: more clear exception messages for borg create
  * docs:
    + add auto-generated docs for borg config
    + don't generate HTML docs page for borgfs
    + docs update for lz4 b2 zstd changes
    + add zstd to compression help, readme, docs
    + update requirements and install docs about bundled lz4 and zstd
    + refactored build of the compress and crypto.low_level extensions
    + move some lib/build related code to setup_{zstd,lz4,b2}.py
    + bundle lz4 1.8.0 (requirement: &gt;= 1.7.0 / r129)
    + bundle zstd 1.3.2 (requirement: &gt;= 1.3.0)
    + blake2 was already bundled
    + rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better
    consistency: we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
    + add prefer_system_lib* = True settings to setup.py - by default the
    build will prefer a shared library over the bundled code, if library
    and headers can be found and meet the minimum requirements.</changelog>
  <changelog author="alarrosa@suse.com" date="1517140800">- Don't use liblz4 nor libzstd on Leap 42.x which doesn't support them
  and add missing requirement python-guzzle_sphinx_theme on Tumbleweed.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1519732800">- Add patch borgbackup-1.1.4-binary-content-checks.patch:
  * Fixes build failure due to bad encoding
  * Based on upstream commit 9cf8d57 "do .h file content checks in binary mode"
  * This patch will no longer be needed with borgbackup &gt; 1.1.4</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Add patch to require the new msgpack python module in Tumbleweed
  instead of the deprecated msgpack-python python module:
  * fix-msgpack-requirement.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520164800">- Add patch to fall back to a sphinx default theme for older distributions
  that don't have python3-guzzle_sphinx_theme available
  * borgbackup-1.1.4-sphinx-default-theme.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520251200">- Fix sphinx theme fallback condition</changelog>
  <changelog author="alarrosa@suse.com" date="1522670400">- Update to 1.1.5
- Fixes:
  * create --list: fix that it was never showing M status
  * create: fix timing for first checkpoint (read files cache early,
    init checkpoint timer after that)
  * extract: set rc=1 when extracting damaged files with all-zero replacement
    chunks or with size inconsistencies
  * diff: consider an empty file as different to a non-existing file
  * files cache: improve exception handling
  * ignore exceptions in scandir_inorder() caused by an implicit stat(), also
    remove unneeded sort
  * fixed tab completion problem where a space is always added after path even
    when it shouldn't
  * build: do .h file content checks in binary mode, fixes build issue for
    non-ascii header files on pure-ascii locale platforms
  * borgfs: fix patterns/paths processing
  * config: add some validation
  * repository config: add validation for max_segment_size
  * set cache previous_location on load instead of save
  * remove platform.uname() call which caused library mismatch issues
  * add exception handler around deprecated platform.linux_distribution() call
  * use same datetime object for {now} and {utcnow}
- New features:
  * create: implement --stdin-name
  * add chunker_params to borg archive info (--json)
  * BORG_SHOW_SYSINFO=no to hide system information from exceptions
- Other changes:
  * updated zsh completions for borg 1.1.4
  * files cache related code cleanups
  * be more helpful when parsing invalid --pattern values
  * be more clear in secure-erase warning message
  * improve getpass user experience
  * docs build: unicode problem fixed when using a py27-based sphinx
- docs:
  * security: explicitly note what happens OUTSIDE the attack model
  * security: add note about combining compression and encryption
  * security: describe chunk size / proximity issue
  * quickstart: add note about permissions, borg@localhost
  * quickstart: add introduction to repositories &amp; archives
  * recreate --recompress: add missing metavar, clarify description
  * improve logging docs
  * add an example for --pattern usage
  * clarify path semantics when matching
  * link to offline documentation from README
  * add docs on how to verify a signed release with GPG
  * chunk seed is generated per repository (not: archive)
  * better formatting of CPU usage documentation
  * extend append-only repo rollback docs
- tests:
  * fix erroneously skipped zstd compressor tests
  * skip a test if argparse is broken
- Drop borgbackup-1.1.4-binary-content-checks.patch which is already included
  upstream.
- Rebase fix-msgpack-requirement.patch</changelog>
  <changelog author="mlin@suse.com" date="1525262400">- Leap 15.0 and SLE15 both are moved to renamed python3-msgpack,
  fix-msgpack-requirement.patch have to be used to deal with msgpack
  package rename fallout.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added borgbackup.keyring, which contains the key from the author</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to 1.1.6:
  - Fixes
  - fix borg exception handling on ENOSPC error with xattrs
  - prune: fix/improve overall progress display
  - borg config repo ... does not need cache/manifest/key
  - New features
  - mount: add uid, gid, umask mount options
  - delete:
  - only commit once
  - implement --dry-run
  - check:
  - show progress while rebuilding missing manifest
  - more --repair output
  - borg config --list &lt;repo&gt;</changelog>
  <changelog author="kbabioch@suse.com" date="1533988800">- Update to 1.1.7:
  - Fixes
  - cache lock: use lock_wait everywhere to fix infinite wait
  - don't archive tagged dir when recursing an excluded dir
  - New features
  - init: add warning to store both key and passphrase at safe place(s)
  - BORG_HOST_ID env var to work around all-zero MAC address issue
  - borg debug dump-repo-objs --ghost (dump everything from segment files,
    including deleted or superceded objects or commit tags)
  - borg debug search-repo-objs (search in repo objects for hex bytes or strings)
  - Other changes:
  - add Python 3.7 support
  - updated shell completions
  - locking: better logging, add some asserts</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to 1.1.8:
  - Fixes
  - enforce storage quota if set by serve-command
  - invalid locations: give err msg containing parsed location
  - list repo: add placeholders for hostname and username
  - symlinks can't have ACLs, so don't try to set any
  - New features
  - create: added PATH::archive output on INFO log level
  - read a passphrase from a file descriptor specified in the BORG_PASSPHRASE_FD environment variable.
  - docs:
  - option --format is required for some expensive-to-compute values for json
  - borg list by default does not compute expensive values except when they
    are needed. whether they are needed is determined by the format, in
    standard mode as well as in --json mode.
  - fixed wrong archive name pattern in CRUD benchmark help
  - fixed link to cachedir spec in docs
  - tests:
  - stop using fakeroot on travis, avoids sporadic EISDIR errors
  - xattr key names must start with "user." on linux
  - fix code so flake8 3.6 does not complain
  - explicitly convert environment variable to str
  - fix DeprecationWarning: Flags not at the start of the expression
  - support pytest4</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549195200">- Add conditionals to control various build aspects distribution
  agnostic</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549886400">- Update to 1.1.9:
  - Fixes:
  - security fix: configure FUSE with "default_permissions",
    gh#borgbackup/borg#3903 "default_permissions" is now enforced by borg by
    default to let the kernel check uid/gid/mode based permissions.
    "ignore_permissions" can be given to not enforce "default_permissions".
  - make ?hostname? short, even on misconfigured systems,
    gh#borgbackup/borg#4262
  - fix free space calculation on macOS (and others?),
    gh#borgbackup/borg#4289
  - config: quit with error message when no key is provided,
    gh#borgbackup/borg#4223
  - recover_segment: handle too small segment files correctly,
    gh#borgbackup/borg#4272
  - correctly release memoryview, gh#borgbackup/borg#4243
  - avoid diaper pattern in configparser by opening files,
    gh#borgbackup/borg#4263
  - add "# cython: language_level=3" directive to .pyx
    files, #4214
  - info: consider part files for "This archive" stats,
    gh#borgbackup/borg#3522
  - work around Microsoft WSL issue gh#borgbackup/borg#645 (sync_file_range),
    [#1961]
  - New features:
  - add ?rsh command line option to complement BORG_RSH env var,
    gh#borgbackup/borg#1701
  - init: -make-parent-dirs parent1/parent2/repo_dir, gh#borgbackup/borg#4235
  - Other:
  - add archive name to check -repair output, gh#borgbackup/borg#3447
  - check for unsupported msgpack versions
  - shell completions:
  - new shell completions for borg 1.1.9
  - more complete shell completions for borg mount -o
  - added shell completions for borg help
  - option arguments for zsh tab completion
  - docs:
  - add FAQ regarding free disk space check, gh#borgbackup/borg#3905
  - update BORG_PASSCOMMAND example and clarify variable expansion,
    gh#borgbackup/borg#4249
  - FAQ regarding change of compression settings, gh#borgbackup/borg#4222
  - add note about BSD flags to changelog, gh#borgbackup/borg#4246
  - improve logging in example automation script
  - add note about files changing during backup, gh#borgbackup/borg#4081
  - work around the backslash issue, gh#borgbackup/borg#4280
  - update release workflow using twine (docs, scripts),
    gh#borgbackup/borg#4213
  - add warnings on repository copies to avoid future problems,
    gh#borgbackup/borg#4272
  - tests:
  - fix the homebrew 1.9 issues on travis-ci, gh#borgbackup/borg#4254
  - fix duplicate test method name, gh#borgbackup/borg#4311
- Moved the docs to a new -doc subpackage
- Use the %license tag for the license</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549886401">- Update RPM groups.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Modify patch fix-msgpack-requirement.patch to allow msgpack-0.5.4
  as well. See patch for discussion.
- Clean-up dependency blocks</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1552046400">- According to upstream preference and dealing with msgpack update
  in Factory, allow msgpack &lt;= 0.6.1 as well</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Require python3-setuptools since it's needed when running borg
  to find the entry point (boo#1134650)</changelog>
</package>
<package pkgid="5b39da2bf4fb30dfa3406e5298a133f141b850abfbddd67b03ff132b55ea2ee1" name="borgbackup" arch="x86_64">
  <version epoch="0" ver="1.1.9" rel="lp151.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1510315200">- Fix build on Leap 42.2 by BuildRequiring bash-completion</changelog>
  <changelog author="alarrosa@suse.com" date="1512993600">- Update to borgbackup 1.1.3
- Fixes:
  * Security Fix for CVE-2017-15914: Incorrect implementation of access
    controls allows remote users to override repository restrictions in Borg
    servers. A user able to access a remote Borg SSH server is able to
    circumvent access controls post-authentication.
    Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.
  * crc32: deal with unaligned buffer, add tests - this broke borg on older ARM
    CPUs that can not deal with unaligned 32bit memory accesses and raise a bus
    error in such cases. the fix might also improve performance on some CPUs as
    all 32bit memory accesses by the crc32 code are properly aligned now.
  * mount: fixed support of --consider-part-files and do not show .borg_part_N
    files by default in the mounted FUSE filesystem.
  * fixed cache/repo timestamp inconsistency message, highlight that
    information is obtained from security dir (deleting the cache will not
    bypass this error in case the user knows this is a legitimate repo).
  * borgfs: don't show sub-command in borgfs help
  * create: show an error when --dry-run and --stats are used together
- New features:
  * mount: added exclusion group options and paths.
    Reused some code to support similar options/paths as borg extract offers -
    making good use of these to only mount a smaller subset of dirs/files can
    speed up mounting a lot and also will consume way less memory.
    borg mount [options] repo_or_archive mountpoint path [paths...]
    paths: you can just give some "root paths" (like for borg extract) to only
    partially populate the FUSE filesystem.
    new options: --exclude[-from], --pattern[s-from], --strip-components
  * create/extract: support st_birthtime on platforms supporting it
  * add "borg config" command for querying/setting/deleting config values
- Other changes:
  * clean up and simplify packaging (only package committed files,
  do not install .c/.h/.pyx files)
  * docs:
  * point out tuning options for borg create
  * add instructions for using ntfsclone, zerofree
  * move image backup-related FAQ entries to a new page
  * clarify key aliases for borg list --format
  * mention break-lock in checkpointing FAQ entry
  * document sshfs rename workaround
  * add FAQ about removing files from existing archives
  * add FAQ about different prune policies
  * usage and man page for borgfs
  * clarify create --stats duration vs. wall time
  * clarify encrypted key format for borg key export
  * update release checklist about security fixes
  * document good and problematic option placements, fix examples
  * add note on using --nobsdflags to avoid speed penalty related to bsdflags
  * move most of support section to www.borgbackup.org</changelog>
  <changelog author="alarrosa@suse.com" date="1515585600">- Update to borgbackup 1.1.4
  * Fix a potential data corruption issue with 'borg check --repair'
    happening in borg &gt;= 1.1 and &lt; 1.1.4
  * zstd compression is new in borg 1.1.4, older borg can't handle it.
  * new minimum requirements for the compression libraries:
    + added requirement: libzstd &gt;= 1.3.0
    + updated requirement: liblz4 &gt;= 1.7.0 / r129
- Fixes:
  * check: data corruption fix: fix for borg check --repair malfunction. See
  the more detailed notes at
  https://github.com/borgbackup/borg/blob/1.1.4/docs/changes.rst
  * delete: also delete security dir when deleting a repo
  * prune: fix building the "borg prune" man page
  * init: use given --storage-quota for local repo
  * init: properly quote repo path in output
  * fix startup delay with dns-only own fqdn resolving
- New features:
  * added zstd compression.
  * added placeholder {reverse-fqdn} for fqdn in reverse notation
  * added BORG_BASE_DIR environment variable
- Other changes:
  * list help topics when invalid topic is requested
  * fix lz4 deprecation warning, requires lz4 &gt;= 1.7.0 (r129)
  * add parens for C preprocessor macro argument usages (did not cause
    malfunction)
  * exclude broken pytest 3.3.0 release
  * updated fish/bash completions
  * init: more clear exception messages for borg create
  * docs:
    + add auto-generated docs for borg config
    + don't generate HTML docs page for borgfs
    + docs update for lz4 b2 zstd changes
    + add zstd to compression help, readme, docs
    + update requirements and install docs about bundled lz4 and zstd
    + refactored build of the compress and crypto.low_level extensions
    + move some lib/build related code to setup_{zstd,lz4,b2}.py
    + bundle lz4 1.8.0 (requirement: &gt;= 1.7.0 / r129)
    + bundle zstd 1.3.2 (requirement: &gt;= 1.3.0)
    + blake2 was already bundled
    + rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better
    consistency: we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
    + add prefer_system_lib* = True settings to setup.py - by default the
    build will prefer a shared library over the bundled code, if library
    and headers can be found and meet the minimum requirements.</changelog>
  <changelog author="alarrosa@suse.com" date="1517140800">- Don't use liblz4 nor libzstd on Leap 42.x which doesn't support them
  and add missing requirement python-guzzle_sphinx_theme on Tumbleweed.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1519732800">- Add patch borgbackup-1.1.4-binary-content-checks.patch:
  * Fixes build failure due to bad encoding
  * Based on upstream commit 9cf8d57 "do .h file content checks in binary mode"
  * This patch will no longer be needed with borgbackup &gt; 1.1.4</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Add patch to require the new msgpack python module in Tumbleweed
  instead of the deprecated msgpack-python python module:
  * fix-msgpack-requirement.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520164800">- Add patch to fall back to a sphinx default theme for older distributions
  that don't have python3-guzzle_sphinx_theme available
  * borgbackup-1.1.4-sphinx-default-theme.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520251200">- Fix sphinx theme fallback condition</changelog>
  <changelog author="alarrosa@suse.com" date="1522670400">- Update to 1.1.5
- Fixes:
  * create --list: fix that it was never showing M status
  * create: fix timing for first checkpoint (read files cache early,
    init checkpoint timer after that)
  * extract: set rc=1 when extracting damaged files with all-zero replacement
    chunks or with size inconsistencies
  * diff: consider an empty file as different to a non-existing file
  * files cache: improve exception handling
  * ignore exceptions in scandir_inorder() caused by an implicit stat(), also
    remove unneeded sort
  * fixed tab completion problem where a space is always added after path even
    when it shouldn't
  * build: do .h file content checks in binary mode, fixes build issue for
    non-ascii header files on pure-ascii locale platforms
  * borgfs: fix patterns/paths processing
  * config: add some validation
  * repository config: add validation for max_segment_size
  * set cache previous_location on load instead of save
  * remove platform.uname() call which caused library mismatch issues
  * add exception handler around deprecated platform.linux_distribution() call
  * use same datetime object for {now} and {utcnow}
- New features:
  * create: implement --stdin-name
  * add chunker_params to borg archive info (--json)
  * BORG_SHOW_SYSINFO=no to hide system information from exceptions
- Other changes:
  * updated zsh completions for borg 1.1.4
  * files cache related code cleanups
  * be more helpful when parsing invalid --pattern values
  * be more clear in secure-erase warning message
  * improve getpass user experience
  * docs build: unicode problem fixed when using a py27-based sphinx
- docs:
  * security: explicitly note what happens OUTSIDE the attack model
  * security: add note about combining compression and encryption
  * security: describe chunk size / proximity issue
  * quickstart: add note about permissions, borg@localhost
  * quickstart: add introduction to repositories &amp; archives
  * recreate --recompress: add missing metavar, clarify description
  * improve logging docs
  * add an example for --pattern usage
  * clarify path semantics when matching
  * link to offline documentation from README
  * add docs on how to verify a signed release with GPG
  * chunk seed is generated per repository (not: archive)
  * better formatting of CPU usage documentation
  * extend append-only repo rollback docs
- tests:
  * fix erroneously skipped zstd compressor tests
  * skip a test if argparse is broken
- Drop borgbackup-1.1.4-binary-content-checks.patch which is already included
  upstream.
- Rebase fix-msgpack-requirement.patch</changelog>
  <changelog author="mlin@suse.com" date="1525262400">- Leap 15.0 and SLE15 both are moved to renamed python3-msgpack,
  fix-msgpack-requirement.patch have to be used to deal with msgpack
  package rename fallout.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added borgbackup.keyring, which contains the key from the author</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to 1.1.6:
  - Fixes
  - fix borg exception handling on ENOSPC error with xattrs
  - prune: fix/improve overall progress display
  - borg config repo ... does not need cache/manifest/key
  - New features
  - mount: add uid, gid, umask mount options
  - delete:
  - only commit once
  - implement --dry-run
  - check:
  - show progress while rebuilding missing manifest
  - more --repair output
  - borg config --list &lt;repo&gt;</changelog>
  <changelog author="kbabioch@suse.com" date="1533988800">- Update to 1.1.7:
  - Fixes
  - cache lock: use lock_wait everywhere to fix infinite wait
  - don't archive tagged dir when recursing an excluded dir
  - New features
  - init: add warning to store both key and passphrase at safe place(s)
  - BORG_HOST_ID env var to work around all-zero MAC address issue
  - borg debug dump-repo-objs --ghost (dump everything from segment files,
    including deleted or superceded objects or commit tags)
  - borg debug search-repo-objs (search in repo objects for hex bytes or strings)
  - Other changes:
  - add Python 3.7 support
  - updated shell completions
  - locking: better logging, add some asserts</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to 1.1.8:
  - Fixes
  - enforce storage quota if set by serve-command
  - invalid locations: give err msg containing parsed location
  - list repo: add placeholders for hostname and username
  - symlinks can't have ACLs, so don't try to set any
  - New features
  - create: added PATH::archive output on INFO log level
  - read a passphrase from a file descriptor specified in the BORG_PASSPHRASE_FD environment variable.
  - docs:
  - option --format is required for some expensive-to-compute values for json
  - borg list by default does not compute expensive values except when they
    are needed. whether they are needed is determined by the format, in
    standard mode as well as in --json mode.
  - fixed wrong archive name pattern in CRUD benchmark help
  - fixed link to cachedir spec in docs
  - tests:
  - stop using fakeroot on travis, avoids sporadic EISDIR errors
  - xattr key names must start with "user." on linux
  - fix code so flake8 3.6 does not complain
  - explicitly convert environment variable to str
  - fix DeprecationWarning: Flags not at the start of the expression
  - support pytest4</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549195200">- Add conditionals to control various build aspects distribution
  agnostic</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549886400">- Update to 1.1.9:
  - Fixes:
  - security fix: configure FUSE with "default_permissions",
    gh#borgbackup/borg#3903 "default_permissions" is now enforced by borg by
    default to let the kernel check uid/gid/mode based permissions.
    "ignore_permissions" can be given to not enforce "default_permissions".
  - make ?hostname? short, even on misconfigured systems,
    gh#borgbackup/borg#4262
  - fix free space calculation on macOS (and others?),
    gh#borgbackup/borg#4289
  - config: quit with error message when no key is provided,
    gh#borgbackup/borg#4223
  - recover_segment: handle too small segment files correctly,
    gh#borgbackup/borg#4272
  - correctly release memoryview, gh#borgbackup/borg#4243
  - avoid diaper pattern in configparser by opening files,
    gh#borgbackup/borg#4263
  - add "# cython: language_level=3" directive to .pyx
    files, #4214
  - info: consider part files for "This archive" stats,
    gh#borgbackup/borg#3522
  - work around Microsoft WSL issue gh#borgbackup/borg#645 (sync_file_range),
    [#1961]
  - New features:
  - add ?rsh command line option to complement BORG_RSH env var,
    gh#borgbackup/borg#1701
  - init: -make-parent-dirs parent1/parent2/repo_dir, gh#borgbackup/borg#4235
  - Other:
  - add archive name to check -repair output, gh#borgbackup/borg#3447
  - check for unsupported msgpack versions
  - shell completions:
  - new shell completions for borg 1.1.9
  - more complete shell completions for borg mount -o
  - added shell completions for borg help
  - option arguments for zsh tab completion
  - docs:
  - add FAQ regarding free disk space check, gh#borgbackup/borg#3905
  - update BORG_PASSCOMMAND example and clarify variable expansion,
    gh#borgbackup/borg#4249
  - FAQ regarding change of compression settings, gh#borgbackup/borg#4222
  - add note about BSD flags to changelog, gh#borgbackup/borg#4246
  - improve logging in example automation script
  - add note about files changing during backup, gh#borgbackup/borg#4081
  - work around the backslash issue, gh#borgbackup/borg#4280
  - update release workflow using twine (docs, scripts),
    gh#borgbackup/borg#4213
  - add warnings on repository copies to avoid future problems,
    gh#borgbackup/borg#4272
  - tests:
  - fix the homebrew 1.9 issues on travis-ci, gh#borgbackup/borg#4254
  - fix duplicate test method name, gh#borgbackup/borg#4311
- Moved the docs to a new -doc subpackage
- Use the %license tag for the license</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549886401">- Update RPM groups.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Modify patch fix-msgpack-requirement.patch to allow msgpack-0.5.4
  as well. See patch for discussion.
- Clean-up dependency blocks</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1552046400">- According to upstream preference and dealing with msgpack update
  in Factory, allow msgpack &lt;= 0.6.1 as well</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Require python3-setuptools since it's needed when running borg
  to find the entry point (boo#1134650)</changelog>
</package>
<package pkgid="146bfa4c16d04bbd5450fc582b3d296f2fa08c306b0f5c14cb4dcb63a61a4bbd" name="borgbackup-bash-completion" arch="noarch">
  <version epoch="0" ver="1.1.9" rel="lp151.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1510315200">- Fix build on Leap 42.2 by BuildRequiring bash-completion</changelog>
  <changelog author="alarrosa@suse.com" date="1512993600">- Update to borgbackup 1.1.3
- Fixes:
  * Security Fix for CVE-2017-15914: Incorrect implementation of access
    controls allows remote users to override repository restrictions in Borg
    servers. A user able to access a remote Borg SSH server is able to
    circumvent access controls post-authentication.
    Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.
  * crc32: deal with unaligned buffer, add tests - this broke borg on older ARM
    CPUs that can not deal with unaligned 32bit memory accesses and raise a bus
    error in such cases. the fix might also improve performance on some CPUs as
    all 32bit memory accesses by the crc32 code are properly aligned now.
  * mount: fixed support of --consider-part-files and do not show .borg_part_N
    files by default in the mounted FUSE filesystem.
  * fixed cache/repo timestamp inconsistency message, highlight that
    information is obtained from security dir (deleting the cache will not
    bypass this error in case the user knows this is a legitimate repo).
  * borgfs: don't show sub-command in borgfs help
  * create: show an error when --dry-run and --stats are used together
- New features:
  * mount: added exclusion group options and paths.
    Reused some code to support similar options/paths as borg extract offers -
    making good use of these to only mount a smaller subset of dirs/files can
    speed up mounting a lot and also will consume way less memory.
    borg mount [options] repo_or_archive mountpoint path [paths...]
    paths: you can just give some "root paths" (like for borg extract) to only
    partially populate the FUSE filesystem.
    new options: --exclude[-from], --pattern[s-from], --strip-components
  * create/extract: support st_birthtime on platforms supporting it
  * add "borg config" command for querying/setting/deleting config values
- Other changes:
  * clean up and simplify packaging (only package committed files,
  do not install .c/.h/.pyx files)
  * docs:
  * point out tuning options for borg create
  * add instructions for using ntfsclone, zerofree
  * move image backup-related FAQ entries to a new page
  * clarify key aliases for borg list --format
  * mention break-lock in checkpointing FAQ entry
  * document sshfs rename workaround
  * add FAQ about removing files from existing archives
  * add FAQ about different prune policies
  * usage and man page for borgfs
  * clarify create --stats duration vs. wall time
  * clarify encrypted key format for borg key export
  * update release checklist about security fixes
  * document good and problematic option placements, fix examples
  * add note on using --nobsdflags to avoid speed penalty related to bsdflags
  * move most of support section to www.borgbackup.org</changelog>
  <changelog author="alarrosa@suse.com" date="1515585600">- Update to borgbackup 1.1.4
  * Fix a potential data corruption issue with 'borg check --repair'
    happening in borg &gt;= 1.1 and &lt; 1.1.4
  * zstd compression is new in borg 1.1.4, older borg can't handle it.
  * new minimum requirements for the compression libraries:
    + added requirement: libzstd &gt;= 1.3.0
    + updated requirement: liblz4 &gt;= 1.7.0 / r129
- Fixes:
  * check: data corruption fix: fix for borg check --repair malfunction. See
  the more detailed notes at
  https://github.com/borgbackup/borg/blob/1.1.4/docs/changes.rst
  * delete: also delete security dir when deleting a repo
  * prune: fix building the "borg prune" man page
  * init: use given --storage-quota for local repo
  * init: properly quote repo path in output
  * fix startup delay with dns-only own fqdn resolving
- New features:
  * added zstd compression.
  * added placeholder {reverse-fqdn} for fqdn in reverse notation
  * added BORG_BASE_DIR environment variable
- Other changes:
  * list help topics when invalid topic is requested
  * fix lz4 deprecation warning, requires lz4 &gt;= 1.7.0 (r129)
  * add parens for C preprocessor macro argument usages (did not cause
    malfunction)
  * exclude broken pytest 3.3.0 release
  * updated fish/bash completions
  * init: more clear exception messages for borg create
  * docs:
    + add auto-generated docs for borg config
    + don't generate HTML docs page for borgfs
    + docs update for lz4 b2 zstd changes
    + add zstd to compression help, readme, docs
    + update requirements and install docs about bundled lz4 and zstd
    + refactored build of the compress and crypto.low_level extensions
    + move some lib/build related code to setup_{zstd,lz4,b2}.py
    + bundle lz4 1.8.0 (requirement: &gt;= 1.7.0 / r129)
    + bundle zstd 1.3.2 (requirement: &gt;= 1.3.0)
    + blake2 was already bundled
    + rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better
    consistency: we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
    + add prefer_system_lib* = True settings to setup.py - by default the
    build will prefer a shared library over the bundled code, if library
    and headers can be found and meet the minimum requirements.</changelog>
  <changelog author="alarrosa@suse.com" date="1517140800">- Don't use liblz4 nor libzstd on Leap 42.x which doesn't support them
  and add missing requirement python-guzzle_sphinx_theme on Tumbleweed.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1519732800">- Add patch borgbackup-1.1.4-binary-content-checks.patch:
  * Fixes build failure due to bad encoding
  * Based on upstream commit 9cf8d57 "do .h file content checks in binary mode"
  * This patch will no longer be needed with borgbackup &gt; 1.1.4</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Add patch to require the new msgpack python module in Tumbleweed
  instead of the deprecated msgpack-python python module:
  * fix-msgpack-requirement.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520164800">- Add patch to fall back to a sphinx default theme for older distributions
  that don't have python3-guzzle_sphinx_theme available
  * borgbackup-1.1.4-sphinx-default-theme.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520251200">- Fix sphinx theme fallback condition</changelog>
  <changelog author="alarrosa@suse.com" date="1522670400">- Update to 1.1.5
- Fixes:
  * create --list: fix that it was never showing M status
  * create: fix timing for first checkpoint (read files cache early,
    init checkpoint timer after that)
  * extract: set rc=1 when extracting damaged files with all-zero replacement
    chunks or with size inconsistencies
  * diff: consider an empty file as different to a non-existing file
  * files cache: improve exception handling
  * ignore exceptions in scandir_inorder() caused by an implicit stat(), also
    remove unneeded sort
  * fixed tab completion problem where a space is always added after path even
    when it shouldn't
  * build: do .h file content checks in binary mode, fixes build issue for
    non-ascii header files on pure-ascii locale platforms
  * borgfs: fix patterns/paths processing
  * config: add some validation
  * repository config: add validation for max_segment_size
  * set cache previous_location on load instead of save
  * remove platform.uname() call which caused library mismatch issues
  * add exception handler around deprecated platform.linux_distribution() call
  * use same datetime object for {now} and {utcnow}
- New features:
  * create: implement --stdin-name
  * add chunker_params to borg archive info (--json)
  * BORG_SHOW_SYSINFO=no to hide system information from exceptions
- Other changes:
  * updated zsh completions for borg 1.1.4
  * files cache related code cleanups
  * be more helpful when parsing invalid --pattern values
  * be more clear in secure-erase warning message
  * improve getpass user experience
  * docs build: unicode problem fixed when using a py27-based sphinx
- docs:
  * security: explicitly note what happens OUTSIDE the attack model
  * security: add note about combining compression and encryption
  * security: describe chunk size / proximity issue
  * quickstart: add note about permissions, borg@localhost
  * quickstart: add introduction to repositories &amp; archives
  * recreate --recompress: add missing metavar, clarify description
  * improve logging docs
  * add an example for --pattern usage
  * clarify path semantics when matching
  * link to offline documentation from README
  * add docs on how to verify a signed release with GPG
  * chunk seed is generated per repository (not: archive)
  * better formatting of CPU usage documentation
  * extend append-only repo rollback docs
- tests:
  * fix erroneously skipped zstd compressor tests
  * skip a test if argparse is broken
- Drop borgbackup-1.1.4-binary-content-checks.patch which is already included
  upstream.
- Rebase fix-msgpack-requirement.patch</changelog>
  <changelog author="mlin@suse.com" date="1525262400">- Leap 15.0 and SLE15 both are moved to renamed python3-msgpack,
  fix-msgpack-requirement.patch have to be used to deal with msgpack
  package rename fallout.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added borgbackup.keyring, which contains the key from the author</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to 1.1.6:
  - Fixes
  - fix borg exception handling on ENOSPC error with xattrs
  - prune: fix/improve overall progress display
  - borg config repo ... does not need cache/manifest/key
  - New features
  - mount: add uid, gid, umask mount options
  - delete:
  - only commit once
  - implement --dry-run
  - check:
  - show progress while rebuilding missing manifest
  - more --repair output
  - borg config --list &lt;repo&gt;</changelog>
  <changelog author="kbabioch@suse.com" date="1533988800">- Update to 1.1.7:
  - Fixes
  - cache lock: use lock_wait everywhere to fix infinite wait
  - don't archive tagged dir when recursing an excluded dir
  - New features
  - init: add warning to store both key and passphrase at safe place(s)
  - BORG_HOST_ID env var to work around all-zero MAC address issue
  - borg debug dump-repo-objs --ghost (dump everything from segment files,
    including deleted or superceded objects or commit tags)
  - borg debug search-repo-objs (search in repo objects for hex bytes or strings)
  - Other changes:
  - add Python 3.7 support
  - updated shell completions
  - locking: better logging, add some asserts</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to 1.1.8:
  - Fixes
  - enforce storage quota if set by serve-command
  - invalid locations: give err msg containing parsed location
  - list repo: add placeholders for hostname and username
  - symlinks can't have ACLs, so don't try to set any
  - New features
  - create: added PATH::archive output on INFO log level
  - read a passphrase from a file descriptor specified in the BORG_PASSPHRASE_FD environment variable.
  - docs:
  - option --format is required for some expensive-to-compute values for json
  - borg list by default does not compute expensive values except when they
    are needed. whether they are needed is determined by the format, in
    standard mode as well as in --json mode.
  - fixed wrong archive name pattern in CRUD benchmark help
  - fixed link to cachedir spec in docs
  - tests:
  - stop using fakeroot on travis, avoids sporadic EISDIR errors
  - xattr key names must start with "user." on linux
  - fix code so flake8 3.6 does not complain
  - explicitly convert environment variable to str
  - fix DeprecationWarning: Flags not at the start of the expression
  - support pytest4</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549195200">- Add conditionals to control various build aspects distribution
  agnostic</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549886400">- Update to 1.1.9:
  - Fixes:
  - security fix: configure FUSE with "default_permissions",
    gh#borgbackup/borg#3903 "default_permissions" is now enforced by borg by
    default to let the kernel check uid/gid/mode based permissions.
    "ignore_permissions" can be given to not enforce "default_permissions".
  - make ?hostname? short, even on misconfigured systems,
    gh#borgbackup/borg#4262
  - fix free space calculation on macOS (and others?),
    gh#borgbackup/borg#4289
  - config: quit with error message when no key is provided,
    gh#borgbackup/borg#4223
  - recover_segment: handle too small segment files correctly,
    gh#borgbackup/borg#4272
  - correctly release memoryview, gh#borgbackup/borg#4243
  - avoid diaper pattern in configparser by opening files,
    gh#borgbackup/borg#4263
  - add "# cython: language_level=3" directive to .pyx
    files, #4214
  - info: consider part files for "This archive" stats,
    gh#borgbackup/borg#3522
  - work around Microsoft WSL issue gh#borgbackup/borg#645 (sync_file_range),
    [#1961]
  - New features:
  - add ?rsh command line option to complement BORG_RSH env var,
    gh#borgbackup/borg#1701
  - init: -make-parent-dirs parent1/parent2/repo_dir, gh#borgbackup/borg#4235
  - Other:
  - add archive name to check -repair output, gh#borgbackup/borg#3447
  - check for unsupported msgpack versions
  - shell completions:
  - new shell completions for borg 1.1.9
  - more complete shell completions for borg mount -o
  - added shell completions for borg help
  - option arguments for zsh tab completion
  - docs:
  - add FAQ regarding free disk space check, gh#borgbackup/borg#3905
  - update BORG_PASSCOMMAND example and clarify variable expansion,
    gh#borgbackup/borg#4249
  - FAQ regarding change of compression settings, gh#borgbackup/borg#4222
  - add note about BSD flags to changelog, gh#borgbackup/borg#4246
  - improve logging in example automation script
  - add note about files changing during backup, gh#borgbackup/borg#4081
  - work around the backslash issue, gh#borgbackup/borg#4280
  - update release workflow using twine (docs, scripts),
    gh#borgbackup/borg#4213
  - add warnings on repository copies to avoid future problems,
    gh#borgbackup/borg#4272
  - tests:
  - fix the homebrew 1.9 issues on travis-ci, gh#borgbackup/borg#4254
  - fix duplicate test method name, gh#borgbackup/borg#4311
- Moved the docs to a new -doc subpackage
- Use the %license tag for the license</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549886401">- Update RPM groups.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Modify patch fix-msgpack-requirement.patch to allow msgpack-0.5.4
  as well. See patch for discussion.
- Clean-up dependency blocks</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1552046400">- According to upstream preference and dealing with msgpack update
  in Factory, allow msgpack &lt;= 0.6.1 as well</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Require python3-setuptools since it's needed when running borg
  to find the entry point (boo#1134650)</changelog>
</package>
<package pkgid="38b230e4461e0fad672b704682eeaccb5847fb563a68e1713f0de08edff3ba88" name="borgbackup-doc" arch="x86_64">
  <version epoch="0" ver="1.1.9" rel="lp151.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1510315200">- Fix build on Leap 42.2 by BuildRequiring bash-completion</changelog>
  <changelog author="alarrosa@suse.com" date="1512993600">- Update to borgbackup 1.1.3
- Fixes:
  * Security Fix for CVE-2017-15914: Incorrect implementation of access
    controls allows remote users to override repository restrictions in Borg
    servers. A user able to access a remote Borg SSH server is able to
    circumvent access controls post-authentication.
    Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.
  * crc32: deal with unaligned buffer, add tests - this broke borg on older ARM
    CPUs that can not deal with unaligned 32bit memory accesses and raise a bus
    error in such cases. the fix might also improve performance on some CPUs as
    all 32bit memory accesses by the crc32 code are properly aligned now.
  * mount: fixed support of --consider-part-files and do not show .borg_part_N
    files by default in the mounted FUSE filesystem.
  * fixed cache/repo timestamp inconsistency message, highlight that
    information is obtained from security dir (deleting the cache will not
    bypass this error in case the user knows this is a legitimate repo).
  * borgfs: don't show sub-command in borgfs help
  * create: show an error when --dry-run and --stats are used together
- New features:
  * mount: added exclusion group options and paths.
    Reused some code to support similar options/paths as borg extract offers -
    making good use of these to only mount a smaller subset of dirs/files can
    speed up mounting a lot and also will consume way less memory.
    borg mount [options] repo_or_archive mountpoint path [paths...]
    paths: you can just give some "root paths" (like for borg extract) to only
    partially populate the FUSE filesystem.
    new options: --exclude[-from], --pattern[s-from], --strip-components
  * create/extract: support st_birthtime on platforms supporting it
  * add "borg config" command for querying/setting/deleting config values
- Other changes:
  * clean up and simplify packaging (only package committed files,
  do not install .c/.h/.pyx files)
  * docs:
  * point out tuning options for borg create
  * add instructions for using ntfsclone, zerofree
  * move image backup-related FAQ entries to a new page
  * clarify key aliases for borg list --format
  * mention break-lock in checkpointing FAQ entry
  * document sshfs rename workaround
  * add FAQ about removing files from existing archives
  * add FAQ about different prune policies
  * usage and man page for borgfs
  * clarify create --stats duration vs. wall time
  * clarify encrypted key format for borg key export
  * update release checklist about security fixes
  * document good and problematic option placements, fix examples
  * add note on using --nobsdflags to avoid speed penalty related to bsdflags
  * move most of support section to www.borgbackup.org</changelog>
  <changelog author="alarrosa@suse.com" date="1515585600">- Update to borgbackup 1.1.4
  * Fix a potential data corruption issue with 'borg check --repair'
    happening in borg &gt;= 1.1 and &lt; 1.1.4
  * zstd compression is new in borg 1.1.4, older borg can't handle it.
  * new minimum requirements for the compression libraries:
    + added requirement: libzstd &gt;= 1.3.0
    + updated requirement: liblz4 &gt;= 1.7.0 / r129
- Fixes:
  * check: data corruption fix: fix for borg check --repair malfunction. See
  the more detailed notes at
  https://github.com/borgbackup/borg/blob/1.1.4/docs/changes.rst
  * delete: also delete security dir when deleting a repo
  * prune: fix building the "borg prune" man page
  * init: use given --storage-quota for local repo
  * init: properly quote repo path in output
  * fix startup delay with dns-only own fqdn resolving
- New features:
  * added zstd compression.
  * added placeholder {reverse-fqdn} for fqdn in reverse notation
  * added BORG_BASE_DIR environment variable
- Other changes:
  * list help topics when invalid topic is requested
  * fix lz4 deprecation warning, requires lz4 &gt;= 1.7.0 (r129)
  * add parens for C preprocessor macro argument usages (did not cause
    malfunction)
  * exclude broken pytest 3.3.0 release
  * updated fish/bash completions
  * init: more clear exception messages for borg create
  * docs:
    + add auto-generated docs for borg config
    + don't generate HTML docs page for borgfs
    + docs update for lz4 b2 zstd changes
    + add zstd to compression help, readme, docs
    + update requirements and install docs about bundled lz4 and zstd
    + refactored build of the compress and crypto.low_level extensions
    + move some lib/build related code to setup_{zstd,lz4,b2}.py
    + bundle lz4 1.8.0 (requirement: &gt;= 1.7.0 / r129)
    + bundle zstd 1.3.2 (requirement: &gt;= 1.3.0)
    + blake2 was already bundled
    + rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better
    consistency: we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
    + add prefer_system_lib* = True settings to setup.py - by default the
    build will prefer a shared library over the bundled code, if library
    and headers can be found and meet the minimum requirements.</changelog>
  <changelog author="alarrosa@suse.com" date="1517140800">- Don't use liblz4 nor libzstd on Leap 42.x which doesn't support them
  and add missing requirement python-guzzle_sphinx_theme on Tumbleweed.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1519732800">- Add patch borgbackup-1.1.4-binary-content-checks.patch:
  * Fixes build failure due to bad encoding
  * Based on upstream commit 9cf8d57 "do .h file content checks in binary mode"
  * This patch will no longer be needed with borgbackup &gt; 1.1.4</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Add patch to require the new msgpack python module in Tumbleweed
  instead of the deprecated msgpack-python python module:
  * fix-msgpack-requirement.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520164800">- Add patch to fall back to a sphinx default theme for older distributions
  that don't have python3-guzzle_sphinx_theme available
  * borgbackup-1.1.4-sphinx-default-theme.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520251200">- Fix sphinx theme fallback condition</changelog>
  <changelog author="alarrosa@suse.com" date="1522670400">- Update to 1.1.5
- Fixes:
  * create --list: fix that it was never showing M status
  * create: fix timing for first checkpoint (read files cache early,
    init checkpoint timer after that)
  * extract: set rc=1 when extracting damaged files with all-zero replacement
    chunks or with size inconsistencies
  * diff: consider an empty file as different to a non-existing file
  * files cache: improve exception handling
  * ignore exceptions in scandir_inorder() caused by an implicit stat(), also
    remove unneeded sort
  * fixed tab completion problem where a space is always added after path even
    when it shouldn't
  * build: do .h file content checks in binary mode, fixes build issue for
    non-ascii header files on pure-ascii locale platforms
  * borgfs: fix patterns/paths processing
  * config: add some validation
  * repository config: add validation for max_segment_size
  * set cache previous_location on load instead of save
  * remove platform.uname() call which caused library mismatch issues
  * add exception handler around deprecated platform.linux_distribution() call
  * use same datetime object for {now} and {utcnow}
- New features:
  * create: implement --stdin-name
  * add chunker_params to borg archive info (--json)
  * BORG_SHOW_SYSINFO=no to hide system information from exceptions
- Other changes:
  * updated zsh completions for borg 1.1.4
  * files cache related code cleanups
  * be more helpful when parsing invalid --pattern values
  * be more clear in secure-erase warning message
  * improve getpass user experience
  * docs build: unicode problem fixed when using a py27-based sphinx
- docs:
  * security: explicitly note what happens OUTSIDE the attack model
  * security: add note about combining compression and encryption
  * security: describe chunk size / proximity issue
  * quickstart: add note about permissions, borg@localhost
  * quickstart: add introduction to repositories &amp; archives
  * recreate --recompress: add missing metavar, clarify description
  * improve logging docs
  * add an example for --pattern usage
  * clarify path semantics when matching
  * link to offline documentation from README
  * add docs on how to verify a signed release with GPG
  * chunk seed is generated per repository (not: archive)
  * better formatting of CPU usage documentation
  * extend append-only repo rollback docs
- tests:
  * fix erroneously skipped zstd compressor tests
  * skip a test if argparse is broken
- Drop borgbackup-1.1.4-binary-content-checks.patch which is already included
  upstream.
- Rebase fix-msgpack-requirement.patch</changelog>
  <changelog author="mlin@suse.com" date="1525262400">- Leap 15.0 and SLE15 both are moved to renamed python3-msgpack,
  fix-msgpack-requirement.patch have to be used to deal with msgpack
  package rename fallout.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added borgbackup.keyring, which contains the key from the author</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to 1.1.6:
  - Fixes
  - fix borg exception handling on ENOSPC error with xattrs
  - prune: fix/improve overall progress display
  - borg config repo ... does not need cache/manifest/key
  - New features
  - mount: add uid, gid, umask mount options
  - delete:
  - only commit once
  - implement --dry-run
  - check:
  - show progress while rebuilding missing manifest
  - more --repair output
  - borg config --list &lt;repo&gt;</changelog>
  <changelog author="kbabioch@suse.com" date="1533988800">- Update to 1.1.7:
  - Fixes
  - cache lock: use lock_wait everywhere to fix infinite wait
  - don't archive tagged dir when recursing an excluded dir
  - New features
  - init: add warning to store both key and passphrase at safe place(s)
  - BORG_HOST_ID env var to work around all-zero MAC address issue
  - borg debug dump-repo-objs --ghost (dump everything from segment files,
    including deleted or superceded objects or commit tags)
  - borg debug search-repo-objs (search in repo objects for hex bytes or strings)
  - Other changes:
  - add Python 3.7 support
  - updated shell completions
  - locking: better logging, add some asserts</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to 1.1.8:
  - Fixes
  - enforce storage quota if set by serve-command
  - invalid locations: give err msg containing parsed location
  - list repo: add placeholders for hostname and username
  - symlinks can't have ACLs, so don't try to set any
  - New features
  - create: added PATH::archive output on INFO log level
  - read a passphrase from a file descriptor specified in the BORG_PASSPHRASE_FD environment variable.
  - docs:
  - option --format is required for some expensive-to-compute values for json
  - borg list by default does not compute expensive values except when they
    are needed. whether they are needed is determined by the format, in
    standard mode as well as in --json mode.
  - fixed wrong archive name pattern in CRUD benchmark help
  - fixed link to cachedir spec in docs
  - tests:
  - stop using fakeroot on travis, avoids sporadic EISDIR errors
  - xattr key names must start with "user." on linux
  - fix code so flake8 3.6 does not complain
  - explicitly convert environment variable to str
  - fix DeprecationWarning: Flags not at the start of the expression
  - support pytest4</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549195200">- Add conditionals to control various build aspects distribution
  agnostic</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549886400">- Update to 1.1.9:
  - Fixes:
  - security fix: configure FUSE with "default_permissions",
    gh#borgbackup/borg#3903 "default_permissions" is now enforced by borg by
    default to let the kernel check uid/gid/mode based permissions.
    "ignore_permissions" can be given to not enforce "default_permissions".
  - make ?hostname? short, even on misconfigured systems,
    gh#borgbackup/borg#4262
  - fix free space calculation on macOS (and others?),
    gh#borgbackup/borg#4289
  - config: quit with error message when no key is provided,
    gh#borgbackup/borg#4223
  - recover_segment: handle too small segment files correctly,
    gh#borgbackup/borg#4272
  - correctly release memoryview, gh#borgbackup/borg#4243
  - avoid diaper pattern in configparser by opening files,
    gh#borgbackup/borg#4263
  - add "# cython: language_level=3" directive to .pyx
    files, #4214
  - info: consider part files for "This archive" stats,
    gh#borgbackup/borg#3522
  - work around Microsoft WSL issue gh#borgbackup/borg#645 (sync_file_range),
    [#1961]
  - New features:
  - add ?rsh command line option to complement BORG_RSH env var,
    gh#borgbackup/borg#1701
  - init: -make-parent-dirs parent1/parent2/repo_dir, gh#borgbackup/borg#4235
  - Other:
  - add archive name to check -repair output, gh#borgbackup/borg#3447
  - check for unsupported msgpack versions
  - shell completions:
  - new shell completions for borg 1.1.9
  - more complete shell completions for borg mount -o
  - added shell completions for borg help
  - option arguments for zsh tab completion
  - docs:
  - add FAQ regarding free disk space check, gh#borgbackup/borg#3905
  - update BORG_PASSCOMMAND example and clarify variable expansion,
    gh#borgbackup/borg#4249
  - FAQ regarding change of compression settings, gh#borgbackup/borg#4222
  - add note about BSD flags to changelog, gh#borgbackup/borg#4246
  - improve logging in example automation script
  - add note about files changing during backup, gh#borgbackup/borg#4081
  - work around the backslash issue, gh#borgbackup/borg#4280
  - update release workflow using twine (docs, scripts),
    gh#borgbackup/borg#4213
  - add warnings on repository copies to avoid future problems,
    gh#borgbackup/borg#4272
  - tests:
  - fix the homebrew 1.9 issues on travis-ci, gh#borgbackup/borg#4254
  - fix duplicate test method name, gh#borgbackup/borg#4311
- Moved the docs to a new -doc subpackage
- Use the %license tag for the license</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549886401">- Update RPM groups.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Modify patch fix-msgpack-requirement.patch to allow msgpack-0.5.4
  as well. See patch for discussion.
- Clean-up dependency blocks</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1552046400">- According to upstream preference and dealing with msgpack update
  in Factory, allow msgpack &lt;= 0.6.1 as well</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Require python3-setuptools since it's needed when running borg
  to find the entry point (boo#1134650)</changelog>
</package>
<package pkgid="9b3fb7aa2f51f789f9a34c91c3da35974bb62c483a7dda9b2f7352c2bb0cc802" name="borgbackup-fish-completion" arch="noarch">
  <version epoch="0" ver="1.1.9" rel="lp151.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1510315200">- Fix build on Leap 42.2 by BuildRequiring bash-completion</changelog>
  <changelog author="alarrosa@suse.com" date="1512993600">- Update to borgbackup 1.1.3
- Fixes:
  * Security Fix for CVE-2017-15914: Incorrect implementation of access
    controls allows remote users to override repository restrictions in Borg
    servers. A user able to access a remote Borg SSH server is able to
    circumvent access controls post-authentication.
    Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.
  * crc32: deal with unaligned buffer, add tests - this broke borg on older ARM
    CPUs that can not deal with unaligned 32bit memory accesses and raise a bus
    error in such cases. the fix might also improve performance on some CPUs as
    all 32bit memory accesses by the crc32 code are properly aligned now.
  * mount: fixed support of --consider-part-files and do not show .borg_part_N
    files by default in the mounted FUSE filesystem.
  * fixed cache/repo timestamp inconsistency message, highlight that
    information is obtained from security dir (deleting the cache will not
    bypass this error in case the user knows this is a legitimate repo).
  * borgfs: don't show sub-command in borgfs help
  * create: show an error when --dry-run and --stats are used together
- New features:
  * mount: added exclusion group options and paths.
    Reused some code to support similar options/paths as borg extract offers -
    making good use of these to only mount a smaller subset of dirs/files can
    speed up mounting a lot and also will consume way less memory.
    borg mount [options] repo_or_archive mountpoint path [paths...]
    paths: you can just give some "root paths" (like for borg extract) to only
    partially populate the FUSE filesystem.
    new options: --exclude[-from], --pattern[s-from], --strip-components
  * create/extract: support st_birthtime on platforms supporting it
  * add "borg config" command for querying/setting/deleting config values
- Other changes:
  * clean up and simplify packaging (only package committed files,
  do not install .c/.h/.pyx files)
  * docs:
  * point out tuning options for borg create
  * add instructions for using ntfsclone, zerofree
  * move image backup-related FAQ entries to a new page
  * clarify key aliases for borg list --format
  * mention break-lock in checkpointing FAQ entry
  * document sshfs rename workaround
  * add FAQ about removing files from existing archives
  * add FAQ about different prune policies
  * usage and man page for borgfs
  * clarify create --stats duration vs. wall time
  * clarify encrypted key format for borg key export
  * update release checklist about security fixes
  * document good and problematic option placements, fix examples
  * add note on using --nobsdflags to avoid speed penalty related to bsdflags
  * move most of support section to www.borgbackup.org</changelog>
  <changelog author="alarrosa@suse.com" date="1515585600">- Update to borgbackup 1.1.4
  * Fix a potential data corruption issue with 'borg check --repair'
    happening in borg &gt;= 1.1 and &lt; 1.1.4
  * zstd compression is new in borg 1.1.4, older borg can't handle it.
  * new minimum requirements for the compression libraries:
    + added requirement: libzstd &gt;= 1.3.0
    + updated requirement: liblz4 &gt;= 1.7.0 / r129
- Fixes:
  * check: data corruption fix: fix for borg check --repair malfunction. See
  the more detailed notes at
  https://github.com/borgbackup/borg/blob/1.1.4/docs/changes.rst
  * delete: also delete security dir when deleting a repo
  * prune: fix building the "borg prune" man page
  * init: use given --storage-quota for local repo
  * init: properly quote repo path in output
  * fix startup delay with dns-only own fqdn resolving
- New features:
  * added zstd compression.
  * added placeholder {reverse-fqdn} for fqdn in reverse notation
  * added BORG_BASE_DIR environment variable
- Other changes:
  * list help topics when invalid topic is requested
  * fix lz4 deprecation warning, requires lz4 &gt;= 1.7.0 (r129)
  * add parens for C preprocessor macro argument usages (did not cause
    malfunction)
  * exclude broken pytest 3.3.0 release
  * updated fish/bash completions
  * init: more clear exception messages for borg create
  * docs:
    + add auto-generated docs for borg config
    + don't generate HTML docs page for borgfs
    + docs update for lz4 b2 zstd changes
    + add zstd to compression help, readme, docs
    + update requirements and install docs about bundled lz4 and zstd
    + refactored build of the compress and crypto.low_level extensions
    + move some lib/build related code to setup_{zstd,lz4,b2}.py
    + bundle lz4 1.8.0 (requirement: &gt;= 1.7.0 / r129)
    + bundle zstd 1.3.2 (requirement: &gt;= 1.3.0)
    + blake2 was already bundled
    + rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better
    consistency: we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
    + add prefer_system_lib* = True settings to setup.py - by default the
    build will prefer a shared library over the bundled code, if library
    and headers can be found and meet the minimum requirements.</changelog>
  <changelog author="alarrosa@suse.com" date="1517140800">- Don't use liblz4 nor libzstd on Leap 42.x which doesn't support them
  and add missing requirement python-guzzle_sphinx_theme on Tumbleweed.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1519732800">- Add patch borgbackup-1.1.4-binary-content-checks.patch:
  * Fixes build failure due to bad encoding
  * Based on upstream commit 9cf8d57 "do .h file content checks in binary mode"
  * This patch will no longer be needed with borgbackup &gt; 1.1.4</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Add patch to require the new msgpack python module in Tumbleweed
  instead of the deprecated msgpack-python python module:
  * fix-msgpack-requirement.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520164800">- Add patch to fall back to a sphinx default theme for older distributions
  that don't have python3-guzzle_sphinx_theme available
  * borgbackup-1.1.4-sphinx-default-theme.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520251200">- Fix sphinx theme fallback condition</changelog>
  <changelog author="alarrosa@suse.com" date="1522670400">- Update to 1.1.5
- Fixes:
  * create --list: fix that it was never showing M status
  * create: fix timing for first checkpoint (read files cache early,
    init checkpoint timer after that)
  * extract: set rc=1 when extracting damaged files with all-zero replacement
    chunks or with size inconsistencies
  * diff: consider an empty file as different to a non-existing file
  * files cache: improve exception handling
  * ignore exceptions in scandir_inorder() caused by an implicit stat(), also
    remove unneeded sort
  * fixed tab completion problem where a space is always added after path even
    when it shouldn't
  * build: do .h file content checks in binary mode, fixes build issue for
    non-ascii header files on pure-ascii locale platforms
  * borgfs: fix patterns/paths processing
  * config: add some validation
  * repository config: add validation for max_segment_size
  * set cache previous_location on load instead of save
  * remove platform.uname() call which caused library mismatch issues
  * add exception handler around deprecated platform.linux_distribution() call
  * use same datetime object for {now} and {utcnow}
- New features:
  * create: implement --stdin-name
  * add chunker_params to borg archive info (--json)
  * BORG_SHOW_SYSINFO=no to hide system information from exceptions
- Other changes:
  * updated zsh completions for borg 1.1.4
  * files cache related code cleanups
  * be more helpful when parsing invalid --pattern values
  * be more clear in secure-erase warning message
  * improve getpass user experience
  * docs build: unicode problem fixed when using a py27-based sphinx
- docs:
  * security: explicitly note what happens OUTSIDE the attack model
  * security: add note about combining compression and encryption
  * security: describe chunk size / proximity issue
  * quickstart: add note about permissions, borg@localhost
  * quickstart: add introduction to repositories &amp; archives
  * recreate --recompress: add missing metavar, clarify description
  * improve logging docs
  * add an example for --pattern usage
  * clarify path semantics when matching
  * link to offline documentation from README
  * add docs on how to verify a signed release with GPG
  * chunk seed is generated per repository (not: archive)
  * better formatting of CPU usage documentation
  * extend append-only repo rollback docs
- tests:
  * fix erroneously skipped zstd compressor tests
  * skip a test if argparse is broken
- Drop borgbackup-1.1.4-binary-content-checks.patch which is already included
  upstream.
- Rebase fix-msgpack-requirement.patch</changelog>
  <changelog author="mlin@suse.com" date="1525262400">- Leap 15.0 and SLE15 both are moved to renamed python3-msgpack,
  fix-msgpack-requirement.patch have to be used to deal with msgpack
  package rename fallout.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added borgbackup.keyring, which contains the key from the author</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to 1.1.6:
  - Fixes
  - fix borg exception handling on ENOSPC error with xattrs
  - prune: fix/improve overall progress display
  - borg config repo ... does not need cache/manifest/key
  - New features
  - mount: add uid, gid, umask mount options
  - delete:
  - only commit once
  - implement --dry-run
  - check:
  - show progress while rebuilding missing manifest
  - more --repair output
  - borg config --list &lt;repo&gt;</changelog>
  <changelog author="kbabioch@suse.com" date="1533988800">- Update to 1.1.7:
  - Fixes
  - cache lock: use lock_wait everywhere to fix infinite wait
  - don't archive tagged dir when recursing an excluded dir
  - New features
  - init: add warning to store both key and passphrase at safe place(s)
  - BORG_HOST_ID env var to work around all-zero MAC address issue
  - borg debug dump-repo-objs --ghost (dump everything from segment files,
    including deleted or superceded objects or commit tags)
  - borg debug search-repo-objs (search in repo objects for hex bytes or strings)
  - Other changes:
  - add Python 3.7 support
  - updated shell completions
  - locking: better logging, add some asserts</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to 1.1.8:
  - Fixes
  - enforce storage quota if set by serve-command
  - invalid locations: give err msg containing parsed location
  - list repo: add placeholders for hostname and username
  - symlinks can't have ACLs, so don't try to set any
  - New features
  - create: added PATH::archive output on INFO log level
  - read a passphrase from a file descriptor specified in the BORG_PASSPHRASE_FD environment variable.
  - docs:
  - option --format is required for some expensive-to-compute values for json
  - borg list by default does not compute expensive values except when they
    are needed. whether they are needed is determined by the format, in
    standard mode as well as in --json mode.
  - fixed wrong archive name pattern in CRUD benchmark help
  - fixed link to cachedir spec in docs
  - tests:
  - stop using fakeroot on travis, avoids sporadic EISDIR errors
  - xattr key names must start with "user." on linux
  - fix code so flake8 3.6 does not complain
  - explicitly convert environment variable to str
  - fix DeprecationWarning: Flags not at the start of the expression
  - support pytest4</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549195200">- Add conditionals to control various build aspects distribution
  agnostic</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549886400">- Update to 1.1.9:
  - Fixes:
  - security fix: configure FUSE with "default_permissions",
    gh#borgbackup/borg#3903 "default_permissions" is now enforced by borg by
    default to let the kernel check uid/gid/mode based permissions.
    "ignore_permissions" can be given to not enforce "default_permissions".
  - make ?hostname? short, even on misconfigured systems,
    gh#borgbackup/borg#4262
  - fix free space calculation on macOS (and others?),
    gh#borgbackup/borg#4289
  - config: quit with error message when no key is provided,
    gh#borgbackup/borg#4223
  - recover_segment: handle too small segment files correctly,
    gh#borgbackup/borg#4272
  - correctly release memoryview, gh#borgbackup/borg#4243
  - avoid diaper pattern in configparser by opening files,
    gh#borgbackup/borg#4263
  - add "# cython: language_level=3" directive to .pyx
    files, #4214
  - info: consider part files for "This archive" stats,
    gh#borgbackup/borg#3522
  - work around Microsoft WSL issue gh#borgbackup/borg#645 (sync_file_range),
    [#1961]
  - New features:
  - add ?rsh command line option to complement BORG_RSH env var,
    gh#borgbackup/borg#1701
  - init: -make-parent-dirs parent1/parent2/repo_dir, gh#borgbackup/borg#4235
  - Other:
  - add archive name to check -repair output, gh#borgbackup/borg#3447
  - check for unsupported msgpack versions
  - shell completions:
  - new shell completions for borg 1.1.9
  - more complete shell completions for borg mount -o
  - added shell completions for borg help
  - option arguments for zsh tab completion
  - docs:
  - add FAQ regarding free disk space check, gh#borgbackup/borg#3905
  - update BORG_PASSCOMMAND example and clarify variable expansion,
    gh#borgbackup/borg#4249
  - FAQ regarding change of compression settings, gh#borgbackup/borg#4222
  - add note about BSD flags to changelog, gh#borgbackup/borg#4246
  - improve logging in example automation script
  - add note about files changing during backup, gh#borgbackup/borg#4081
  - work around the backslash issue, gh#borgbackup/borg#4280
  - update release workflow using twine (docs, scripts),
    gh#borgbackup/borg#4213
  - add warnings on repository copies to avoid future problems,
    gh#borgbackup/borg#4272
  - tests:
  - fix the homebrew 1.9 issues on travis-ci, gh#borgbackup/borg#4254
  - fix duplicate test method name, gh#borgbackup/borg#4311
- Moved the docs to a new -doc subpackage
- Use the %license tag for the license</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549886401">- Update RPM groups.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Modify patch fix-msgpack-requirement.patch to allow msgpack-0.5.4
  as well. See patch for discussion.
- Clean-up dependency blocks</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1552046400">- According to upstream preference and dealing with msgpack update
  in Factory, allow msgpack &lt;= 0.6.1 as well</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Require python3-setuptools since it's needed when running borg
  to find the entry point (boo#1134650)</changelog>
</package>
<package pkgid="d2a6de3dc8a8b2bd463b27f5d38887a5a3c5c09f1ad3fb2289d1a2226392bbf4" name="borgbackup-zsh-completion" arch="noarch">
  <version epoch="0" ver="1.1.9" rel="lp151.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1510315200">- Fix build on Leap 42.2 by BuildRequiring bash-completion</changelog>
  <changelog author="alarrosa@suse.com" date="1512993600">- Update to borgbackup 1.1.3
- Fixes:
  * Security Fix for CVE-2017-15914: Incorrect implementation of access
    controls allows remote users to override repository restrictions in Borg
    servers. A user able to access a remote Borg SSH server is able to
    circumvent access controls post-authentication.
    Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.
  * crc32: deal with unaligned buffer, add tests - this broke borg on older ARM
    CPUs that can not deal with unaligned 32bit memory accesses and raise a bus
    error in such cases. the fix might also improve performance on some CPUs as
    all 32bit memory accesses by the crc32 code are properly aligned now.
  * mount: fixed support of --consider-part-files and do not show .borg_part_N
    files by default in the mounted FUSE filesystem.
  * fixed cache/repo timestamp inconsistency message, highlight that
    information is obtained from security dir (deleting the cache will not
    bypass this error in case the user knows this is a legitimate repo).
  * borgfs: don't show sub-command in borgfs help
  * create: show an error when --dry-run and --stats are used together
- New features:
  * mount: added exclusion group options and paths.
    Reused some code to support similar options/paths as borg extract offers -
    making good use of these to only mount a smaller subset of dirs/files can
    speed up mounting a lot and also will consume way less memory.
    borg mount [options] repo_or_archive mountpoint path [paths...]
    paths: you can just give some "root paths" (like for borg extract) to only
    partially populate the FUSE filesystem.
    new options: --exclude[-from], --pattern[s-from], --strip-components
  * create/extract: support st_birthtime on platforms supporting it
  * add "borg config" command for querying/setting/deleting config values
- Other changes:
  * clean up and simplify packaging (only package committed files,
  do not install .c/.h/.pyx files)
  * docs:
  * point out tuning options for borg create
  * add instructions for using ntfsclone, zerofree
  * move image backup-related FAQ entries to a new page
  * clarify key aliases for borg list --format
  * mention break-lock in checkpointing FAQ entry
  * document sshfs rename workaround
  * add FAQ about removing files from existing archives
  * add FAQ about different prune policies
  * usage and man page for borgfs
  * clarify create --stats duration vs. wall time
  * clarify encrypted key format for borg key export
  * update release checklist about security fixes
  * document good and problematic option placements, fix examples
  * add note on using --nobsdflags to avoid speed penalty related to bsdflags
  * move most of support section to www.borgbackup.org</changelog>
  <changelog author="alarrosa@suse.com" date="1515585600">- Update to borgbackup 1.1.4
  * Fix a potential data corruption issue with 'borg check --repair'
    happening in borg &gt;= 1.1 and &lt; 1.1.4
  * zstd compression is new in borg 1.1.4, older borg can't handle it.
  * new minimum requirements for the compression libraries:
    + added requirement: libzstd &gt;= 1.3.0
    + updated requirement: liblz4 &gt;= 1.7.0 / r129
- Fixes:
  * check: data corruption fix: fix for borg check --repair malfunction. See
  the more detailed notes at
  https://github.com/borgbackup/borg/blob/1.1.4/docs/changes.rst
  * delete: also delete security dir when deleting a repo
  * prune: fix building the "borg prune" man page
  * init: use given --storage-quota for local repo
  * init: properly quote repo path in output
  * fix startup delay with dns-only own fqdn resolving
- New features:
  * added zstd compression.
  * added placeholder {reverse-fqdn} for fqdn in reverse notation
  * added BORG_BASE_DIR environment variable
- Other changes:
  * list help topics when invalid topic is requested
  * fix lz4 deprecation warning, requires lz4 &gt;= 1.7.0 (r129)
  * add parens for C preprocessor macro argument usages (did not cause
    malfunction)
  * exclude broken pytest 3.3.0 release
  * updated fish/bash completions
  * init: more clear exception messages for borg create
  * docs:
    + add auto-generated docs for borg config
    + don't generate HTML docs page for borgfs
    + docs update for lz4 b2 zstd changes
    + add zstd to compression help, readme, docs
    + update requirements and install docs about bundled lz4 and zstd
    + refactored build of the compress and crypto.low_level extensions
    + move some lib/build related code to setup_{zstd,lz4,b2}.py
    + bundle lz4 1.8.0 (requirement: &gt;= 1.7.0 / r129)
    + bundle zstd 1.3.2 (requirement: &gt;= 1.3.0)
    + blake2 was already bundled
    + rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better
    consistency: we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
    + add prefer_system_lib* = True settings to setup.py - by default the
    build will prefer a shared library over the bundled code, if library
    and headers can be found and meet the minimum requirements.</changelog>
  <changelog author="alarrosa@suse.com" date="1517140800">- Don't use liblz4 nor libzstd on Leap 42.x which doesn't support them
  and add missing requirement python-guzzle_sphinx_theme on Tumbleweed.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1519732800">- Add patch borgbackup-1.1.4-binary-content-checks.patch:
  * Fixes build failure due to bad encoding
  * Based on upstream commit 9cf8d57 "do .h file content checks in binary mode"
  * This patch will no longer be needed with borgbackup &gt; 1.1.4</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Add patch to require the new msgpack python module in Tumbleweed
  instead of the deprecated msgpack-python python module:
  * fix-msgpack-requirement.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520164800">- Add patch to fall back to a sphinx default theme for older distributions
  that don't have python3-guzzle_sphinx_theme available
  * borgbackup-1.1.4-sphinx-default-theme.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520251200">- Fix sphinx theme fallback condition</changelog>
  <changelog author="alarrosa@suse.com" date="1522670400">- Update to 1.1.5
- Fixes:
  * create --list: fix that it was never showing M status
  * create: fix timing for first checkpoint (read files cache early,
    init checkpoint timer after that)
  * extract: set rc=1 when extracting damaged files with all-zero replacement
    chunks or with size inconsistencies
  * diff: consider an empty file as different to a non-existing file
  * files cache: improve exception handling
  * ignore exceptions in scandir_inorder() caused by an implicit stat(), also
    remove unneeded sort
  * fixed tab completion problem where a space is always added after path even
    when it shouldn't
  * build: do .h file content checks in binary mode, fixes build issue for
    non-ascii header files on pure-ascii locale platforms
  * borgfs: fix patterns/paths processing
  * config: add some validation
  * repository config: add validation for max_segment_size
  * set cache previous_location on load instead of save
  * remove platform.uname() call which caused library mismatch issues
  * add exception handler around deprecated platform.linux_distribution() call
  * use same datetime object for {now} and {utcnow}
- New features:
  * create: implement --stdin-name
  * add chunker_params to borg archive info (--json)
  * BORG_SHOW_SYSINFO=no to hide system information from exceptions
- Other changes:
  * updated zsh completions for borg 1.1.4
  * files cache related code cleanups
  * be more helpful when parsing invalid --pattern values
  * be more clear in secure-erase warning message
  * improve getpass user experience
  * docs build: unicode problem fixed when using a py27-based sphinx
- docs:
  * security: explicitly note what happens OUTSIDE the attack model
  * security: add note about combining compression and encryption
  * security: describe chunk size / proximity issue
  * quickstart: add note about permissions, borg@localhost
  * quickstart: add introduction to repositories &amp; archives
  * recreate --recompress: add missing metavar, clarify description
  * improve logging docs
  * add an example for --pattern usage
  * clarify path semantics when matching
  * link to offline documentation from README
  * add docs on how to verify a signed release with GPG
  * chunk seed is generated per repository (not: archive)
  * better formatting of CPU usage documentation
  * extend append-only repo rollback docs
- tests:
  * fix erroneously skipped zstd compressor tests
  * skip a test if argparse is broken
- Drop borgbackup-1.1.4-binary-content-checks.patch which is already included
  upstream.
- Rebase fix-msgpack-requirement.patch</changelog>
  <changelog author="mlin@suse.com" date="1525262400">- Leap 15.0 and SLE15 both are moved to renamed python3-msgpack,
  fix-msgpack-requirement.patch have to be used to deal with msgpack
  package rename fallout.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added borgbackup.keyring, which contains the key from the author</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to 1.1.6:
  - Fixes
  - fix borg exception handling on ENOSPC error with xattrs
  - prune: fix/improve overall progress display
  - borg config repo ... does not need cache/manifest/key
  - New features
  - mount: add uid, gid, umask mount options
  - delete:
  - only commit once
  - implement --dry-run
  - check:
  - show progress while rebuilding missing manifest
  - more --repair output
  - borg config --list &lt;repo&gt;</changelog>
  <changelog author="kbabioch@suse.com" date="1533988800">- Update to 1.1.7:
  - Fixes
  - cache lock: use lock_wait everywhere to fix infinite wait
  - don't archive tagged dir when recursing an excluded dir
  - New features
  - init: add warning to store both key and passphrase at safe place(s)
  - BORG_HOST_ID env var to work around all-zero MAC address issue
  - borg debug dump-repo-objs --ghost (dump everything from segment files,
    including deleted or superceded objects or commit tags)
  - borg debug search-repo-objs (search in repo objects for hex bytes or strings)
  - Other changes:
  - add Python 3.7 support
  - updated shell completions
  - locking: better logging, add some asserts</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to 1.1.8:
  - Fixes
  - enforce storage quota if set by serve-command
  - invalid locations: give err msg containing parsed location
  - list repo: add placeholders for hostname and username
  - symlinks can't have ACLs, so don't try to set any
  - New features
  - create: added PATH::archive output on INFO log level
  - read a passphrase from a file descriptor specified in the BORG_PASSPHRASE_FD environment variable.
  - docs:
  - option --format is required for some expensive-to-compute values for json
  - borg list by default does not compute expensive values except when they
    are needed. whether they are needed is determined by the format, in
    standard mode as well as in --json mode.
  - fixed wrong archive name pattern in CRUD benchmark help
  - fixed link to cachedir spec in docs
  - tests:
  - stop using fakeroot on travis, avoids sporadic EISDIR errors
  - xattr key names must start with "user." on linux
  - fix code so flake8 3.6 does not complain
  - explicitly convert environment variable to str
  - fix DeprecationWarning: Flags not at the start of the expression
  - support pytest4</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549195200">- Add conditionals to control various build aspects distribution
  agnostic</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549886400">- Update to 1.1.9:
  - Fixes:
  - security fix: configure FUSE with "default_permissions",
    gh#borgbackup/borg#3903 "default_permissions" is now enforced by borg by
    default to let the kernel check uid/gid/mode based permissions.
    "ignore_permissions" can be given to not enforce "default_permissions".
  - make ?hostname? short, even on misconfigured systems,
    gh#borgbackup/borg#4262
  - fix free space calculation on macOS (and others?),
    gh#borgbackup/borg#4289
  - config: quit with error message when no key is provided,
    gh#borgbackup/borg#4223
  - recover_segment: handle too small segment files correctly,
    gh#borgbackup/borg#4272
  - correctly release memoryview, gh#borgbackup/borg#4243
  - avoid diaper pattern in configparser by opening files,
    gh#borgbackup/borg#4263
  - add "# cython: language_level=3" directive to .pyx
    files, #4214
  - info: consider part files for "This archive" stats,
    gh#borgbackup/borg#3522
  - work around Microsoft WSL issue gh#borgbackup/borg#645 (sync_file_range),
    [#1961]
  - New features:
  - add ?rsh command line option to complement BORG_RSH env var,
    gh#borgbackup/borg#1701
  - init: -make-parent-dirs parent1/parent2/repo_dir, gh#borgbackup/borg#4235
  - Other:
  - add archive name to check -repair output, gh#borgbackup/borg#3447
  - check for unsupported msgpack versions
  - shell completions:
  - new shell completions for borg 1.1.9
  - more complete shell completions for borg mount -o
  - added shell completions for borg help
  - option arguments for zsh tab completion
  - docs:
  - add FAQ regarding free disk space check, gh#borgbackup/borg#3905
  - update BORG_PASSCOMMAND example and clarify variable expansion,
    gh#borgbackup/borg#4249
  - FAQ regarding change of compression settings, gh#borgbackup/borg#4222
  - add note about BSD flags to changelog, gh#borgbackup/borg#4246
  - improve logging in example automation script
  - add note about files changing during backup, gh#borgbackup/borg#4081
  - work around the backslash issue, gh#borgbackup/borg#4280
  - update release workflow using twine (docs, scripts),
    gh#borgbackup/borg#4213
  - add warnings on repository copies to avoid future problems,
    gh#borgbackup/borg#4272
  - tests:
  - fix the homebrew 1.9 issues on travis-ci, gh#borgbackup/borg#4254
  - fix duplicate test method name, gh#borgbackup/borg#4311
- Moved the docs to a new -doc subpackage
- Use the %license tag for the license</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549886401">- Update RPM groups.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Modify patch fix-msgpack-requirement.patch to allow msgpack-0.5.4
  as well. See patch for discussion.
- Clean-up dependency blocks</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1552046400">- According to upstream preference and dealing with msgpack update
  in Factory, allow msgpack &lt;= 0.6.1 as well</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Require python3-setuptools since it's needed when running borg
  to find the entry point (boo#1134650)</changelog>
</package>
<package pkgid="09ce972da697ee19582d8f8f5dce6da18e777fd32a5fbd0b16f89faea524991c" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.60" rel="lp151.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="9dbc472b1128a1caafd36438ffbbb1460d99ae13b745698033e685dc91ce3061" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.60" rel="lp151.3.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="e18a3360f2138cf3e0b0b1bd0589bd149f02a0fedff6dec485ca963bc535aff4" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.60" rel="lp151.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="decbd8d9edd7f125544933b6ce1c964b52055a9dfff5ba7ecff67317e2b07bca" name="brlapi-devel" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="04f287d7f275a9143ad91c2ecb9148e54cd892bb6dc301705f45fc1b15f35cdd" name="brlapi-java" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="621dfd1732c32dfb370e6d740798c468c114197a03951204ca09fe1e46059f06" name="brltty" arch="src">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="e23e1498ba1f042469a57892957e9e1794006e1a6563ca9e04611134c9cd947a" name="brltty" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="478fae282da18b643d4e6eb54c340ad46425cc9fe3d27696017a73f18f88625d" name="brltty-driver-at-spi2" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="067cb00d25756412146f92ceafbcf2e209cf29f16dfe26a6dc457fb22987af69" name="brltty-driver-brlapi" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="67df847b98fbc7412811915895e65c7cd626702bee312a7cf5525eddd1dc9835" name="brltty-driver-espeak" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="f9ae59e556181190baa89a6f1c02fdfb7fcc7b6e319ed5682b8046e406a62d9f" name="brltty-driver-libbraille" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="2c092da2991cd959fc0310a7ecda3e5b6764e8e03c15a0e2a4e0001634857be1" name="brltty-driver-speech-dispatcher" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="2507d4518696f8e65ea126dd37186ae54c8d5bcfaa97f5c02bc31617a5f6b2da" name="brltty-driver-xwindow" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="a44242526649181e49d10c0b202221af9dd50a207ead6e082a705d22b2750dbc" name="brltty-lang" arch="noarch">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="13d96a473b5380124655d03ed35532e6747bcc0591efc840c4285ed91d1c9b0c" name="brltty-utils" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="cb3cccc84a9181620de8f82a706ac98e2711ab6cefbcda3fbae17ee7e5698cb7" name="brotli" arch="i586">
  <version epoch="0" ver="1.0.2" rel="lp151.3.3.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1579176000">- Add missing libbrotlicommon1 and libbrotlidec1 Requires to devel
  subpackage [bsc#1161104]</changelog>
</package>
<package pkgid="921180a601b686f681134fed00951b043b477090b8412b21e52696eeb6ea13c1" name="brotli" arch="src">
  <version epoch="0" ver="1.0.2" rel="lp151.3.3.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1579176000">- Add missing libbrotlicommon1 and libbrotlidec1 Requires to devel
  subpackage [bsc#1161104]</changelog>
</package>
<package pkgid="5becd6c69b73b1acebd89c6f8811f04f4f9c2b14e355a9de36082d295a0e77be" name="brotli" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="lp151.3.3.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1579176000">- Add missing libbrotlicommon1 and libbrotlidec1 Requires to devel
  subpackage [bsc#1161104]</changelog>
</package>
<package pkgid="0a8c137b7933c2b5b328ebe08b7bfb662452e6857232903f8da236fab733fa70" name="brp-check-suse" arch="i586">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp151.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1406462400">- brp-25-symlink: add mising '/etc/alternatives' back to whitelist</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424088000">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
</package>
<package pkgid="4aa5070c2acaf08d806879441592cba0f1b819d20e4838b87117958e36ded16b" name="brp-check-suse" arch="src">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp151.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1331294400">- Add brp-check-xdg-menus.patch: Accept all icons specified in icon
  naming spec.</changelog>
  <changelog author="ro@suse.de" date="1331640000">- integrate brp-check-xdg-menus.patch (and add to git)
- ignore empty elements in rpath</changelog>
  <changelog author="coolo@suse.com" date="1341144000">- do not allow symlinks to point to itself (not existant as result)</changelog>
  <changelog author="coolo@suse.com" date="1352721600">- document the need for full perl</changelog>
  <changelog author="coolo@suse.com" date="1393243200">- switch to _service fetching from github
- fix brp-symlinks to avoid errors on links to alternatives and
  remove check-broken-symlinks.diff</changelog>
  <changelog author="ro@suse.de" date="1404302400">- do not ignore errors just because package has no init script
- allow .local scripts for aaa_base so we can ghost them there
- remove outdated echo line</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406116800">- remove brp-20-check-la, it is broken and la files are mostly
  deleted anyway
- reduction of number of calls used by using more bashism, passing
  more regexp at once, use more double quotes
  brp-15-strip-debug
  brp-45-tcl
  brp-50-check-python
  brp-60-hook</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406116801">- All GTK apps are allowed to assume the presence of the
  Adwaita-icon-theme package; As a result of this, we now accept icons
  in icons/Adwaita on the whitelist (just as hicolor).
  patch by DimStar</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406289600">- massive rewrite of brp-25-symlink to reduce number of calls our
  tests shown speedup from 8,5 mins to 1 min for kernel-default
  (year ago)</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406376000">- brp-25-symlink: fix eating /./ in path</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406462400">- brp-25-symlink: add mising '/etc/alternatives' back to whitelist</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424088000">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
</package>
<package pkgid="955032da311f93f48455e0deabf5327873d98fa62799ae68dd43ea226b9c76dd" name="brp-check-suse" arch="x86_64">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp151.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1406462400">- brp-25-symlink: add mising '/etc/alternatives' back to whitelist</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424088000">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
</package>
<package pkgid="f5f018405186c516908a09f51165cc7c6596006ed77971509338ae93b5f962dc" name="brp-check-suse" arch="i586">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp151.3.6.1"/>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424088000">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
</package>
<package pkgid="db0897f7de9a7b2b5cb58e7814a1874a5d1afcb1d793f71a83f9866d946d1597" name="brp-check-suse" arch="src">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp151.3.6.1"/>
  <changelog author="ro@suse.de" date="1331640000">- integrate brp-check-xdg-menus.patch (and add to git)
- ignore empty elements in rpath</changelog>
  <changelog author="coolo@suse.com" date="1341144000">- do not allow symlinks to point to itself (not existant as result)</changelog>
  <changelog author="coolo@suse.com" date="1352721600">- document the need for full perl</changelog>
  <changelog author="coolo@suse.com" date="1393243200">- switch to _service fetching from github
- fix brp-symlinks to avoid errors on links to alternatives and
  remove check-broken-symlinks.diff</changelog>
  <changelog author="ro@suse.de" date="1404302400">- do not ignore errors just because package has no init script
- allow .local scripts for aaa_base so we can ghost them there
- remove outdated echo line</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406116800">- remove brp-20-check-la, it is broken and la files are mostly
  deleted anyway
- reduction of number of calls used by using more bashism, passing
  more regexp at once, use more double quotes
  brp-15-strip-debug
  brp-45-tcl
  brp-50-check-python
  brp-60-hook</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406116801">- All GTK apps are allowed to assume the presence of the
  Adwaita-icon-theme package; As a result of this, we now accept icons
  in icons/Adwaita on the whitelist (just as hicolor).
  patch by DimStar</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406289600">- massive rewrite of brp-25-symlink to reduce number of calls our
  tests shown speedup from 8,5 mins to 1 min for kernel-default
  (year ago)</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406376000">- brp-25-symlink: fix eating /./ in path</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406462400">- brp-25-symlink: add mising '/etc/alternatives' back to whitelist</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424088000">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
</package>
<package pkgid="8384c1db9264e7d3046f81331883dd0fa98917033b32eb801185512aec38a01b" name="brp-check-suse" arch="x86_64">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp151.3.6.1"/>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424088000">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
</package>
<package pkgid="0020ad7a35b84bc3ecdec27035e19bea12f3ff38bf3b61c950e37ba281f9706d" name="bsdtar" arch="i586">
  <version epoch="0" ver="3.3.2" rel="lp151.5.3.1"/>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1572004800">- Added patch:
  * CVE-2019-18408.patch Fixes use-after-free in a certain ARCHIVE_FAILED situation (bsc#1155079)</changelog>
</package>
<package pkgid="cc4adc78a7d7f79fb5c3d5096852efd5a870fd4bf8fc9eaf2dc0db5a1e4b1eff" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp151.5.3.1"/>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1572004800">- Added patch:
  * CVE-2019-18408.patch Fixes use-after-free in a certain ARCHIVE_FAILED situation (bsc#1155079)</changelog>
</package>
<package pkgid="41c51c62fcab918f93cf15c938950e08d506493752105af915ae1253342266b2" name="bsf" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="lp151.5.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1377691200">- update to 2.4.0
  * can be used as an extension package to Java by placing it into
    "jre/lib/ext" [using the thread's context classloader, ie. the result
    of 'Thread.currentThread().getContextClassLoader()']
  * rely on commons-logging or log4j
  * removed jpython engine, supperseeded by jython
  * and more, see CHANGES.txt
- add gpg verification
- drop bsf-disable-rhino.patch
- add build-file.patch and build.properties.patch
- use add_maven_depmap from javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1427284800">- Remove gpg-offline dep and cleanup with spec-cleaner</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Spec file cleaned</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Remove jython from dependencies, not needed</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Force java source and target levels to 1.6 in order to allow
  building with jdk9
- Force using of java-1_8_0-openjdk-devel, since javadoc errors are
  fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Fix javadoc errors with jdk9: use build-jar-repository instead
  of system-wide CLASSPATH environmental variable
- Clean spec file and run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1513944000">- Assure that we build with java source and target level 1.6</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588852800">- Add missing Java classes required for ant: [bsc#1134000]
  * JavaScriptEngine.class, XSLTEngine.class and XSLTResultNode.class
- Modified patch, Fix build of script providers:
  * build-file.patch</changelog>
</package>
<package pkgid="b00a96049a73c07eca0001cfb00d3514a7fb579398a524d1ef589ffeb7058124" name="bsf" arch="src">
  <version epoch="0" ver="2.4.0" rel="lp151.5.3.1"/>
  <changelog author="jsmeix@suse.de" date="1122465600">- Adjustments in the spec file.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="ro@suse.de" date="1225886400">- buildignore rhino to fix build</changelog>
  <changelog author="mvyskocil@suse.cz" date="1249300800">- Build using rhino
- Used bzip2 archive</changelog>
  <changelog author="mvyskocil@suse.cz" date="1249387200">- Remove rhino dependency at all
- Added pom and maven depmap files from jpackage 5.0
- Removed javadoc %%post/un scripts</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="coolo@novell.com" date="1251720000">- fix last change</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.cz" date="1330430400">- ignore mysql-connector-java from build to break a build cycle</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- update to 2.4.0
  * can be used as an extension package to Java by placing it into
    "jre/lib/ext" [using the thread's context classloader, ie. the result
    of 'Thread.currentThread().getContextClassLoader()']
  * rely on commons-logging or log4j
  * removed jpython engine, supperseeded by jython
  * and more, see CHANGES.txt
- add gpg verification
- drop bsf-disable-rhino.patch
- add build-file.patch and build.properties.patch
- use add_maven_depmap from javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1427284800">- Remove gpg-offline dep and cleanup with spec-cleaner</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Spec file cleaned</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Remove jython from dependencies, not needed</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Force java source and target levels to 1.6 in order to allow
  building with jdk9
- Force using of java-1_8_0-openjdk-devel, since javadoc errors are
  fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Fix javadoc errors with jdk9: use build-jar-repository instead
  of system-wide CLASSPATH environmental variable
- Clean spec file and run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1513944000">- Assure that we build with java source and target level 1.6</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588852800">- Add missing Java classes required for ant: [bsc#1134000]
  * JavaScriptEngine.class, XSLTEngine.class and XSLTResultNode.class
- Modified patch, Fix build of script providers:
  * build-file.patch</changelog>
</package>
<package pkgid="3819630b6f8ac24dd6777f3846ad07fe30e601dea3c577fce7a04c807a8cda99" name="bsf-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="lp151.5.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1377691200">- update to 2.4.0
  * can be used as an extension package to Java by placing it into
    "jre/lib/ext" [using the thread's context classloader, ie. the result
    of 'Thread.currentThread().getContextClassLoader()']
  * rely on commons-logging or log4j
  * removed jpython engine, supperseeded by jython
  * and more, see CHANGES.txt
- add gpg verification
- drop bsf-disable-rhino.patch
- add build-file.patch and build.properties.patch
- use add_maven_depmap from javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1427284800">- Remove gpg-offline dep and cleanup with spec-cleaner</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Spec file cleaned</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Remove jython from dependencies, not needed</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Force java source and target levels to 1.6 in order to allow
  building with jdk9
- Force using of java-1_8_0-openjdk-devel, since javadoc errors are
  fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Fix javadoc errors with jdk9: use build-jar-repository instead
  of system-wide CLASSPATH environmental variable
- Clean spec file and run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1513944000">- Assure that we build with java source and target level 1.6</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1588852800">- Add missing Java classes required for ant: [bsc#1134000]
  * JavaScriptEngine.class, XSLTEngine.class and XSLTResultNode.class
- Modified patch, Fix build of script providers:
  * build-file.patch</changelog>
</package>
<package pkgid="ad7727bceb25b7612939712c6b81cd191f2bfb0ada1e2bd59a7b387e6eb62498" name="btcflash" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1417262400">- Update to new upstream release 3.01~a25
  * Precursory work for localization
- Run spec-beautifier for spec files
- Reenable missing capability support [bnc#899718]</changelog>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
</package>
<package pkgid="22cb6b4663356cc94e65fca5c2897faff8471e932120655508a416f30b345c3f" name="btcflash" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1417262400">- Update to new upstream release 3.01~a25
  * Precursory work for localization
- Run spec-beautifier for spec files
- Reenable missing capability support [bnc#899718]</changelog>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
</package>
<package pkgid="5d9e1e735df61447e438b1cb2e8101ecef72e5db16f6efc674510cc8b91bb227" name="btcflash" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.6.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="ac7bf8aefb51e26cb0d974498ea7668b9847e6e48ce525fffaf0ee36672929c6" name="btcflash" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.6.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="4beb0a53baff30283fbc5a660f5ca6d8f72257f2470a5d4883c93cb79495fc85" name="btrfsprogs" arch="i586">
  <version epoch="0" ver="4.19.1" rel="lp151.4.3.1"/>
  <changelog author="dsterba@suse.cz" date="1509451200">- update to version 4.13.3:
  * check: fix --force, wrong check for a mounted block device
  * build: fix --with-convert parsing
  * subvol list: don't list TOPLEVEL
  * other: update tests</changelog>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="dsterba@suse.cz" date="1518782400">- use documentation shipped by upstream tar, reduce dependencies</changelog>
  <changelog author="dsterba@suse.cz" date="1522929600">- update to version 4.16
  * libbtrfsutil - new LGPL library to wrap userspace functionality
  * several 'btrfs' commands converted to use it:
  * properties
  * filesystem sync
  * subvolume set-default/get-default/delete/show/sync
  * python bindings, tests
  * build
  * use configured pkg-config path
  * CI: add python, musl/clang, built dependencies caching
  * convert: build fix for e2fsprogs 1.44+
  * don't install library links with wrong permissions
  * fixes
  * prevent incorrect use of subvol_strip_mountpoint
  * dump-super: don't verify csum for unknown type
  * convert: fix inline extent creation condition
  * check:
  * lowmem: fix false alert for 'data extent backref lost for snapshot'
  * lowmem: fix false alert for orphan inode
  * lowmem: fix false alert for shared prealloc extents
  * mkfs:
  * add UUID and otime to root of FS_TREE - with the uuid, snapshots will
    be now linked to the toplevel subvol by the parent UUID
  * don't follow symlinks when calculating size
  * pre-create the UUID tree
  * fix --rootdir with selinux enabled
  * dump-tree: add option to print only children nodes of a given block
  * image: handle missing device for RAID1
  * other
  * new tests
  * test script cleanups (quoting, helpers)
  * tool to edit superblocks
  * updated docs
- Add patch: 0001-btrfs-progs-build-fix-static-build.patch
- Add new library packages: libbtrfsutil</changelog>
  <changelog author="dsterba@suse.cz" date="1524484800">- update to version 4.16.1
  * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super,
    btrfs-calc-size
  * sb-mod: new debugging tool to edit superblock items
  * mkfs: detect if thin-provisioned device does not have enough space
  * check: don't try to verify checksums on metadata dump images
  * build: fail documentation build if xmlto is not found
  * build: fix build of btrfs.static
- Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream)
- Update initrd script</changelog>
  <changelog author="jeffm@suse.com" date="1525089600">- Fix building on SLE11:
  * btrfs-progs: convert: fix support for e2fsprogs &lt; 1.42
  * btrfs-progs: build: detect whether -std=gnu90 is supported
  * btrfs-progs: build: autoconf 2.63 compatibility
  * Fixed mismerged addition of libbtrfsutil1 package description
- Added patches:
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1529582400">- update to version 4.17
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
- Removed patches (upstreamed):
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1533470400">- update to version 4.17.1
  * check:
  * add ability to fix wrong ram_bytes for compressed inline files
  * beautify progress output
  * btrfstune: allow to continue uuid change after unclean interruption
  * several fuzz fixes:
  * detect overalpping chunks
  * chunk loading error handling
  * don't crash with unexpected root refs to extents
  * relax option parsing again to allow mixing options and non-options
    arguments
  * fix qgroup rescan status reporting
  * build:
  * drop obsolete dir-test
  * new configure option to disable building of tools
  * add compatibility options --disable-static and --disable-shared
  * other:
  * cleanups and preparatory work
  * new test images
- spec cleanup</changelog>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
</package>
<package pkgid="caa71a8f6e26c1d2bd0c4f4d8363361be12c78af4a268b1fc51c767baea1cb3f" name="btrfsprogs" arch="src">
  <version epoch="0" ver="4.19.1" rel="lp151.4.3.1"/>
  <changelog author="dsterba@suse.cz" date="1509451200">- update to version 4.13.3:
  * check: fix --force, wrong check for a mounted block device
  * build: fix --with-convert parsing
  * subvol list: don't list TOPLEVEL
  * other: update tests</changelog>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="dsterba@suse.cz" date="1518782400">- use documentation shipped by upstream tar, reduce dependencies</changelog>
  <changelog author="dsterba@suse.cz" date="1522929600">- update to version 4.16
  * libbtrfsutil - new LGPL library to wrap userspace functionality
  * several 'btrfs' commands converted to use it:
  * properties
  * filesystem sync
  * subvolume set-default/get-default/delete/show/sync
  * python bindings, tests
  * build
  * use configured pkg-config path
  * CI: add python, musl/clang, built dependencies caching
  * convert: build fix for e2fsprogs 1.44+
  * don't install library links with wrong permissions
  * fixes
  * prevent incorrect use of subvol_strip_mountpoint
  * dump-super: don't verify csum for unknown type
  * convert: fix inline extent creation condition
  * check:
  * lowmem: fix false alert for 'data extent backref lost for snapshot'
  * lowmem: fix false alert for orphan inode
  * lowmem: fix false alert for shared prealloc extents
  * mkfs:
  * add UUID and otime to root of FS_TREE - with the uuid, snapshots will
    be now linked to the toplevel subvol by the parent UUID
  * don't follow symlinks when calculating size
  * pre-create the UUID tree
  * fix --rootdir with selinux enabled
  * dump-tree: add option to print only children nodes of a given block
  * image: handle missing device for RAID1
  * other
  * new tests
  * test script cleanups (quoting, helpers)
  * tool to edit superblocks
  * updated docs
- Add patch: 0001-btrfs-progs-build-fix-static-build.patch
- Add new library packages: libbtrfsutil</changelog>
  <changelog author="dsterba@suse.cz" date="1524484800">- update to version 4.16.1
  * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super,
    btrfs-calc-size
  * sb-mod: new debugging tool to edit superblock items
  * mkfs: detect if thin-provisioned device does not have enough space
  * check: don't try to verify checksums on metadata dump images
  * build: fail documentation build if xmlto is not found
  * build: fix build of btrfs.static
- Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream)
- Update initrd script</changelog>
  <changelog author="jeffm@suse.com" date="1525089600">- Fix building on SLE11:
  * btrfs-progs: convert: fix support for e2fsprogs &lt; 1.42
  * btrfs-progs: build: detect whether -std=gnu90 is supported
  * btrfs-progs: build: autoconf 2.63 compatibility
  * Fixed mismerged addition of libbtrfsutil1 package description
- Added patches:
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1529582400">- update to version 4.17
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
- Removed patches (upstreamed):
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1533470400">- update to version 4.17.1
  * check:
  * add ability to fix wrong ram_bytes for compressed inline files
  * beautify progress output
  * btrfstune: allow to continue uuid change after unclean interruption
  * several fuzz fixes:
  * detect overalpping chunks
  * chunk loading error handling
  * don't crash with unexpected root refs to extents
  * relax option parsing again to allow mixing options and non-options
    arguments
  * fix qgroup rescan status reporting
  * build:
  * drop obsolete dir-test
  * new configure option to disable building of tools
  * add compatibility options --disable-static and --disable-shared
  * other:
  * cleanups and preparatory work
  * new test images
- spec cleanup</changelog>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
</package>
<package pkgid="3b903db40918899833603102f71b876669d8376100be6ea35112f9883ad96eca" name="btrfsprogs" arch="x86_64">
  <version epoch="0" ver="4.19.1" rel="lp151.4.3.1"/>
  <changelog author="dsterba@suse.cz" date="1509451200">- update to version 4.13.3:
  * check: fix --force, wrong check for a mounted block device
  * build: fix --with-convert parsing
  * subvol list: don't list TOPLEVEL
  * other: update tests</changelog>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="dsterba@suse.cz" date="1518782400">- use documentation shipped by upstream tar, reduce dependencies</changelog>
  <changelog author="dsterba@suse.cz" date="1522929600">- update to version 4.16
  * libbtrfsutil - new LGPL library to wrap userspace functionality
  * several 'btrfs' commands converted to use it:
  * properties
  * filesystem sync
  * subvolume set-default/get-default/delete/show/sync
  * python bindings, tests
  * build
  * use configured pkg-config path
  * CI: add python, musl/clang, built dependencies caching
  * convert: build fix for e2fsprogs 1.44+
  * don't install library links with wrong permissions
  * fixes
  * prevent incorrect use of subvol_strip_mountpoint
  * dump-super: don't verify csum for unknown type
  * convert: fix inline extent creation condition
  * check:
  * lowmem: fix false alert for 'data extent backref lost for snapshot'
  * lowmem: fix false alert for orphan inode
  * lowmem: fix false alert for shared prealloc extents
  * mkfs:
  * add UUID and otime to root of FS_TREE - with the uuid, snapshots will
    be now linked to the toplevel subvol by the parent UUID
  * don't follow symlinks when calculating size
  * pre-create the UUID tree
  * fix --rootdir with selinux enabled
  * dump-tree: add option to print only children nodes of a given block
  * image: handle missing device for RAID1
  * other
  * new tests
  * test script cleanups (quoting, helpers)
  * tool to edit superblocks
  * updated docs
- Add patch: 0001-btrfs-progs-build-fix-static-build.patch
- Add new library packages: libbtrfsutil</changelog>
  <changelog author="dsterba@suse.cz" date="1524484800">- update to version 4.16.1
  * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super,
    btrfs-calc-size
  * sb-mod: new debugging tool to edit superblock items
  * mkfs: detect if thin-provisioned device does not have enough space
  * check: don't try to verify checksums on metadata dump images
  * build: fail documentation build if xmlto is not found
  * build: fix build of btrfs.static
- Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream)
- Update initrd script</changelog>
  <changelog author="jeffm@suse.com" date="1525089600">- Fix building on SLE11:
  * btrfs-progs: convert: fix support for e2fsprogs &lt; 1.42
  * btrfs-progs: build: detect whether -std=gnu90 is supported
  * btrfs-progs: build: autoconf 2.63 compatibility
  * Fixed mismerged addition of libbtrfsutil1 package description
- Added patches:
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1529582400">- update to version 4.17
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
- Removed patches (upstreamed):
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1533470400">- update to version 4.17.1
  * check:
  * add ability to fix wrong ram_bytes for compressed inline files
  * beautify progress output
  * btrfstune: allow to continue uuid change after unclean interruption
  * several fuzz fixes:
  * detect overalpping chunks
  * chunk loading error handling
  * don't crash with unexpected root refs to extents
  * relax option parsing again to allow mixing options and non-options
    arguments
  * fix qgroup rescan status reporting
  * build:
  * drop obsolete dir-test
  * new configure option to disable building of tools
  * add compatibility options --disable-static and --disable-shared
  * other:
  * cleanups and preparatory work
  * new test images
- spec cleanup</changelog>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
</package>
<package pkgid="2af22b5a7af1ebc4c87024658c30864f6fdc1d018f305a5b7f7500eb9552bbfd" name="btrfsprogs-udev-rules" arch="noarch">
  <version epoch="0" ver="4.19.1" rel="lp151.4.3.1"/>
  <changelog author="dsterba@suse.cz" date="1509451200">- update to version 4.13.3:
  * check: fix --force, wrong check for a mounted block device
  * build: fix --with-convert parsing
  * subvol list: don't list TOPLEVEL
  * other: update tests</changelog>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="dsterba@suse.cz" date="1518782400">- use documentation shipped by upstream tar, reduce dependencies</changelog>
  <changelog author="dsterba@suse.cz" date="1522929600">- update to version 4.16
  * libbtrfsutil - new LGPL library to wrap userspace functionality
  * several 'btrfs' commands converted to use it:
  * properties
  * filesystem sync
  * subvolume set-default/get-default/delete/show/sync
  * python bindings, tests
  * build
  * use configured pkg-config path
  * CI: add python, musl/clang, built dependencies caching
  * convert: build fix for e2fsprogs 1.44+
  * don't install library links with wrong permissions
  * fixes
  * prevent incorrect use of subvol_strip_mountpoint
  * dump-super: don't verify csum for unknown type
  * convert: fix inline extent creation condition
  * check:
  * lowmem: fix false alert for 'data extent backref lost for snapshot'
  * lowmem: fix false alert for orphan inode
  * lowmem: fix false alert for shared prealloc extents
  * mkfs:
  * add UUID and otime to root of FS_TREE - with the uuid, snapshots will
    be now linked to the toplevel subvol by the parent UUID
  * don't follow symlinks when calculating size
  * pre-create the UUID tree
  * fix --rootdir with selinux enabled
  * dump-tree: add option to print only children nodes of a given block
  * image: handle missing device for RAID1
  * other
  * new tests
  * test script cleanups (quoting, helpers)
  * tool to edit superblocks
  * updated docs
- Add patch: 0001-btrfs-progs-build-fix-static-build.patch
- Add new library packages: libbtrfsutil</changelog>
  <changelog author="dsterba@suse.cz" date="1524484800">- update to version 4.16.1
  * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super,
    btrfs-calc-size
  * sb-mod: new debugging tool to edit superblock items
  * mkfs: detect if thin-provisioned device does not have enough space
  * check: don't try to verify checksums on metadata dump images
  * build: fail documentation build if xmlto is not found
  * build: fix build of btrfs.static
- Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream)
- Update initrd script</changelog>
  <changelog author="jeffm@suse.com" date="1525089600">- Fix building on SLE11:
  * btrfs-progs: convert: fix support for e2fsprogs &lt; 1.42
  * btrfs-progs: build: detect whether -std=gnu90 is supported
  * btrfs-progs: build: autoconf 2.63 compatibility
  * Fixed mismerged addition of libbtrfsutil1 package description
- Added patches:
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1529582400">- update to version 4.17
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
- Removed patches (upstreamed):
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1533470400">- update to version 4.17.1
  * check:
  * add ability to fix wrong ram_bytes for compressed inline files
  * beautify progress output
  * btrfstune: allow to continue uuid change after unclean interruption
  * several fuzz fixes:
  * detect overalpping chunks
  * chunk loading error handling
  * don't crash with unexpected root refs to extents
  * relax option parsing again to allow mixing options and non-options
    arguments
  * fix qgroup rescan status reporting
  * build:
  * drop obsolete dir-test
  * new configure option to disable building of tools
  * add compatibility options --disable-static and --disable-shared
  * other:
  * cleanups and preparatory work
  * new test images
- spec cleanup</changelog>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
</package>
<package pkgid="0e674f927446ef3bcc585ba70baa6c74cd40db9f56bdbac066f70f48a3e30e16" name="bubblewrap" arch="i586">
  <version epoch="0" ver="0.3.3" rel="lp151.2.3.1"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.1" date="1467979200">- Initial package</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 0.1.1-2" date="1468324800">- Trivial fixes in packaging</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.2-1" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.3-2" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt; - 0.3.1" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
</package>
<package pkgid="5bd43bffdb8f3d9621d1afff3f2d207695b1b67ffbad4b00f38950ccf9af3a80" name="bubblewrap" arch="src">
  <version epoch="0" ver="0.3.3" rel="lp151.2.3.1"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.1" date="1467979200">- Initial package</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 0.1.1-2" date="1468324800">- Trivial fixes in packaging</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.2-1" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.3-2" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt; - 0.3.1" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
</package>
<package pkgid="015c277c83af83593d0fd13d28ac499c3791728d7e50aace0376e6c0a13e1d0c" name="bubblewrap" arch="x86_64">
  <version epoch="0" ver="0.3.3" rel="lp151.2.3.1"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.1" date="1467979200">- Initial package</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 0.1.1-2" date="1468324800">- Trivial fixes in packaging</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.2-1" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.3-2" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt; - 0.3.1" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
</package>
<package pkgid="bab0fa8ad2acf616df5cd17fcfebdce9c7d906892eabe1defc1de7a77bee13c4" name="build" arch="noarch">
  <version epoch="0" ver="20200110" rel="lp151.2.3.1"/>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1553169600">- Filter out 'MACRO' from Requires(pre)
- Support createrepo_c's CREATEREPO_CHECKSUMS checksum cache
- Skip unsupported GPG check on ArchLinux
- Support #!BuildRequires dependencies
- Collect more statistics
- Install policy-rc.d to prevent services from starting on Debian</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1559649600">- configs/15.5.conf: remove brp-extract-appdata from support package
- add "-vv" parameter in case of debbuild</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561550400">- configs/15.5.conf: add libzstd1 to preinstall list: RPM is being
  extended to support zstd compression, which results in an
  additionaly library being linked in.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579521600">- fix source archive, last submit did not contain changes
  =&gt; switching to git tags now to avoid this in future</changelog>
</package>
<package pkgid="e5e71ab9f115b9f1e5e7e864193d8c5b96279e89f2c729e35f2015f58d758425" name="build" arch="src">
  <version epoch="0" ver="20200110" rel="lp151.2.3.1"/>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1553169600">- Filter out 'MACRO' from Requires(pre)
- Support createrepo_c's CREATEREPO_CHECKSUMS checksum cache
- Skip unsupported GPG check on ArchLinux
- Support #!BuildRequires dependencies
- Collect more statistics
- Install policy-rc.d to prevent services from starting on Debian</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1559649600">- configs/15.5.conf: remove brp-extract-appdata from support package
- add "-vv" parameter in case of debbuild</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561550400">- configs/15.5.conf: add libzstd1 to preinstall list: RPM is being
  extended to support zstd compression, which results in an
  additionaly library being linked in.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579521600">- fix source archive, last submit did not contain changes
  =&gt; switching to git tags now to avoid this in future</changelog>
</package>
<package pkgid="afe721aa56a5ee550cddf1d87fc2f8c7bfbecaab1daf23fbedd4f4c5b8bc1394" name="build-initvm-i586" arch="noarch">
  <version epoch="0" ver="20200110" rel="lp151.2.3.1"/>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1553169600">- Filter out 'MACRO' from Requires(pre)
- Support createrepo_c's CREATEREPO_CHECKSUMS checksum cache
- Skip unsupported GPG check on ArchLinux
- Support #!BuildRequires dependencies
- Collect more statistics
- Install policy-rc.d to prevent services from starting on Debian</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1559649600">- configs/15.5.conf: remove brp-extract-appdata from support package
- add "-vv" parameter in case of debbuild</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561550400">- configs/15.5.conf: add libzstd1 to preinstall list: RPM is being
  extended to support zstd compression, which results in an
  additionaly library being linked in.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579521600">- fix source archive, last submit did not contain changes
  =&gt; switching to git tags now to avoid this in future</changelog>
</package>
<package pkgid="287a516a34184f6d7d9c729912d4a89264b71104f75703911a10810cae607ecf" name="build-initvm-x86_64" arch="noarch">
  <version epoch="0" ver="20200110" rel="lp151.2.3.1"/>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1553169600">- Filter out 'MACRO' from Requires(pre)
- Support createrepo_c's CREATEREPO_CHECKSUMS checksum cache
- Skip unsupported GPG check on ArchLinux
- Support #!BuildRequires dependencies
- Collect more statistics
- Install policy-rc.d to prevent services from starting on Debian</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1559649600">- configs/15.5.conf: remove brp-extract-appdata from support package
- add "-vv" parameter in case of debbuild</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561550400">- configs/15.5.conf: add libzstd1 to preinstall list: RPM is being
  extended to support zstd compression, which results in an
  additionaly library being linked in.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579521600">- fix source archive, last submit did not contain changes
  =&gt; switching to git tags now to avoid this in future</changelog>
</package>
<package pkgid="ea84c8f664a9d28a809a0bc110d4dce5cef6449c15c1d1b9d8a7335abb55d5e3" name="build-mkbaselibs" arch="noarch">
  <version epoch="0" ver="20200110" rel="lp151.2.3.1"/>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1553169600">- Filter out 'MACRO' from Requires(pre)
- Support createrepo_c's CREATEREPO_CHECKSUMS checksum cache
- Skip unsupported GPG check on ArchLinux
- Support #!BuildRequires dependencies
- Collect more statistics
- Install policy-rc.d to prevent services from starting on Debian</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1559649600">- configs/15.5.conf: remove brp-extract-appdata from support package
- add "-vv" parameter in case of debbuild</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561550400">- configs/15.5.conf: add libzstd1 to preinstall list: RPM is being
  extended to support zstd compression, which results in an
  additionaly library being linked in.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579521600">- fix source archive, last submit did not contain changes
  =&gt; switching to git tags now to avoid this in future</changelog>
</package>
<package pkgid="70e1aff1105a51a8365f8a3c345248aa665f35250813b123f840b33d4a49ba4a" name="build-mkdrpms" arch="noarch">
  <version epoch="0" ver="20200110" rel="lp151.2.3.1"/>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1553169600">- Filter out 'MACRO' from Requires(pre)
- Support createrepo_c's CREATEREPO_CHECKSUMS checksum cache
- Skip unsupported GPG check on ArchLinux
- Support #!BuildRequires dependencies
- Collect more statistics
- Install policy-rc.d to prevent services from starting on Debian</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1559649600">- configs/15.5.conf: remove brp-extract-appdata from support package
- add "-vv" parameter in case of debbuild</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561550400">- configs/15.5.conf: add libzstd1 to preinstall list: RPM is being
  extended to support zstd compression, which results in an
  additionaly library being linked in.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579521600">- fix source archive, last submit did not contain changes
  =&gt; switching to git tags now to avoid this in future</changelog>
</package>
<package pkgid="b44ad85a801fa4eca8b3735b5d20a595c4adb121c6a3daf74e91e844ddce1621" name="buildah" arch="src">
  <version epoch="0" ver="1.17.0" rel="lp151.2.6.1"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565956800">- Update to v1.10.1
  * Add automatic apparmor tag discovery
  * Add overlayfs to fuse-overlayfs tip
  * Bug fix for volume minus syntax
  * Bump container/storage v1.13.1 and containers/image v3.0.1
  * Bump containers/image to v3.0.2 to fix keyring issue
  * Fix bug whereby --get-login has no effect
  * Bump github.com/containernetworking/cni to v0.7.1
- Add appamor-pattern requirement</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1567425600">- Add patch for CVE-2019-10214. bsc#1144065
  + CVE-2019-10214.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1567684800">- Update to v1.11.0
  * Add --digestfile and Re-add push statement as debug
  * Add --log-level command line option and deprecate --debug
  * Add security-related volume options to validator
  * Allow buildah bud to be called without arguments
  * Allow to override build date with SOURCE_DATE_EPOCH
  * Correctly detect ExitError values from Run()
  * Disable empty logrus timestamps to reduce logger noise
  * Fix directory pull image names
  * Fix handling of /dev/null masked devices
  * Fix possible runtime panic on bud
  * Update bud/from help to contain indicator for --dns=none
  * Update documentation about bud
  * Update shebangs to take env into consideration
  * Use content digests in ADD/COPY history entries
  * add support for cgroupsV2
  * add: add a DryRun flag to AddAndCopyOptions
  * add: handle hard links when copying with .dockerignore
  * add: teach copyFileWithTar() about symlinks and directories
  * imagebuilder: fix detection of referenced stage roots
  * pull/commit/push: pay attention to $BUILD_REGISTRY_SOURCES
  * run_linux: fix mounting /sys in a userns
- Remove hardly set build tags in favor of the Makefile</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568376000">- Update to v1.11.1
  * Add --devices flag to bud and from
  * Add support for /run/.containerenv
  * Allow mounts.conf entries for equal source and destination paths
  * Fix label and annotation for 1-line Dockerfiles
  * Preserve file and directory mount permissions
  * Replace --debug=false with --log-level=error
  * Set TMPDIR to /var/tmp by default
  * Truncate output of too long image names
  * Ignore EmptyLayer if Squash is set</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1569240000">- Update to v1.11.2
  * Add some cleanup code
  * Move devices code to unit specific directory.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1570449600">- Update to v1.11.3
  * Add cgroups2
  * Add support for retrieving context from stdin "-"
  * Added tutorial on how to include Buildah as library
  * Fix --build-args handling
  * Print build 'STEP' line to stdout, not stderr
  * Use Containerfile by default</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1572350400">- Update to v1.11.4
  * buildah: add a "manifest" command
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573560000">- Update to v1.11.5
  * buildah: add "manifest" command
  * pkg/supplemented: add a package for grouping images together
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * version: also note the version of containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1575547200">- Update to v1.11.6
  * Handle missing equal sign in --from and --chown flags
    for COPY/ADD
  * bud COPY does not download URL
  * Fix .dockerignore exclude regression
  * commit(docker): always set ContainerID and ContainerConfig
  * Touch up commit man page image parameter
  * Add builder identity annotations.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Update to v1.12.0
  * Allow ADD to use http src
  * imgtype: reset storage opts if driver overridden
  * Start using containers/common
  * overlay.bats typo: fuse-overlays should be fuse-overlayfs
  * chroot: Unmount with MNT_DETACH instead of UnmountMountpoints()
  * bind: don't complain about missing mountpoints
  * imgtype: check earlier for expected manifest type
  * Add history names support</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579089600">- Update to v1.13.1
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581595200">- Update to v1.14.0
  * getDateAndDigestAndSize(): use manifest.Digest
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * parse: don't complain about not being able to rename something
    to itself
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Add --sign-by to bud/commit/push, --remove-signatures for
    pull/push
  * Add support for containers.conf
  * manifest push: add --format option</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1583323200">- Update to v1.14.2
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * Improve remote manifest retrieval
  * Correct a couple of incorrect format specifiers
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $
  * getDateAndDigestAndSize(): handle creation time not being set
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * pull/from/commit/push: retry on most failures
  * Repair buildah so it can use containers.conf on the server side
  * Fixing formatting &amp; build instructions
  * Fix XDG_RUNTIME_DIR for authfile
  * Show validation command-line</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585310400">- Update to v1.14.4
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Preserve volume uid and gid through subsequent commands
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585569600">- Update to v1.14.5
  * Revert FIPS mode change</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1586174400">- Update to v1.14.6
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1593000000">- Update to v1.15.0
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * fix lighttpd example
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Add preliminary profiling support to the CLI
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Return exit code from failed containers
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Remove warning for systemd inside of container</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1596456000">- Update to v1.15.1
  * Mask over the /sys/fs/selinux in mask branch
  * chroot: do not use setgroups if it is blocked
  * chroot, run: not fail on bind mounts from /sys
  * Allow "readonly" as alias to "ro" in mount options
  * Add VFS additional image store to container
  * vendor golang.org/x/text@v0.3.3
  * Make imagebuildah.BuildOptions.Architecture/OS optional</changelog>
  <changelog author="Flavio Castelli &lt;fcastelli@suse.com&gt;" date="1601467200">- Update to v1.16.2
  * fix build on 32bit arches
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1604404800">- Update to v1.17.0 (bsc#1165184)
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong containers/podman#7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with make nixpkgs
  * Set directory ownership when copied with ID mapping
  * build(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0
  * build(deps): bump github.com/containers/common from 0.23.0 to 0.24.0
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with make nixpkgs
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of manifest add sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update manifest add man page
  * Extend flags of manifest add
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * CI: expand cross-compile checks
- SLE: Remove unneeded patch: CVE-2019-10214.patch</changelog>
</package>
<package pkgid="cd92a35e593f79e887fecd07cb9001c0bf9eed507b5e38382e5da8f2e68b36a4" name="buildah" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp151.2.6.1"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565956800">- Update to v1.10.1
  * Add automatic apparmor tag discovery
  * Add overlayfs to fuse-overlayfs tip
  * Bug fix for volume minus syntax
  * Bump container/storage v1.13.1 and containers/image v3.0.1
  * Bump containers/image to v3.0.2 to fix keyring issue
  * Fix bug whereby --get-login has no effect
  * Bump github.com/containernetworking/cni to v0.7.1
- Add appamor-pattern requirement</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1567425600">- Add patch for CVE-2019-10214. bsc#1144065
  + CVE-2019-10214.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1567684800">- Update to v1.11.0
  * Add --digestfile and Re-add push statement as debug
  * Add --log-level command line option and deprecate --debug
  * Add security-related volume options to validator
  * Allow buildah bud to be called without arguments
  * Allow to override build date with SOURCE_DATE_EPOCH
  * Correctly detect ExitError values from Run()
  * Disable empty logrus timestamps to reduce logger noise
  * Fix directory pull image names
  * Fix handling of /dev/null masked devices
  * Fix possible runtime panic on bud
  * Update bud/from help to contain indicator for --dns=none
  * Update documentation about bud
  * Update shebangs to take env into consideration
  * Use content digests in ADD/COPY history entries
  * add support for cgroupsV2
  * add: add a DryRun flag to AddAndCopyOptions
  * add: handle hard links when copying with .dockerignore
  * add: teach copyFileWithTar() about symlinks and directories
  * imagebuilder: fix detection of referenced stage roots
  * pull/commit/push: pay attention to $BUILD_REGISTRY_SOURCES
  * run_linux: fix mounting /sys in a userns
- Remove hardly set build tags in favor of the Makefile</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568376000">- Update to v1.11.1
  * Add --devices flag to bud and from
  * Add support for /run/.containerenv
  * Allow mounts.conf entries for equal source and destination paths
  * Fix label and annotation for 1-line Dockerfiles
  * Preserve file and directory mount permissions
  * Replace --debug=false with --log-level=error
  * Set TMPDIR to /var/tmp by default
  * Truncate output of too long image names
  * Ignore EmptyLayer if Squash is set</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1569240000">- Update to v1.11.2
  * Add some cleanup code
  * Move devices code to unit specific directory.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1570449600">- Update to v1.11.3
  * Add cgroups2
  * Add support for retrieving context from stdin "-"
  * Added tutorial on how to include Buildah as library
  * Fix --build-args handling
  * Print build 'STEP' line to stdout, not stderr
  * Use Containerfile by default</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1572350400">- Update to v1.11.4
  * buildah: add a "manifest" command
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573560000">- Update to v1.11.5
  * buildah: add "manifest" command
  * pkg/supplemented: add a package for grouping images together
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * version: also note the version of containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1575547200">- Update to v1.11.6
  * Handle missing equal sign in --from and --chown flags
    for COPY/ADD
  * bud COPY does not download URL
  * Fix .dockerignore exclude regression
  * commit(docker): always set ContainerID and ContainerConfig
  * Touch up commit man page image parameter
  * Add builder identity annotations.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Update to v1.12.0
  * Allow ADD to use http src
  * imgtype: reset storage opts if driver overridden
  * Start using containers/common
  * overlay.bats typo: fuse-overlays should be fuse-overlayfs
  * chroot: Unmount with MNT_DETACH instead of UnmountMountpoints()
  * bind: don't complain about missing mountpoints
  * imgtype: check earlier for expected manifest type
  * Add history names support</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579089600">- Update to v1.13.1
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581595200">- Update to v1.14.0
  * getDateAndDigestAndSize(): use manifest.Digest
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * parse: don't complain about not being able to rename something
    to itself
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Add --sign-by to bud/commit/push, --remove-signatures for
    pull/push
  * Add support for containers.conf
  * manifest push: add --format option</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1583323200">- Update to v1.14.2
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * Improve remote manifest retrieval
  * Correct a couple of incorrect format specifiers
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $
  * getDateAndDigestAndSize(): handle creation time not being set
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * pull/from/commit/push: retry on most failures
  * Repair buildah so it can use containers.conf on the server side
  * Fixing formatting &amp; build instructions
  * Fix XDG_RUNTIME_DIR for authfile
  * Show validation command-line</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585310400">- Update to v1.14.4
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Preserve volume uid and gid through subsequent commands
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585569600">- Update to v1.14.5
  * Revert FIPS mode change</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1586174400">- Update to v1.14.6
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1593000000">- Update to v1.15.0
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * fix lighttpd example
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Add preliminary profiling support to the CLI
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Return exit code from failed containers
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Remove warning for systemd inside of container</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1596456000">- Update to v1.15.1
  * Mask over the /sys/fs/selinux in mask branch
  * chroot: do not use setgroups if it is blocked
  * chroot, run: not fail on bind mounts from /sys
  * Allow "readonly" as alias to "ro" in mount options
  * Add VFS additional image store to container
  * vendor golang.org/x/text@v0.3.3
  * Make imagebuildah.BuildOptions.Architecture/OS optional</changelog>
  <changelog author="Flavio Castelli &lt;fcastelli@suse.com&gt;" date="1601467200">- Update to v1.16.2
  * fix build on 32bit arches
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1604404800">- Update to v1.17.0 (bsc#1165184)
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong containers/podman#7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with make nixpkgs
  * Set directory ownership when copied with ID mapping
  * build(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0
  * build(deps): bump github.com/containers/common from 0.23.0 to 0.24.0
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with make nixpkgs
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of manifest add sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update manifest add man page
  * Extend flags of manifest add
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * CI: expand cross-compile checks
- SLE: Remove unneeded patch: CVE-2019-10214.patch</changelog>
</package>
<package pkgid="50d17685d387a2e40c42cecb220bca40b6ecca0089c214b5718f8cd0ddd2c53e" name="buildah" arch="src">
  <version epoch="0" ver="1.7.1" rel="lp151.2.3.1"/>
  <changelog author="vrothberg@suse.com" date="1520337600">- Package buildah v0.12.  Buildah is a tool to build OCI images, and is used
  by podman-build.</changelog>
  <changelog author="vrothberg@suse.com" date="1522324800">- Fix `buildah version` by compiling the build date into the binary.</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Change build date to SOURCE_DATE_EPOCH to make builds reproducible.</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="vrothberg@suse.com" date="1528372800">- Update buildah to v1.0:
  * Update option and documentation for --force-rm
  * Update buildah run to make command required
  * Do not print directly to stdout in Commit()
  * Force "localhost" as a default registry
  * Validate host and container paths passed to --volume
  * Add --compress, --rm, --squash flags as a noop for bud
  * Add FIPS mode secret to buildah run and bud
  * Add config --comment/--domainname/--history-comment/--hostname
  * 'buildah config': stop replacing Created-By whenever it's not specified
  * Modify man pages so they compile correctly in mandb
  * Add description on how to do --isolation to buildah-bud man page
  * Add support for --iidfile to bud and commit
  * Remove tarball as an option from buildah push --help
  * Fix secrets patch
  * Display imageId after commit
  * config: add support for StopSignal
  * Allow referencing stages as index and names
  * Add multi-stage builds support
  * Allow umount to have multi-containers
  * buildah bud walks symlinks
  * Allow --cmd parameter to have commands as values
  * Make default-mounts-file a hidden option
  * Add various transport support to buildah from
  * shallowCopy: avoid a second read of the container's layer
  * Add openSUSE in install section
  * run: do not open /etc/hosts if not needed</changelog>
  <changelog author="jengelh@inai.de" date="1528632000">- Use noun phrase in summary.</changelog>
  <changelog author="vrothberg@suse.com" date="1528718400">- Update buildah to v1.1:
  * Drop capabilities if running container processes as non root
  * Print Warning message if cmd will not be used based on entrypoint
  * Shouldn't add insecure registries to list of search registries
  * Report errors on bad transports specification when pushing images
  * Add disable-content-trust noop flag to bud
  * runCopyStdio(): don't close stdin unless we saw POLLHUP
  * Add registry errors for pull
  * Give better messages to users when image can not be found
  * Add environment variable to buildah --format
  * Accept json array input for config entrypoint
  * Add OnBuild support for Dockerfiles
  * buildah bud should require a context directory or URL
  * buildah bud picks up ENV from base image
  * Add CLI options for specifying namespace and cgroup setup
  * Read UID/GID mapping information from containers and images
  * build-using-dockerfile: add --annotation
  * Implement --squash for build-using-dockerfile and commit
  * Vendor in latest container/storage for devicemapper support
  * Test with Go 1.10, too
  * Handle /etc/hosts and /etc/resolv.conf properly in container
  * Add support for buildah bud --label
  * buildah push/from can push and pull images with no reference
  * builder-inspect: fix format option
  * Add cpu-shares short flag (-c) and cpu-shares CI tests</changelog>
  <changelog author="vrothberg@suse.com" date="1531742400">- Update buildah to v1.2:
  * build-using-dockerfile: let -t include transports again
  * Block use of /proc/acpi and /proc/keys from inside containers
  * Fix handling of -registries-conf
  * Add -cidfile option to from
  * Add a -loglevel option to build-with-dockerfile
  * docs: Follow man-pages(7) suggestions for SYNOPSIS
  * umount: add all option to umount all mounted containers
  * Fix buildah bud -layers
  * Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  * build without seccomp
  * Add Capabilities lists to BuilderInfo
  * Fix ARGS parsing for run commands
  * Add info on registries.conf to from manpage
  * mount: support multiple inputs
  * Allow -userns-uid-map/-userns-gid-map to be global options
  * Add -rm and -force-rm to buildah bud
  * Add -all,-a flag to buildah images
  * Add environment variable BUILDAH_RUNTIME
  * Add -layers and -no-cache to buildah bud
  * Change 'registries' to 'container registries' in man
  * Add registries.conf link to a few man pages
- install missing buildah (1) manpage
- install bash completion at /usr/share/bash-completion/completions
- buildmode=pie: build position independent code</changelog>
  <changelog author="vrothberg@suse.com" date="1533556800">- Update buildah to v1.3:
  * bud should not search context directory for Dockerfile
  * Set BUILDAH_ISOLATION=rootless when running unprivileged
  * Fix rmi to remove intermediate images associated with an image
  * Set the default ulimits to match Docker
  * buildah: no args is out of bounds
  * preprocess ".in" suffixed Dockerfiles
  * Add support for multiple Short options
  * Update to latest urvave/cli
  * Create buildah pull command
  * Allow ping command without NET_RAW Capabilities
  * Allow Dockerfile content to come from stdin
  * add rename command
  * Completion command
  * Update vendor for runc to fix 32 bit builds</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1536148800">- Set the correct commit for `buildah version`.
- Set the cnilib version for `buildah version`.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1538568000">- Changelog for v1.4 (2018-10-02)
  * Touchup pull manpage
  * Export buildah ReserveSELinuxLables so podman can use it
  * Update rmi man for prune changes
  * Copy ExposedPorts from base image into the config
  * Change rmi --prune to not accept an imageID
  * Builtin volumes should be owned by the UID/GID of the container
  * Move buildah from projecatatomic/buildah to containers/buildah
  * bash: Completion options
  * Don't build btrfs if it is not installed
  * Push: Allow an empty destination
  * Fix arg usage in buildah-tag
  * Evaluate symbolic links on Add/Copy Commands
  * Retain bounding set when running containers as non root
  * push: show image digest after push succeed
  * Exclude --layers from the common bug cli flags
  * Make buildah-from error message clear when flags are after arg
  * Warn about using Commands in Dockerfile that are not supported by OCI.
  * Document BUILDAH_* environment variables in buildah bud --help output
  * Fix --layers ADD from url issue
  * Display the correct ID after deleting image
  * Handle COPY --chown in Dockerfile
  * Document STORAGE_DRIVER and STORAGE_OPTS environment variable
  * Expand variables names for --env</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1541332800">- Require slirp4netns to enable networking for unprivileged network namespaces
  aka networking for rootless buildah.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542974400">- Changelog for v1.5-1 (2018-11-21)
  * Print command in SystemExec as debug information
  * Sort CLI flags
  * Update imagebuild depdency to support heading ARGs in Dockerfile
  * rootless: do not specify --rootless to the OCI runtime
  * Exclude --force-rm from common bud cli flags
  * run: bind mount /etc/hosts and /etc/resolv.conf if not in a volume
  * rootless: use slirp4netns to setup the network namespace
  * rootless: only discard network configuration names
  * run: only set up /etc/hosts or /etc/resolv.conf with network
  * Handle directories better in bud -f
  * common: support a per-user registries conf file
  * unshare: do not override the configuration
  * common: honor the rootless configuration file
  * unshare: create a new mount namespace
  * unshare: support libpod rootless pkg
  * Allow container storage to manage the SELinux labels
  * imagebuilder.BuildDockerfiles: return the image ID
  * Allow setting --no-pivot default with an env var
  * Add man page and bash completion, for --no-pivot
  * Add the --no-pivot flag to the run command
  * Improve reporting about individual pull failures
  * Fix From As in Dockerfile
  * Sort CLI flags of buildah bud
  * unshare: detect when unprivileged userns are disabled
  * buildah: use the same logic for XDG_RUNTIME_DIR as podman
  * Make sure we log or return every error
  * Correctly set DockerInsecureSkipTLSVerify when pulling images
  * chroot: set up seccomp and capabilities after supplemental groups
  * chroot: fix capabilities list setup and application</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1547726400">- Update to v1.6
  * unshare: do not set USER=root
  * run: ignore EIO when flushing at the end, avoid double log
  * build-using-dockerfile,commit: disable compression by default
  * Make rootless work under no_pivot_root
  * Properly format images JSON output
  * Assume user 0 group 0, if /etc/passwd file in container.
  * Add buildah info command
- Full changelog: https://github.com/containers/buildah/releases/tag/v1.6</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1551182400">- Update to v1.7
  * vendor containers/image v1.4
  * Make "images --all" faster
  * Remove quiet option from pull options
  * Support oci layout format</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1551441600">- Update to v1.7.1
  * Minor fix to vendor in github.com/containers/image 1.5 version
  * This fixes a crash on pulling of images
- Stop building from specific commit</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1567425600">- Add patch for CVE-2019-10214. bsc#1144065
  + CVE-2019-10214.patch</changelog>
</package>
<package pkgid="e9a72e4131db9d3add9f6c3d8f3699e306f7333e8c1072de22f9b30701828914" name="buildah" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="lp151.2.3.1"/>
  <changelog author="vrothberg@suse.com" date="1520337600">- Package buildah v0.12.  Buildah is a tool to build OCI images, and is used
  by podman-build.</changelog>
  <changelog author="vrothberg@suse.com" date="1522324800">- Fix `buildah version` by compiling the build date into the binary.</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Change build date to SOURCE_DATE_EPOCH to make builds reproducible.</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="vrothberg@suse.com" date="1528372800">- Update buildah to v1.0:
  * Update option and documentation for --force-rm
  * Update buildah run to make command required
  * Do not print directly to stdout in Commit()
  * Force "localhost" as a default registry
  * Validate host and container paths passed to --volume
  * Add --compress, --rm, --squash flags as a noop for bud
  * Add FIPS mode secret to buildah run and bud
  * Add config --comment/--domainname/--history-comment/--hostname
  * 'buildah config': stop replacing Created-By whenever it's not specified
  * Modify man pages so they compile correctly in mandb
  * Add description on how to do --isolation to buildah-bud man page
  * Add support for --iidfile to bud and commit
  * Remove tarball as an option from buildah push --help
  * Fix secrets patch
  * Display imageId after commit
  * config: add support for StopSignal
  * Allow referencing stages as index and names
  * Add multi-stage builds support
  * Allow umount to have multi-containers
  * buildah bud walks symlinks
  * Allow --cmd parameter to have commands as values
  * Make default-mounts-file a hidden option
  * Add various transport support to buildah from
  * shallowCopy: avoid a second read of the container's layer
  * Add openSUSE in install section
  * run: do not open /etc/hosts if not needed</changelog>
  <changelog author="jengelh@inai.de" date="1528632000">- Use noun phrase in summary.</changelog>
  <changelog author="vrothberg@suse.com" date="1528718400">- Update buildah to v1.1:
  * Drop capabilities if running container processes as non root
  * Print Warning message if cmd will not be used based on entrypoint
  * Shouldn't add insecure registries to list of search registries
  * Report errors on bad transports specification when pushing images
  * Add disable-content-trust noop flag to bud
  * runCopyStdio(): don't close stdin unless we saw POLLHUP
  * Add registry errors for pull
  * Give better messages to users when image can not be found
  * Add environment variable to buildah --format
  * Accept json array input for config entrypoint
  * Add OnBuild support for Dockerfiles
  * buildah bud should require a context directory or URL
  * buildah bud picks up ENV from base image
  * Add CLI options for specifying namespace and cgroup setup
  * Read UID/GID mapping information from containers and images
  * build-using-dockerfile: add --annotation
  * Implement --squash for build-using-dockerfile and commit
  * Vendor in latest container/storage for devicemapper support
  * Test with Go 1.10, too
  * Handle /etc/hosts and /etc/resolv.conf properly in container
  * Add support for buildah bud --label
  * buildah push/from can push and pull images with no reference
  * builder-inspect: fix format option
  * Add cpu-shares short flag (-c) and cpu-shares CI tests</changelog>
  <changelog author="vrothberg@suse.com" date="1531742400">- Update buildah to v1.2:
  * build-using-dockerfile: let -t include transports again
  * Block use of /proc/acpi and /proc/keys from inside containers
  * Fix handling of -registries-conf
  * Add -cidfile option to from
  * Add a -loglevel option to build-with-dockerfile
  * docs: Follow man-pages(7) suggestions for SYNOPSIS
  * umount: add all option to umount all mounted containers
  * Fix buildah bud -layers
  * Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  * build without seccomp
  * Add Capabilities lists to BuilderInfo
  * Fix ARGS parsing for run commands
  * Add info on registries.conf to from manpage
  * mount: support multiple inputs
  * Allow -userns-uid-map/-userns-gid-map to be global options
  * Add -rm and -force-rm to buildah bud
  * Add -all,-a flag to buildah images
  * Add environment variable BUILDAH_RUNTIME
  * Add -layers and -no-cache to buildah bud
  * Change 'registries' to 'container registries' in man
  * Add registries.conf link to a few man pages
- install missing buildah (1) manpage
- install bash completion at /usr/share/bash-completion/completions
- buildmode=pie: build position independent code</changelog>
  <changelog author="vrothberg@suse.com" date="1533556800">- Update buildah to v1.3:
  * bud should not search context directory for Dockerfile
  * Set BUILDAH_ISOLATION=rootless when running unprivileged
  * Fix rmi to remove intermediate images associated with an image
  * Set the default ulimits to match Docker
  * buildah: no args is out of bounds
  * preprocess ".in" suffixed Dockerfiles
  * Add support for multiple Short options
  * Update to latest urvave/cli
  * Create buildah pull command
  * Allow ping command without NET_RAW Capabilities
  * Allow Dockerfile content to come from stdin
  * add rename command
  * Completion command
  * Update vendor for runc to fix 32 bit builds</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1536148800">- Set the correct commit for `buildah version`.
- Set the cnilib version for `buildah version`.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1538568000">- Changelog for v1.4 (2018-10-02)
  * Touchup pull manpage
  * Export buildah ReserveSELinuxLables so podman can use it
  * Update rmi man for prune changes
  * Copy ExposedPorts from base image into the config
  * Change rmi --prune to not accept an imageID
  * Builtin volumes should be owned by the UID/GID of the container
  * Move buildah from projecatatomic/buildah to containers/buildah
  * bash: Completion options
  * Don't build btrfs if it is not installed
  * Push: Allow an empty destination
  * Fix arg usage in buildah-tag
  * Evaluate symbolic links on Add/Copy Commands
  * Retain bounding set when running containers as non root
  * push: show image digest after push succeed
  * Exclude --layers from the common bug cli flags
  * Make buildah-from error message clear when flags are after arg
  * Warn about using Commands in Dockerfile that are not supported by OCI.
  * Document BUILDAH_* environment variables in buildah bud --help output
  * Fix --layers ADD from url issue
  * Display the correct ID after deleting image
  * Handle COPY --chown in Dockerfile
  * Document STORAGE_DRIVER and STORAGE_OPTS environment variable
  * Expand variables names for --env</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1541332800">- Require slirp4netns to enable networking for unprivileged network namespaces
  aka networking for rootless buildah.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542974400">- Changelog for v1.5-1 (2018-11-21)
  * Print command in SystemExec as debug information
  * Sort CLI flags
  * Update imagebuild depdency to support heading ARGs in Dockerfile
  * rootless: do not specify --rootless to the OCI runtime
  * Exclude --force-rm from common bud cli flags
  * run: bind mount /etc/hosts and /etc/resolv.conf if not in a volume
  * rootless: use slirp4netns to setup the network namespace
  * rootless: only discard network configuration names
  * run: only set up /etc/hosts or /etc/resolv.conf with network
  * Handle directories better in bud -f
  * common: support a per-user registries conf file
  * unshare: do not override the configuration
  * common: honor the rootless configuration file
  * unshare: create a new mount namespace
  * unshare: support libpod rootless pkg
  * Allow container storage to manage the SELinux labels
  * imagebuilder.BuildDockerfiles: return the image ID
  * Allow setting --no-pivot default with an env var
  * Add man page and bash completion, for --no-pivot
  * Add the --no-pivot flag to the run command
  * Improve reporting about individual pull failures
  * Fix From As in Dockerfile
  * Sort CLI flags of buildah bud
  * unshare: detect when unprivileged userns are disabled
  * buildah: use the same logic for XDG_RUNTIME_DIR as podman
  * Make sure we log or return every error
  * Correctly set DockerInsecureSkipTLSVerify when pulling images
  * chroot: set up seccomp and capabilities after supplemental groups
  * chroot: fix capabilities list setup and application</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1547726400">- Update to v1.6
  * unshare: do not set USER=root
  * run: ignore EIO when flushing at the end, avoid double log
  * build-using-dockerfile,commit: disable compression by default
  * Make rootless work under no_pivot_root
  * Properly format images JSON output
  * Assume user 0 group 0, if /etc/passwd file in container.
  * Add buildah info command
- Full changelog: https://github.com/containers/buildah/releases/tag/v1.6</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1551182400">- Update to v1.7
  * vendor containers/image v1.4
  * Make "images --all" faster
  * Remove quiet option from pull options
  * Support oci layout format</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1551441600">- Update to v1.7.1
  * Minor fix to vendor in github.com/containers/image 1.5 version
  * This fixes a crash on pulling of images
- Stop building from specific commit</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1567425600">- Add patch for CVE-2019-10214. bsc#1144065
  + CVE-2019-10214.patch</changelog>
</package>
<package pkgid="40c518be5bf0b49f373e81676ef30da3c0cd81c0e2155cf8f603bef672850219" name="bzip2" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="733b95b42af911553cd573fa396d134c98e99c10386843d6201a32640532422b" name="bzip2" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1358769600">- Executing autoreconf requires autoconf
- Set RPM groups to the common ones we use for library and
  "-devel" packages</changelog>
  <changelog author="idonmez@suse.com" date="1358769601">- Add %{version} to Obsoletes/Provides</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="vcizek@suse.com" date="1407240000">- handle pipe input with the -f option (bnc#884004)
  * added bzip2-handle_pipe_input_with-f_option.patch</changelog>
  <changelog author="idonmez@suse.com" date="1407326400">- Implement %check</changelog>
  <changelog author="vcizek@suse.com" date="1409659200">- revert the bzip2-handle_pipe_input_with-f_option.patch because it
  breaks other programs using the bzip2 library</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="2ce75b1d0edf34d3d84ece14e7f3dfe1fd9462f4be43242af32b658060d76fef" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="deac5254032a164a2bab0ba8a6b0ac5893390c2dfabb3a1354821eefd08a07a5" name="bzip2" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="4f1bcd9f3f60aeee521d0c4ef5272d303427f098f26311af1c88276fe43c050b" name="bzip2" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="idonmez@suse.com" date="1358769600">- Add %{version} to Obsoletes/Provides</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="vcizek@suse.com" date="1407240000">- handle pipe input with the -f option (bnc#884004)
  * added bzip2-handle_pipe_input_with-f_option.patch</changelog>
  <changelog author="idonmez@suse.com" date="1407326400">- Implement %check</changelog>
  <changelog author="vcizek@suse.com" date="1409659200">- revert the bzip2-handle_pipe_input_with-f_option.patch because it
  breaks other programs using the bzip2 library</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="b0966ba15a12f4668dad31b16dad99def66eff270524d360eda6d7a574d1456e" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="a5cfccbd2ca97cd960d151a9d34b836f51465f66800c390e22bc80e6b322a36a" name="bzip2" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="8740981b98c69966b589c29b91241ae05025223d0f11e2b0e2858e790e5ced33" name="bzip2" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="vcizek@suse.com" date="1407240000">- handle pipe input with the -f option (bnc#884004)
  * added bzip2-handle_pipe_input_with-f_option.patch</changelog>
  <changelog author="idonmez@suse.com" date="1407326400">- Implement %check</changelog>
  <changelog author="vcizek@suse.com" date="1409659200">- revert the bzip2-handle_pipe_input_with-f_option.patch because it
  breaks other programs using the bzip2 library</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="fcce4a5e74d0a09cbde3bffd1f29b2ef9b19325f8dbf005dc68ff9fcc3b7155d" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="5febd550fe022a481c448052a7894d1213df2a8fefa24342b2da8231e8f25b34" name="bzip2-doc" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="efaa72dd646bd816520aa1a07e34d5b0b7d490342fc7344db8db181db0ee9199" name="bzip2-doc" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="72426e9242ed9caa0533562f17de3096a7471568bff8b01369274137258acbb4" name="bzip2-doc" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="4e2e028a87f42dbf3eb6f8f3d289964f479f5df2ad3bb88822e95021ef74ba13" name="c-ares" arch="src">
  <version epoch="0" ver="1.15.0+20200117" rel="lp151.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1321358400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1328270400">- Fix license
- provide symbol versioning support
- fix -debuginfo packages</changelog>
  <changelog author="p.drouand@gmail.com" date="1357473600">- Update to 1.9.1 version:
  * include the ares_parse_soa_reply.* files in the tarball
- Removed patches (fixed and merged on upstream release)
  * 0001-ares_destroy.c-fix-segfault-in-ares_destroy_options.patch
  * 0002-ares_getnameinfo-fix-random-results-with-c-ares-1.7..patch
  * 0003-ares_init.c-fix-segfault-triggered-in-ares_init_opti.patch
- Updated and versionned patchs for upstream release:
  * 0001-add-symbol-versioning-support.patch
  * cares-ocloexec.patch</changelog>
  <changelog author="jengelh@inai.de" date="1367496000">- Get rid of outdated autotools construct to fix build with
  new automake-1.13</changelog>
  <changelog author="mvyskocil@suse.com" date="1367582400">- Use the genuine upstream tarball
- Verify tarball using gpg-offline</changelog>
  <changelog author="tchvatal@suse.com" date="1400155200">- Version bump to 1.10.0:
  * Various small updates all around
  * Cleanup of automake to build with latest tools
  * For more see CHANGES
- Remove upstreamed patches:
  * cares-autotools.diff
- Remove patch that needs quite work and was never acceted upstream:
  * 0001-cares-1.9.1-add-symbol-versioning-support.patch
- Added patches:
  * 0001-Use-RPM-compiler-options.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
</package>
<package pkgid="b47025c07c000e6f6f370a5146ca0d8524a6e45b732ee768b0ddf2b653ed5e55" name="c-ares" arch="src">
  <version epoch="0" ver="1.17.0" rel="lp151.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1400155200">- Version bump to 1.10.0:
  * Various small updates all around
  * Cleanup of automake to build with latest tools
  * For more see CHANGES
- Remove upstreamed patches:
  * cares-autotools.diff
- Remove patch that needs quite work and was never acceted upstream:
  * 0001-cares-1.9.1-add-symbol-versioning-support.patch
- Added patches:
  * 0001-Use-RPM-compiler-options.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="9a6d002775dac445be71b2c1847b6316b51c9459c1d306bd34f1fb26237cc531" name="c-ares" arch="src">
  <version epoch="0" ver="1.17.0" rel="lp151.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="c5873d704b66b1ce5e00a7c69e07b37a7495f4724331b691a64b81e3bee5e385" name="c-ares-devel" arch="i586">
  <version epoch="0" ver="1.15.0+20200117" rel="lp151.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
</package>
<package pkgid="49f9216d13f3061e56306ba383279bbaacd1f0d1ba746eae4e610d0689d9313e" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.15.0+20200117" rel="lp151.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
</package>
<package pkgid="89304195b035ae5284a8b48d941b56c90749ec6a49b146c8eed3108229e0f784" name="c-ares-devel" arch="i586">
  <version epoch="0" ver="1.17.0" rel="lp151.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="13462bede27f5f7a02284ef9cec1c1832b322b12861be69cf044b343d4dae15d" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp151.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="04cf6ac32e02e0373133a19cb16eeaf75deab0fdef67b4a127e5b8fd3782fc02" name="c-ares-devel" arch="i586">
  <version epoch="0" ver="1.17.0" rel="lp151.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="0804ae0b1ad72741a2e35baa6c5355da503b21161b562e79f12777b2e5dac23a" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp151.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="7dff65b032b19ddd5d3169c508ade560997390cb8c33e9f58715e4928908e445" name="c-ares-tests" arch="src">
  <version epoch="0" ver="1.17.0" rel="lp151.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1400155200">- Version bump to 1.10.0:
  * Various small updates all around
  * Cleanup of automake to build with latest tools
  * For more see CHANGES
- Remove upstreamed patches:
  * cares-autotools.diff
- Remove patch that needs quite work and was never acceted upstream:
  * 0001-cares-1.9.1-add-symbol-versioning-support.patch
- Added patches:
  * 0001-Use-RPM-compiler-options.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="f38febda3cf223bcb8caff840591aaab7f3027e212e0ff5e0d173062f5b097ba" name="c-ares-tests" arch="src">
  <version epoch="0" ver="1.17.0" rel="lp151.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="768cf9d17b53dc499cf50ffa4a0bf921eb608c282ec3f313e70c120a100123af" name="c-ares-utils" arch="i586">
  <version epoch="0" ver="1.15.0+20200117" rel="lp151.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
</package>
<package pkgid="01aa4c49cf117557952ffe2c7d96a7523888594a4c8b990d00d427d21c2ea666" name="c-ares-utils" arch="x86_64">
  <version epoch="0" ver="1.15.0+20200117" rel="lp151.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
</package>
<package pkgid="afb8269f1a505d6921a8b4044555bf3268285afac866f3ba451bc383098fe2e9" name="c-ares-utils" arch="i586">
  <version epoch="0" ver="1.17.0" rel="lp151.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="66f8d1fdb0e590e151fa4b38a1e45d996126feafe12c109ead3e36be02940af9" name="c-ares-utils" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp151.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="2d7c8ae3f8f8a664551867b8aa5c4493d7443c008f9ad036ee4278850d622339" name="c-ares-utils" arch="i586">
  <version epoch="0" ver="1.17.0" rel="lp151.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="0fe721d4fc4f0efab842ee60e112edbf5112f417435f42d44cfdee42a6353113" name="c-ares-utils" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp151.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="c89597280c3475077f9b46b5592389c289173f037a311c16d861a1cfef0c8828" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.34" rel="lp151.2.3.1"/>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
</package>
<package pkgid="044211c57bfa4b16313a8be4bce4f2722bc3cc776c6a964747bf735d4a096525" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.34" rel="lp151.2.3.1"/>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
</package>
<package pkgid="af2433e39c12724ea0e11002616a1234a65fa4a9252e5986d2e3ab517dcc4335" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.40" rel="lp151.2.6.1"/>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
</package>
<package pkgid="33ae89bbfda61cc4d49ed45dc047f82f2e31e078015d3803b1d251b9a842142f" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.40" rel="lp151.2.6.1"/>
  <changelog author="meissner@suse.com" date="1386590400">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
</package>
<package pkgid="67871c32bd84d57ce98b7df460c68d19b6d636495b30476f20f1bd392073c154" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.42" rel="lp151.2.9.1"/>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017
- Reverted p11-kit changes for (boo#1154871), this is fragile on
  fresh installs with "too old" p11-kit.</changelog>
</package>
<package pkgid="c3a9e4f96d9bee6ac7abd22489235efad69a73bfb6e49136bece5461d9250a3c" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.42" rel="lp151.2.9.1"/>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017
- Reverted p11-kit changes for (boo#1154871), this is fragile on
  fresh installs with "too old" p11-kit.</changelog>
</package>
<package pkgid="c0e0695d425c0c8c1809faf9d3995c215214e0e2ff36ae0c3f86582dede5a942" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.44" rel="lp151.2.12.1"/>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017
- Reverted p11-kit changes for (boo#1154871), this is fragile on
  fresh installs with "too old" p11-kit.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
</package>
<package pkgid="d66d0adc3a292e768d927e5c739adc1387ef6420afb3945d2df136e6415ebcd7" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.44" rel="lp151.2.12.1"/>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017
- Reverted p11-kit changes for (boo#1154871), this is fragile on
  fresh installs with "too old" p11-kit.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
</package>
<package pkgid="add1ac9c0d6d08f259f78549e21c4c608397c02f879602fd64046116158a5d86" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.11" rel="lp151.3.6.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Build version 1.1.36
  - issue#934: Template names missing in graph management list
  - issue#1211: CDEF and VDEF Item Edit do not use correct procedures
  - issue#1250: Language support does not support localization properly
  - issue#1331: Log Rotation should occur at midnight on system
  - issue#1334: Console-&gt;Users-&gt;(Edit) Permissions checkmark descriptions
    missing
  - issue#1336: Debian test suite reports php error
  - issue#1338: Allow automation to be run in debug mode from GUI
  - issue#1339: First graph of second page does not render
  - issue#1340: Unable to open Time Graph View in new tab
  - issue#1348: Toggle context menu of Zoom
  - issue#1351: Errorimage does not render on systems without GD ttf support
  - issue#1353: New installation without config.php silently throws errors
  - issue#1355: Single tree can have the order of the tree changed
  - issue#1357: Data Profile disable fields shown temporarily as editable
  - issue#1359: Settings page generates error for removed plugin tab
  - issue#1362: DSStats Avg/Peak function broken due to change in RRDtool
    processing
  - issue#1365: Plugin Management enforce folder name
  - issue#1366: Improve error/info message display
  - issue#1380: Potential failure when updating script type
  - issue#1384: When installing/enabling plugins, current user and admin should
    get permissions
  - issue#1386: form_selectable_cell() ignores width if no style_or_class is
    passed
  - issue#1389: Poller is including plugins that are not installed
  - issue#1390: Plugin uninstall should prompt user before removal
  - issue#1396: Prevent installation/uninstallation of a plugin if dependency
    is present
  - issue#1397: Distinguish between plugin tabs and core tabs in settings
  - issue: Allow dynamic setting of from name when emailing
  - issue: Data Query Cache filter layout more consistent
  - issue: Minor plugin permissions format change
  - issue: Implementation of error handling causes errors creating New Graphs
  - issue: Deprecated DDStats setting removed
  - issue: Graph context menu items are now context aware
  - issue: Validate spine path before allowing enabling of spine
  - issue: Errored settings fields now highlighted correctly on error
  - issue: Add the Default Device to the Default Tree at install time
  - issue: Secpass password verification error message unuseful
  - feature: Searching of SNMP Index in View Data Query Cache now works
  - feature: Presets now have default device Template
  - feature: JavaScript library c3.js updated (v0.4.21) / jstree.js (3.3.5)
  - feature: PHPSecLib updated 2.0.10
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Change minimum php version to 5.4
-Build version 1.1.37
  - issue#274: Allow Realtime Graph Popup Mode
  - issue#1405: When Data Query columns are wide, they cause rendering
    issues
  - issue#1414: DSSTATS reports incorrectly that a data source does not
    exist
  - issue#1419: Filtering log results in errors in the log
  - issue#1420: PHP NOTICE editing cdef and vdef items
  - issue#1421: CLI upgrade_database.php PHP Warning on execution
  - issue#1426: Remote poller erroring attempting to verify files
  - issue#1432: Delete confirmation does not disappear
  - issue#1443: Partial Save warnings under Settings -&gt; Mail/Reporting/DNS
  - issue#1447: CLI audit_database.php not detecting database name, and
    failed to create audit tables when run fresh
  - issue#1453: CLI add_graph.php not allowing title to be set
  - issue#1456: Increase minimum php version maintaining support for RHEL6
  - issue#1457: Path-Based Cross-Site Scripting (XSS) issues
  - issue#1458: Error in logs when creating new graphs
  - issue#1459: Automation filter not applied correctly
  - issue#1461: Setting output_format on input type causes no values to be
    returned
  - issue#1464: Poller stuck in infinitely loop causing excess logging
  - issue#1466: No scrollbars in mobile browsers
  - issue#1468: Increase max length of host.snmp_sysObjectID column
  - issue#1471: Undefined function found in global_languages.php
  - issue#1472: Change Device Options - Style needs updating
  - issue#1474: Check possibility for creation of temporary tables on install
  - issue#1487: Undefined constant in ldap.php
  - issue#1483: Create New Graphs - Paw Styling Issue
  - issue#1493: Can't create tree branches with '#' sign
  - feature#1489: Add ability to use parts of OID as value via regex
  - feature: Updated Chinese Simplified translations
  - feature: Updated Dutch translations
  - feature: JavaScript library Chart.js updated 2.7.2
  - feature: Allow snmp formatting functions to detect UTF-8 output</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">-Build version 1.1.38
  - issue#1501: cmd.php poller not stripping alpha from snmp get values
  - issue#1515: Special characters not rendered properly in settings
  - issue#1530: Inconsistent behaviour handling blank Field Name/Value
    when editing data query suggested values
  - issue#1537: Numeric validation not ignoring blank elements</changelog>
  <changelog author="uhaider.msee15seecs@seecs.edu.pk" date="1531483200">-Fixed missing packages php-json, php-ctype, and php-gd in cacti.spec. bsc#1101024
-Fixed Apache2.4 and Apache2.2 runtime configuration issue. bsc#1101139</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
</package>
<package pkgid="b1f8e813301086c6d6a9ddee14fb27271f2dd8db1540fc4a7fc057ad730e20cb" name="cacti" arch="src">
  <version epoch="0" ver="1.2.11" rel="lp151.3.6.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Build version 1.1.36
  - issue#934: Template names missing in graph management list
  - issue#1211: CDEF and VDEF Item Edit do not use correct procedures
  - issue#1250: Language support does not support localization properly
  - issue#1331: Log Rotation should occur at midnight on system
  - issue#1334: Console-&gt;Users-&gt;(Edit) Permissions checkmark descriptions
    missing
  - issue#1336: Debian test suite reports php error
  - issue#1338: Allow automation to be run in debug mode from GUI
  - issue#1339: First graph of second page does not render
  - issue#1340: Unable to open Time Graph View in new tab
  - issue#1348: Toggle context menu of Zoom
  - issue#1351: Errorimage does not render on systems without GD ttf support
  - issue#1353: New installation without config.php silently throws errors
  - issue#1355: Single tree can have the order of the tree changed
  - issue#1357: Data Profile disable fields shown temporarily as editable
  - issue#1359: Settings page generates error for removed plugin tab
  - issue#1362: DSStats Avg/Peak function broken due to change in RRDtool
    processing
  - issue#1365: Plugin Management enforce folder name
  - issue#1366: Improve error/info message display
  - issue#1380: Potential failure when updating script type
  - issue#1384: When installing/enabling plugins, current user and admin should
    get permissions
  - issue#1386: form_selectable_cell() ignores width if no style_or_class is
    passed
  - issue#1389: Poller is including plugins that are not installed
  - issue#1390: Plugin uninstall should prompt user before removal
  - issue#1396: Prevent installation/uninstallation of a plugin if dependency
    is present
  - issue#1397: Distinguish between plugin tabs and core tabs in settings
  - issue: Allow dynamic setting of from name when emailing
  - issue: Data Query Cache filter layout more consistent
  - issue: Minor plugin permissions format change
  - issue: Implementation of error handling causes errors creating New Graphs
  - issue: Deprecated DDStats setting removed
  - issue: Graph context menu items are now context aware
  - issue: Validate spine path before allowing enabling of spine
  - issue: Errored settings fields now highlighted correctly on error
  - issue: Add the Default Device to the Default Tree at install time
  - issue: Secpass password verification error message unuseful
  - feature: Searching of SNMP Index in View Data Query Cache now works
  - feature: Presets now have default device Template
  - feature: JavaScript library c3.js updated (v0.4.21) / jstree.js (3.3.5)
  - feature: PHPSecLib updated 2.0.10
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Change minimum php version to 5.4
-Build version 1.1.37
  - issue#274: Allow Realtime Graph Popup Mode
  - issue#1405: When Data Query columns are wide, they cause rendering
    issues
  - issue#1414: DSSTATS reports incorrectly that a data source does not
    exist
  - issue#1419: Filtering log results in errors in the log
  - issue#1420: PHP NOTICE editing cdef and vdef items
  - issue#1421: CLI upgrade_database.php PHP Warning on execution
  - issue#1426: Remote poller erroring attempting to verify files
  - issue#1432: Delete confirmation does not disappear
  - issue#1443: Partial Save warnings under Settings -&gt; Mail/Reporting/DNS
  - issue#1447: CLI audit_database.php not detecting database name, and
    failed to create audit tables when run fresh
  - issue#1453: CLI add_graph.php not allowing title to be set
  - issue#1456: Increase minimum php version maintaining support for RHEL6
  - issue#1457: Path-Based Cross-Site Scripting (XSS) issues
  - issue#1458: Error in logs when creating new graphs
  - issue#1459: Automation filter not applied correctly
  - issue#1461: Setting output_format on input type causes no values to be
    returned
  - issue#1464: Poller stuck in infinitely loop causing excess logging
  - issue#1466: No scrollbars in mobile browsers
  - issue#1468: Increase max length of host.snmp_sysObjectID column
  - issue#1471: Undefined function found in global_languages.php
  - issue#1472: Change Device Options - Style needs updating
  - issue#1474: Check possibility for creation of temporary tables on install
  - issue#1487: Undefined constant in ldap.php
  - issue#1483: Create New Graphs - Paw Styling Issue
  - issue#1493: Can't create tree branches with '#' sign
  - feature#1489: Add ability to use parts of OID as value via regex
  - feature: Updated Chinese Simplified translations
  - feature: Updated Dutch translations
  - feature: JavaScript library Chart.js updated 2.7.2
  - feature: Allow snmp formatting functions to detect UTF-8 output</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">-Build version 1.1.38
  - issue#1501: cmd.php poller not stripping alpha from snmp get values
  - issue#1515: Special characters not rendered properly in settings
  - issue#1530: Inconsistent behaviour handling blank Field Name/Value
    when editing data query suggested values
  - issue#1537: Numeric validation not ignoring blank elements</changelog>
  <changelog author="uhaider.msee15seecs@seecs.edu.pk" date="1531483200">-Fixed missing packages php-json, php-ctype, and php-gd in cacti.spec. bsc#1101024
-Fixed Apache2.4 and Apache2.2 runtime configuration issue. bsc#1101139</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
</package>
<package pkgid="f186bb7a41066695897a4db31ac52f8d30832418bbb04cf0b91c16bb3e89fb01" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.12" rel="lp151.3.9.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Change minimum php version to 5.4
-Build version 1.1.37
  - issue#274: Allow Realtime Graph Popup Mode
  - issue#1405: When Data Query columns are wide, they cause rendering
    issues
  - issue#1414: DSSTATS reports incorrectly that a data source does not
    exist
  - issue#1419: Filtering log results in errors in the log
  - issue#1420: PHP NOTICE editing cdef and vdef items
  - issue#1421: CLI upgrade_database.php PHP Warning on execution
  - issue#1426: Remote poller erroring attempting to verify files
  - issue#1432: Delete confirmation does not disappear
  - issue#1443: Partial Save warnings under Settings -&gt; Mail/Reporting/DNS
  - issue#1447: CLI audit_database.php not detecting database name, and
    failed to create audit tables when run fresh
  - issue#1453: CLI add_graph.php not allowing title to be set
  - issue#1456: Increase minimum php version maintaining support for RHEL6
  - issue#1457: Path-Based Cross-Site Scripting (XSS) issues
  - issue#1458: Error in logs when creating new graphs
  - issue#1459: Automation filter not applied correctly
  - issue#1461: Setting output_format on input type causes no values to be
    returned
  - issue#1464: Poller stuck in infinitely loop causing excess logging
  - issue#1466: No scrollbars in mobile browsers
  - issue#1468: Increase max length of host.snmp_sysObjectID column
  - issue#1471: Undefined function found in global_languages.php
  - issue#1472: Change Device Options - Style needs updating
  - issue#1474: Check possibility for creation of temporary tables on install
  - issue#1487: Undefined constant in ldap.php
  - issue#1483: Create New Graphs - Paw Styling Issue
  - issue#1493: Can't create tree branches with '#' sign
  - feature#1489: Add ability to use parts of OID as value via regex
  - feature: Updated Chinese Simplified translations
  - feature: Updated Dutch translations
  - feature: JavaScript library Chart.js updated 2.7.2
  - feature: Allow snmp formatting functions to detect UTF-8 output</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">-Build version 1.1.38
  - issue#1501: cmd.php poller not stripping alpha from snmp get values
  - issue#1515: Special characters not rendered properly in settings
  - issue#1530: Inconsistent behaviour handling blank Field Name/Value
    when editing data query suggested values
  - issue#1537: Numeric validation not ignoring blank elements</changelog>
  <changelog author="uhaider.msee15seecs@seecs.edu.pk" date="1531483200">-Fixed missing packages php-json, php-ctype, and php-gd in cacti.spec. bsc#1101024
-Fixed Apache2.4 and Apache2.2 runtime configuration issue. bsc#1101139</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
</package>
<package pkgid="cf35cafbf5eff47df7d8ce6277559153bcf9032a219bb2b83dc0efdf76414006" name="cacti" arch="src">
  <version epoch="0" ver="1.2.12" rel="lp151.3.9.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Change minimum php version to 5.4
-Build version 1.1.37
  - issue#274: Allow Realtime Graph Popup Mode
  - issue#1405: When Data Query columns are wide, they cause rendering
    issues
  - issue#1414: DSSTATS reports incorrectly that a data source does not
    exist
  - issue#1419: Filtering log results in errors in the log
  - issue#1420: PHP NOTICE editing cdef and vdef items
  - issue#1421: CLI upgrade_database.php PHP Warning on execution
  - issue#1426: Remote poller erroring attempting to verify files
  - issue#1432: Delete confirmation does not disappear
  - issue#1443: Partial Save warnings under Settings -&gt; Mail/Reporting/DNS
  - issue#1447: CLI audit_database.php not detecting database name, and
    failed to create audit tables when run fresh
  - issue#1453: CLI add_graph.php not allowing title to be set
  - issue#1456: Increase minimum php version maintaining support for RHEL6
  - issue#1457: Path-Based Cross-Site Scripting (XSS) issues
  - issue#1458: Error in logs when creating new graphs
  - issue#1459: Automation filter not applied correctly
  - issue#1461: Setting output_format on input type causes no values to be
    returned
  - issue#1464: Poller stuck in infinitely loop causing excess logging
  - issue#1466: No scrollbars in mobile browsers
  - issue#1468: Increase max length of host.snmp_sysObjectID column
  - issue#1471: Undefined function found in global_languages.php
  - issue#1472: Change Device Options - Style needs updating
  - issue#1474: Check possibility for creation of temporary tables on install
  - issue#1487: Undefined constant in ldap.php
  - issue#1483: Create New Graphs - Paw Styling Issue
  - issue#1493: Can't create tree branches with '#' sign
  - feature#1489: Add ability to use parts of OID as value via regex
  - feature: Updated Chinese Simplified translations
  - feature: Updated Dutch translations
  - feature: JavaScript library Chart.js updated 2.7.2
  - feature: Allow snmp formatting functions to detect UTF-8 output</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">-Build version 1.1.38
  - issue#1501: cmd.php poller not stripping alpha from snmp get values
  - issue#1515: Special characters not rendered properly in settings
  - issue#1530: Inconsistent behaviour handling blank Field Name/Value
    when editing data query suggested values
  - issue#1537: Numeric validation not ignoring blank elements</changelog>
  <changelog author="uhaider.msee15seecs@seecs.edu.pk" date="1531483200">-Fixed missing packages php-json, php-ctype, and php-gd in cacti.spec. bsc#1101024
-Fixed Apache2.4 and Apache2.2 runtime configuration issue. bsc#1101139</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
</package>
<package pkgid="387400337846b6430a2fb888de9bdba55d0e275b9ba30d3f84906571da01ec05" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.13" rel="lp151.3.12.1"/>
  <changelog author="uhaider.msee15seecs@seecs.edu.pk" date="1531483200">-Fixed missing packages php-json, php-ctype, and php-gd in cacti.spec. bsc#1101024
-Fixed Apache2.4 and Apache2.2 runtime configuration issue. bsc#1101139</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
</package>
<package pkgid="1a99853d08bcefce15999d8f4d4cb738028874f4487477b5567abdd351aa9a6a" name="cacti" arch="src">
  <version epoch="0" ver="1.2.13" rel="lp151.3.12.1"/>
  <changelog author="uhaider.msee15seecs@seecs.edu.pk" date="1531483200">-Fixed missing packages php-json, php-ctype, and php-gd in cacti.spec. bsc#1101024
-Fixed Apache2.4 and Apache2.2 runtime configuration issue. bsc#1101139</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
</package>
<package pkgid="64ae3401bc24772f70b6d0807fec2098ed033a241254c20763c757f1a6a8d3f7" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.14" rel="lp151.3.15.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850)</changelog>
</package>
<package pkgid="f73bbec39164c7b860345101311bac215cce0c60a3762bae9aaa404166f41344" name="cacti" arch="src">
  <version epoch="0" ver="1.2.14" rel="lp151.3.15.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850)</changelog>
</package>
<package pkgid="c41cdd789cfb59e017590d343e4d9ebe6229da12ab2050dbdae15b8b00841a32" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.9" rel="lp151.3.3.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Build version 1.1.34
  issue#1040: PHP version 7.2 - ERROR PHP WARNING: sizeof()
  issue#1195: Improved Javascript error message handling
  issue#1245: Unable to reorder graph name suggested values
  issue#1256: Error reporting of custom errors not displayed correctly
  issue#1257: Boost excessively logging updates
  issue#1258: cacti.sql updated to match expected schema
  issue#1260: Tab images fail to render due to TrueType support in PHP GD Module
  issue#1261: Automatic logout timeout does not apply to web basic authenication
  issue#1263: CLI utility to validate database schema
  issue#1266: Inconsistent usage graphWrapper CSS causes odd graph zoom behavior
  issue#1268: Regex filters not working properly
  issue#1274: Host CPU script checks value existance to avoid error
  issue#1275: SNMP v3 authPriv fails to work
  issue#1287: JSON calls return validation error in HTML format
  issue#1289: Script Server should output parameter array rather than parameters
  issue#1292: Chrome to aggressively caches Javascript files
  issue#1293: Correctly identify if command 'snmpbulkwalk' is available
  issue#1296: CactiErrorHandler does not ignore PHP suppressed errors
  issue#1300: Automation discovery : New devices added by automation discovery
    have empty SNMP community field
  issue#1302: Automatic logout should not be enforced on login page
  issue#1304: mib_cache.php file contains unsafe transactions for binary logging
  feature: CLI utilily to generate and verify file hashes for installed Cacti
    files
  feature: Logging links back to appropriate areas for troubleshooting
  feature: Logging lists filenames in reverse order</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Build version 1.1.35
  - issue#114: *all_max_peak* percentile calculations incorrect
  - issue#430: Pressing Back often fails to work as expected
  - issue#564: Fail to move items in graph template as desired
  - issue#981: Hyperlinks for Data Profile stats
  - issue#993: Realtime not working on remote pollers for certain data query
  - issue#1244: Errors importing templates with deprecated hashes
  - issue#1251: Allow zoom out through mouse mmiddle button
  - issue#1281: Max OIDs setting is for bulkget and not bulkwalk operations
  - issue#1286: Correct CHUNKED_ENCODING error when retrieving graph with
    some browsers
  - issue#1306: Graphs are not always refreshed properly
  - issue#1309: Provide meaningful authentication errors in graph_json.php
    and graph_image.php
  - issue#1310: Return button fails on change password page
  - issue#1315: Realtime not working on local data collector
  - issue#1316: CDEF Item Value dialog does not update creating items
  - issue#1319: Front end + remote poller - connection timeout issue
  - issue#1321: Use RRDtool pipelining functions within DSSTATS
  - issue#1323: Enhance form layout for readability
  - issue#1329: Spelling errors in automation_networks.php
  - issue: Validate regular expressions if specified in add_graphs.php
  - issue: Ensure compression levels are consistent when importing package</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Build version 1.1.36
  - issue#934: Template names missing in graph management list
  - issue#1211: CDEF and VDEF Item Edit do not use correct procedures
  - issue#1250: Language support does not support localization properly
  - issue#1331: Log Rotation should occur at midnight on system
  - issue#1334: Console-&gt;Users-&gt;(Edit) Permissions checkmark descriptions
    missing
  - issue#1336: Debian test suite reports php error
  - issue#1338: Allow automation to be run in debug mode from GUI
  - issue#1339: First graph of second page does not render
  - issue#1340: Unable to open Time Graph View in new tab
  - issue#1348: Toggle context menu of Zoom
  - issue#1351: Errorimage does not render on systems without GD ttf support
  - issue#1353: New installation without config.php silently throws errors
  - issue#1355: Single tree can have the order of the tree changed
  - issue#1357: Data Profile disable fields shown temporarily as editable
  - issue#1359: Settings page generates error for removed plugin tab
  - issue#1362: DSStats Avg/Peak function broken due to change in RRDtool
    processing
  - issue#1365: Plugin Management enforce folder name
  - issue#1366: Improve error/info message display
  - issue#1380: Potential failure when updating script type
  - issue#1384: When installing/enabling plugins, current user and admin should
    get permissions
  - issue#1386: form_selectable_cell() ignores width if no style_or_class is
    passed
  - issue#1389: Poller is including plugins that are not installed
  - issue#1390: Plugin uninstall should prompt user before removal
  - issue#1396: Prevent installation/uninstallation of a plugin if dependency
    is present
  - issue#1397: Distinguish between plugin tabs and core tabs in settings
  - issue: Allow dynamic setting of from name when emailing
  - issue: Data Query Cache filter layout more consistent
  - issue: Minor plugin permissions format change
  - issue: Implementation of error handling causes errors creating New Graphs
  - issue: Deprecated DDStats setting removed
  - issue: Graph context menu items are now context aware
  - issue: Validate spine path before allowing enabling of spine
  - issue: Errored settings fields now highlighted correctly on error
  - issue: Add the Default Device to the Default Tree at install time
  - issue: Secpass password verification error message unuseful
  - feature: Searching of SNMP Index in View Data Query Cache now works
  - feature: Presets now have default device Template
  - feature: JavaScript library c3.js updated (v0.4.21) / jstree.js (3.3.5)
  - feature: PHPSecLib updated 2.0.10
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Change minimum php version to 5.4
-Build version 1.1.37
  - issue#274: Allow Realtime Graph Popup Mode
  - issue#1405: When Data Query columns are wide, they cause rendering
    issues
  - issue#1414: DSSTATS reports incorrectly that a data source does not
    exist
  - issue#1419: Filtering log results in errors in the log
  - issue#1420: PHP NOTICE editing cdef and vdef items
  - issue#1421: CLI upgrade_database.php PHP Warning on execution
  - issue#1426: Remote poller erroring attempting to verify files
  - issue#1432: Delete confirmation does not disappear
  - issue#1443: Partial Save warnings under Settings -&gt; Mail/Reporting/DNS
  - issue#1447: CLI audit_database.php not detecting database name, and
    failed to create audit tables when run fresh
  - issue#1453: CLI add_graph.php not allowing title to be set
  - issue#1456: Increase minimum php version maintaining support for RHEL6
  - issue#1457: Path-Based Cross-Site Scripting (XSS) issues
  - issue#1458: Error in logs when creating new graphs
  - issue#1459: Automation filter not applied correctly
  - issue#1461: Setting output_format on input type causes no values to be
    returned
  - issue#1464: Poller stuck in infinitely loop causing excess logging
  - issue#1466: No scrollbars in mobile browsers
  - issue#1468: Increase max length of host.snmp_sysObjectID column
  - issue#1471: Undefined function found in global_languages.php
  - issue#1472: Change Device Options - Style needs updating
  - issue#1474: Check possibility for creation of temporary tables on install
  - issue#1487: Undefined constant in ldap.php
  - issue#1483: Create New Graphs - Paw Styling Issue
  - issue#1493: Can't create tree branches with '#' sign
  - feature#1489: Add ability to use parts of OID as value via regex
  - feature: Updated Chinese Simplified translations
  - feature: Updated Dutch translations
  - feature: JavaScript library Chart.js updated 2.7.2
  - feature: Allow snmp formatting functions to detect UTF-8 output</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">-Build version 1.1.38
  - issue#1501: cmd.php poller not stripping alpha from snmp get values
  - issue#1515: Special characters not rendered properly in settings
  - issue#1530: Inconsistent behaviour handling blank Field Name/Value
    when editing data query suggested values
  - issue#1537: Numeric validation not ignoring blank elements</changelog>
  <changelog author="uhaider.msee15seecs@seecs.edu.pk" date="1531483200">-Fixed missing packages php-json, php-ctype, and php-gd in cacti.spec. bsc#1101024
-Fixed Apache2.4 and Apache2.2 runtime configuration issue. bsc#1101139</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
</package>
<package pkgid="63179dbbaeb0117fe9be0bdd450d85bb21bf24a4543ab21382b9f97b380d334f" name="cacti" arch="src">
  <version epoch="0" ver="1.2.9" rel="lp151.3.3.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Build version 1.1.34
  issue#1040: PHP version 7.2 - ERROR PHP WARNING: sizeof()
  issue#1195: Improved Javascript error message handling
  issue#1245: Unable to reorder graph name suggested values
  issue#1256: Error reporting of custom errors not displayed correctly
  issue#1257: Boost excessively logging updates
  issue#1258: cacti.sql updated to match expected schema
  issue#1260: Tab images fail to render due to TrueType support in PHP GD Module
  issue#1261: Automatic logout timeout does not apply to web basic authenication
  issue#1263: CLI utility to validate database schema
  issue#1266: Inconsistent usage graphWrapper CSS causes odd graph zoom behavior
  issue#1268: Regex filters not working properly
  issue#1274: Host CPU script checks value existance to avoid error
  issue#1275: SNMP v3 authPriv fails to work
  issue#1287: JSON calls return validation error in HTML format
  issue#1289: Script Server should output parameter array rather than parameters
  issue#1292: Chrome to aggressively caches Javascript files
  issue#1293: Correctly identify if command 'snmpbulkwalk' is available
  issue#1296: CactiErrorHandler does not ignore PHP suppressed errors
  issue#1300: Automation discovery : New devices added by automation discovery
    have empty SNMP community field
  issue#1302: Automatic logout should not be enforced on login page
  issue#1304: mib_cache.php file contains unsafe transactions for binary logging
  feature: CLI utilily to generate and verify file hashes for installed Cacti
    files
  feature: Logging links back to appropriate areas for troubleshooting
  feature: Logging lists filenames in reverse order</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Build version 1.1.35
  - issue#114: *all_max_peak* percentile calculations incorrect
  - issue#430: Pressing Back often fails to work as expected
  - issue#564: Fail to move items in graph template as desired
  - issue#981: Hyperlinks for Data Profile stats
  - issue#993: Realtime not working on remote pollers for certain data query
  - issue#1244: Errors importing templates with deprecated hashes
  - issue#1251: Allow zoom out through mouse mmiddle button
  - issue#1281: Max OIDs setting is for bulkget and not bulkwalk operations
  - issue#1286: Correct CHUNKED_ENCODING error when retrieving graph with
    some browsers
  - issue#1306: Graphs are not always refreshed properly
  - issue#1309: Provide meaningful authentication errors in graph_json.php
    and graph_image.php
  - issue#1310: Return button fails on change password page
  - issue#1315: Realtime not working on local data collector
  - issue#1316: CDEF Item Value dialog does not update creating items
  - issue#1319: Front end + remote poller - connection timeout issue
  - issue#1321: Use RRDtool pipelining functions within DSSTATS
  - issue#1323: Enhance form layout for readability
  - issue#1329: Spelling errors in automation_networks.php
  - issue: Validate regular expressions if specified in add_graphs.php
  - issue: Ensure compression levels are consistent when importing package</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Build version 1.1.36
  - issue#934: Template names missing in graph management list
  - issue#1211: CDEF and VDEF Item Edit do not use correct procedures
  - issue#1250: Language support does not support localization properly
  - issue#1331: Log Rotation should occur at midnight on system
  - issue#1334: Console-&gt;Users-&gt;(Edit) Permissions checkmark descriptions
    missing
  - issue#1336: Debian test suite reports php error
  - issue#1338: Allow automation to be run in debug mode from GUI
  - issue#1339: First graph of second page does not render
  - issue#1340: Unable to open Time Graph View in new tab
  - issue#1348: Toggle context menu of Zoom
  - issue#1351: Errorimage does not render on systems without GD ttf support
  - issue#1353: New installation without config.php silently throws errors
  - issue#1355: Single tree can have the order of the tree changed
  - issue#1357: Data Profile disable fields shown temporarily as editable
  - issue#1359: Settings page generates error for removed plugin tab
  - issue#1362: DSStats Avg/Peak function broken due to change in RRDtool
    processing
  - issue#1365: Plugin Management enforce folder name
  - issue#1366: Improve error/info message display
  - issue#1380: Potential failure when updating script type
  - issue#1384: When installing/enabling plugins, current user and admin should
    get permissions
  - issue#1386: form_selectable_cell() ignores width if no style_or_class is
    passed
  - issue#1389: Poller is including plugins that are not installed
  - issue#1390: Plugin uninstall should prompt user before removal
  - issue#1396: Prevent installation/uninstallation of a plugin if dependency
    is present
  - issue#1397: Distinguish between plugin tabs and core tabs in settings
  - issue: Allow dynamic setting of from name when emailing
  - issue: Data Query Cache filter layout more consistent
  - issue: Minor plugin permissions format change
  - issue: Implementation of error handling causes errors creating New Graphs
  - issue: Deprecated DDStats setting removed
  - issue: Graph context menu items are now context aware
  - issue: Validate spine path before allowing enabling of spine
  - issue: Errored settings fields now highlighted correctly on error
  - issue: Add the Default Device to the Default Tree at install time
  - issue: Secpass password verification error message unuseful
  - feature: Searching of SNMP Index in View Data Query Cache now works
  - feature: Presets now have default device Template
  - feature: JavaScript library c3.js updated (v0.4.21) / jstree.js (3.3.5)
  - feature: PHPSecLib updated 2.0.10
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Change minimum php version to 5.4
-Build version 1.1.37
  - issue#274: Allow Realtime Graph Popup Mode
  - issue#1405: When Data Query columns are wide, they cause rendering
    issues
  - issue#1414: DSSTATS reports incorrectly that a data source does not
    exist
  - issue#1419: Filtering log results in errors in the log
  - issue#1420: PHP NOTICE editing cdef and vdef items
  - issue#1421: CLI upgrade_database.php PHP Warning on execution
  - issue#1426: Remote poller erroring attempting to verify files
  - issue#1432: Delete confirmation does not disappear
  - issue#1443: Partial Save warnings under Settings -&gt; Mail/Reporting/DNS
  - issue#1447: CLI audit_database.php not detecting database name, and
    failed to create audit tables when run fresh
  - issue#1453: CLI add_graph.php not allowing title to be set
  - issue#1456: Increase minimum php version maintaining support for RHEL6
  - issue#1457: Path-Based Cross-Site Scripting (XSS) issues
  - issue#1458: Error in logs when creating new graphs
  - issue#1459: Automation filter not applied correctly
  - issue#1461: Setting output_format on input type causes no values to be
    returned
  - issue#1464: Poller stuck in infinitely loop causing excess logging
  - issue#1466: No scrollbars in mobile browsers
  - issue#1468: Increase max length of host.snmp_sysObjectID column
  - issue#1471: Undefined function found in global_languages.php
  - issue#1472: Change Device Options - Style needs updating
  - issue#1474: Check possibility for creation of temporary tables on install
  - issue#1487: Undefined constant in ldap.php
  - issue#1483: Create New Graphs - Paw Styling Issue
  - issue#1493: Can't create tree branches with '#' sign
  - feature#1489: Add ability to use parts of OID as value via regex
  - feature: Updated Chinese Simplified translations
  - feature: Updated Dutch translations
  - feature: JavaScript library Chart.js updated 2.7.2
  - feature: Allow snmp formatting functions to detect UTF-8 output</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">-Build version 1.1.38
  - issue#1501: cmd.php poller not stripping alpha from snmp get values
  - issue#1515: Special characters not rendered properly in settings
  - issue#1530: Inconsistent behaviour handling blank Field Name/Value
    when editing data query suggested values
  - issue#1537: Numeric validation not ignoring blank elements</changelog>
  <changelog author="uhaider.msee15seecs@seecs.edu.pk" date="1531483200">-Fixed missing packages php-json, php-ctype, and php-gd in cacti.spec. bsc#1101024
-Fixed Apache2.4 and Apache2.2 runtime configuration issue. bsc#1101139</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
</package>
<package pkgid="f8fbe38cba166e32c803d9ee462d4a061e91bbba6f6e4060d77657b0c2bbbe22" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.11" rel="lp151.3.6.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516190400">- Update to version 1.1.31
  - issue#15: Spine cause CPU usage up to 100%
  - issue#32: Support noAuthNoPriv in Spine
  - issue#34: Re-introduce check for relocatable Net-SNMP and
    development files
  - issue#35: SNMP OID range checks cause some snmpget's to fail
  - issue#38: SNMP Ping timeouts not reported properly
  - issue#39: Spine should use same logging format as Cacti
  - issue#41: Spine cause CPU usage up to 100%
  - issue#42: Boost table keeps populating with boost disabled</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516622400">- Update to version 1.1.32
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516708800">- Update to version 1.1.33
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
</package>
<package pkgid="c685852501b724a228bd977c445517a84327873880af2d387990e7ee36eac7e1" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp151.3.6.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516190400">- Update to version 1.1.31
  - issue#15: Spine cause CPU usage up to 100%
  - issue#32: Support noAuthNoPriv in Spine
  - issue#34: Re-introduce check for relocatable Net-SNMP and
    development files
  - issue#35: SNMP OID range checks cause some snmpget's to fail
  - issue#38: SNMP Ping timeouts not reported properly
  - issue#39: Spine should use same logging format as Cacti
  - issue#41: Spine cause CPU usage up to 100%
  - issue#42: Boost table keeps populating with boost disabled</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516622400">- Update to version 1.1.32
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516708800">- Update to version 1.1.33
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
</package>
<package pkgid="b4dd847b193fd2c811130d329cfae5a961bc8f9543f142d35446b6ed52411ea3" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.12" rel="lp151.3.9.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516622400">- Update to version 1.1.32
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516708800">- Update to version 1.1.33
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
</package>
<package pkgid="205c634d86d50152507bf08f0bcbf5829cd441e7fe0de62091b08097070c434b" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="lp151.3.9.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516622400">- Update to version 1.1.32
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516708800">- Update to version 1.1.33
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
</package>
<package pkgid="5961d20ceebb4f6241588eab58594470d5c02da97628fbdf54e71dcf5b4d14ea" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.13" rel="lp151.3.12.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516708800">- Update to version 1.1.33
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
</package>
<package pkgid="4a92abf28cae7154b895d44954c2dee6d002a3c9279a0143c6b23ab9b98b3ab6" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="lp151.3.12.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516708800">- Update to version 1.1.33
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
</package>
<package pkgid="71f573e4129d60831b6113b4729c821f1abb152c7fa83f802f6f91fed41807fb" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.14" rel="lp151.3.15.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
</package>
<package pkgid="a073c6a98007584cdd7e9de5843041b66bda84279ac24e75ba17f7f15a15b4a8" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="lp151.3.15.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
</package>
<package pkgid="0ed3fafc17e600828d62236a55aa28cbb521499b315559d7a29848cfdb4c111a" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.9" rel="lp151.3.3.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1515067200">- Update to version 1.1.30
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516190400">- Update to version 1.1.31
  - issue#15: Spine cause CPU usage up to 100%
  - issue#32: Support noAuthNoPriv in Spine
  - issue#34: Re-introduce check for relocatable Net-SNMP and
    development files
  - issue#35: SNMP OID range checks cause some snmpget's to fail
  - issue#38: SNMP Ping timeouts not reported properly
  - issue#39: Spine should use same logging format as Cacti
  - issue#41: Spine cause CPU usage up to 100%
  - issue#42: Boost table keeps populating with boost disabled</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516622400">- Update to version 1.1.32
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516708800">- Update to version 1.1.33
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
</package>
<package pkgid="16a9facf86ac45a820b4c7076e1eefde5834e32079e9339987c29ace6feb54fd" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.9" rel="lp151.3.3.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1515067200">- Update to version 1.1.30
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516190400">- Update to version 1.1.31
  - issue#15: Spine cause CPU usage up to 100%
  - issue#32: Support noAuthNoPriv in Spine
  - issue#34: Re-introduce check for relocatable Net-SNMP and
    development files
  - issue#35: SNMP OID range checks cause some snmpget's to fail
  - issue#38: SNMP Ping timeouts not reported properly
  - issue#39: Spine should use same logging format as Cacti
  - issue#41: Spine cause CPU usage up to 100%
  - issue#42: Boost table keeps populating with boost disabled</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516622400">- Update to version 1.1.32
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516708800">- Update to version 1.1.33
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
</package>
<package pkgid="86c1335c94f970eba470be52d540b03fe8048f980eb5ac33289d2e8c00023eba" name="cairo" arch="src">
  <version epoch="0" ver="1.16.0" rel="lp151.5.3.1"/>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
</package>
<package pkgid="e018300bc45872938360534527ce1ac171297160224f80ab8d28c2cda229db59" name="cairo-devel" arch="i586">
  <version epoch="0" ver="1.16.0" rel="lp151.5.3.1"/>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
</package>
<package pkgid="0c46d040a161a0fcf523c4c6b26c21b530e22b160cb054f37242545bcfd105b4" name="cairo-devel" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="lp151.5.3.1"/>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
</package>
<package pkgid="494917080d23cb5ce73771054a4e592feb1c9950000cee3c2efb616310523a70" name="cairo-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="lp151.5.3.1"/>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
</package>
<package pkgid="56100c18868b720a70dfd061ed17cdcf38a975e8d69e8fff86a3ce663fa2c151" name="cairo-tools" arch="i586">
  <version epoch="0" ver="1.16.0" rel="lp151.5.3.1"/>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
</package>
<package pkgid="ddbdbe6366d04718dc3513f3a716a7debd21f3c1eacff24e538fff473344d8a9" name="cairo-tools" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="lp151.5.3.1"/>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
</package>
<package pkgid="52d76783540d79b06051c889aa270cc82a7eb72ff69c653d56b5832bad24b85a" name="caja-extension-nextcloud" arch="noarch">
  <version epoch="0" ver="2.5.3" rel="lp151.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1472212800">- Initial package.</changelog>
  <changelog author="ecsos@opensuse.org" date="1475236800">- Update to version 2.2.4:
  * Dolphin Plugin: Use the Application name for the socket path
    (gh#owncloud/client#5172).
  * SyncEngine: Fix renaming of directories when files are changed
    (gh#owncloud/client#5195).
  * Selective Sync: Fix HTTP request loop and show error in view
    (gh#owncloud/client#5154).
  * ConnectionValidator: Properly handle error in status.php
    request (gh#owncloud/client#5188).
  * Discovery: Set thread priority to low (gh#owncloud/client#5017).
  * ExcludeFiles: Fix when the directory casing is not the same in
    the settings and in the FS.
  * ShareLink: Ensure the password line edit is enabled
    (gh#owncloud/client#5117).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Add nextcloud-client-fix-tray-workaround.patch: fix the tray
  workaround (from commit 98efb07 of owncloud-client).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486123200">- Add nextcloud-client-fix-dolphin.patch from bruno_friedmann to
  fix the Dolphin plugin.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1490270400">- Update to version 2.3.1 (changes since 2.2.4):
  * Decreased memory usage during synchronisation.
  * Overlay icons: Lower CPU usage.
  * Allow to not synchronise the server's external storages by
    default.
  * Switch to the new Nextcloud Server WebDAV endpoint.
  * Chunking NG: New file upload chunking algorithm for
    Nextcloud Server 11.0.
  * Allow to synchronise a directory to multiple different servers
    (filename change from .csync_journal.db to _sync_$HASH.db).
  * Conflicts: Use the local mtime for the conflict file name
    (gh#owncloud/client#5273).
  * Add a "Sync now" menu item.
  * Improve SSL Client certificate support (Show UI, Store keys in
    keychain).
  * Propagator: Upload smaller files in parallel.
  * Sync Engine: Read data-fingerprint property to detect backups
    (gh#owncloud/client#2325).
  * GUI: Show link to create an application password/token for
    synchronising.
  * Share dialogue: Add a "Mail link" button.
  * A Caja file manager plugin.
  * Make the "backup detected" message not triggered in wrong cases.
  * SyncEngine: Fix directory renaming when files are changed
    (gh#owncloud/client#5192)
  * Fix a reconnect bug if status.php intermittently returns wrong
    data (gh#owncloud/client#5188).
  * Improve synchronisation scheduling (gh#owncloud/client#5317).
  * Overlay icons: Improvements in correctnes.
  * Tray menu: Only update on demand to fix GNU/Linux desktop
    integration glitches.
  * Progress: Better time/bandwidth estimations.
  * Network: Follow certain HTTP redirects (gh#owncloud/client#2791).
  * Network: Remove all cookies (including load balancers, etc.)
    when logging out.
  * Discovery thread: Low priority.
  * nextcloudsync.log: Write during propagation.
  * Excludes: Consider files in hidden directories excluded
    (gh#owncloud/client#5163).
  * Allow the synchronised directory to be a symlinked directory.
  * Improve HTTP redirect handling (gh#owncloud/client#5555).
  * Blacklist: Escalate repeated soft error to normal error
    (gh#owncloud/client#5500).
  * Fix the URL for linking to application password generation for
    ownCloud 10.0 (gh#owncloud/client#5605).
  * Shibboleth bugfixes.
  * Fixes with regards to low disc space.
  * A tonne of other bugfixes.
  * Refactorings.
  * Improve documentation.
  * Crash fixes.
- Add nextcloud-client-remove-datetime.patch: Remove __TIME__ and
  __DATE__.
- Rebase and rename nextcloud-client-fix-nemo-appname.patch to
  nextcloud-client-fix-caja-nemo-appnames.patch.
- Remove nextcloud-client-fix-dolphin.patch,
  nextcloud-client-fix-ru-typo.patch,
  nextcloud-client-fix-tray-workaround.patch: fixed upstream.
- Rename 100-sync-inotify.conf to the less conflicting
  100-nextcloud-sync-inotify.conf.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1497441600">- Only enable documentation for openSUSE Leap 14.3 and newer
  (boo#1044061).</changelog>
  <changelog author="ecsos@opensuse.org" date="1500638400">- update to 2.3.2
  * Fix more crashes (thanks to everyone submitting to our crash
    reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value
    (3936)
  * Fix disk free check on Windows when opening the local DB
- insert Requires: %{soname}%{sover} = %{version} because lib
  does not up- or downgrade by up- or downgrade from client itself.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1512475200">- Update to version 2.3.3:
  * Chunking NG: Don't use old chunking on new DAV endpoint
    (gh#owncloud/client#5855).
  * Selective Synch: Skip excluded directories when reading DB,
    don't let them show errors (gh#owncloud/client#5772).
  * Settings: Make the window bigger so the Qt version is always
    visible (gh#owncloud/client#5760).
  * Share links: Show a warning that public link shares are public
    (gh#owncloud/client#5786).
  * Downloads: Re-trigger directory discovery on HTTP 404
    (gh#owncloud/client#5799).
  * Notifications: Propagate "Dismiss" as DELETE to server
    (gh#owncloud/client#5922).
  * SynchJournalDB: Don't use ._ as a filename pattern if that does
    not work because of SMB storage settings
    (gh#owncloud/client#5844)
  * SynchJournalDB: Log reason for sqlite3 opening errors.
  * Stop maintaining Qt 4 support.
  * New synch state icon design.
  * Add a state-information icon.
  * Update the icon patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514203200">- Use a better tarball.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519905600">- fix build error for Tumbleweed</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1528804800">- Add nextcloud-client-2.3.3-fix-qt-5.11.patch: Fix Qt 5.11+
  compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.5.0:
  * See https://github.com/nextcloud/desktop/compare/57bc791...v2.5.0
- Remove nextcloud-client-2.3.3-fix-qt-5.11.patch,
  nextcloud-client-fix-caja-nemo-appnames.patch: fixed upstream.
- Rebase nextcloud-client-fix-rpath.patch,
  nextcloud-client-remove-datetime.patch.
- Build with libcloudproviders.
- Drop openSUSE Leap 42.3 and older support.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1543924800">- Update to version 2.5.1:
  * See https://github.com/nextcloud/desktop/compare/v2.5.0...v2.5.1</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1546430400">- Add nextcloud-client-fix-qt-5.12.patch: Fix an error during build
  with Qt 5.12 (commit 1295884).</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1546862400">- Append to nextcloud-client-fix-qt-5.12.patch a fix for a
  QtWebEngine crash on Qt 5.12 (commit 09b0055, boo#1120310).</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1547553600">- Stop building with libcloudproviders (boo#1118327).</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1576152000">- Update to version 2.5.3:
  * See https://github.com/nextcloud/desktop/compare/v2.5.1...v2.5.3
- Dropped nextcloud-client-fix-qt-5.12.patch: it's included in v2.5.3</changelog>
</package>
<package pkgid="84ab9261a26cba62d653620703e013dd791e8bc5eeaaa7e26f5a69d38bc6c481" name="calamares" arch="src">
  <version epoch="0" ver="3.2.15" rel="lp151.4.3.3"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504785600">- Update to Calamares 3.1.4:
  - A race condition leading to crashes when starting Calamares
    has been resolved.
  - Packages module has been seriously revamped; it is now also
    translatable.
  - Translations in the partitioning module have been improved.
  - Encrypted swap is now correctly configured.
  - Minor visual improvements.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
</package>
<package pkgid="911757cced05a0eb9c53e063b04b0377edb2383a31081cd0d218daf571f38012" name="calamares" arch="x86_64">
  <version epoch="0" ver="3.2.15" rel="lp151.4.3.3"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504785600">- Update to Calamares 3.1.4:
  - A race condition leading to crashes when starting Calamares
    has been resolved.
  - Packages module has been seriously revamped; it is now also
    translatable.
  - Translations in the partitioning module have been improved.
  - Encrypted swap is now correctly configured.
  - Minor visual improvements.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
</package>
<package pkgid="56b64e4882f191277991d3cd3b84bd6cbc65995c791de48f231c60c4cfff8261" name="calamares" arch="src">
  <version epoch="0" ver="3.2.15" rel="lp151.4.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1577102400">- Exclude /etc/dracut.conf.d/02-livecd.conf from copying into
  filesystem, otherwise installation may fail with with
  "Failed to run dracut on the target" error (boo#1159739)</changelog>
</package>
<package pkgid="e9195fdf0bc3d0b000941af13b7ff45338938cb16c39116005a82972b0b3346f" name="calamares" arch="x86_64">
  <version epoch="0" ver="3.2.15" rel="lp151.4.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1577102400">- Exclude /etc/dracut.conf.d/02-livecd.conf from copying into
  filesystem, otherwise installation may fail with with
  "Failed to run dracut on the target" error (boo#1159739)</changelog>
</package>
<package pkgid="e807c34a7984341fb22c3efe4226d24e873490a2796d267680fc08684e05f782" name="calamares" arch="src">
  <version epoch="0" ver="3.2.15" rel="lp151.4.9.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1577102400">- Exclude /etc/dracut.conf.d/02-livecd.conf from copying into
  filesystem, otherwise installation may fail with with
  "Failed to run dracut on the target" error (boo#1159739)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1582027200">- Use kdesu to start Calamares:
  - xdg-su may autoselect gnomesu which fails (boo#1164072);
  - pkexec may have theme issues.</changelog>
</package>
<package pkgid="2b3b37a7eb1115b4f84de8e2353264106ca0dc6842b77f7f4568dbfb6a8c5527" name="calamares" arch="x86_64">
  <version epoch="0" ver="3.2.15" rel="lp151.4.9.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1577102400">- Exclude /etc/dracut.conf.d/02-livecd.conf from copying into
  filesystem, otherwise installation may fail with with
  "Failed to run dracut on the target" error (boo#1159739)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1582027200">- Use kdesu to start Calamares:
  - xdg-su may autoselect gnomesu which fails (boo#1164072);
  - pkexec may have theme issues.</changelog>
</package>
<package pkgid="df65bf05eb90bc20ebc41c237561619b9f79c9dc36a0f5707e8cd64c83b60f74" name="calamares-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.2.15" rel="lp151.4.3.3"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504785600">- Update to Calamares 3.1.4:
  - A race condition leading to crashes when starting Calamares
    has been resolved.
  - Packages module has been seriously revamped; it is now also
    translatable.
  - Translations in the partitioning module have been improved.
  - Encrypted swap is now correctly configured.
  - Minor visual improvements.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
</package>
<package pkgid="3f8668d2b261f35907d688d3032d7db60e14fc12c0dd367f4dfb26b5dad03a24" name="calamares-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.2.15" rel="lp151.4.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1577102400">- Exclude /etc/dracut.conf.d/02-livecd.conf from copying into
  filesystem, otherwise installation may fail with with
  "Failed to run dracut on the target" error (boo#1159739)</changelog>
</package>
<package pkgid="2e41c51e84fa226ebbb1164bb3a2f09e0ae5f237b3e481ec15818b6a3a0202b6" name="calamares-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.2.15" rel="lp151.4.9.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1577102400">- Exclude /etc/dracut.conf.d/02-livecd.conf from copying into
  filesystem, otherwise installation may fail with with
  "Failed to run dracut on the target" error (boo#1159739)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1582027200">- Use kdesu to start Calamares:
  - xdg-su may autoselect gnomesu which fails (boo#1164072);
  - pkexec may have theme issues.</changelog>
</package>
<package pkgid="70ae6d662f67c944238c334f1016276b264dabecbc829ae51c6eca2b9fcae1b2" name="calamares-webview" arch="x86_64">
  <version epoch="0" ver="3.2.15" rel="lp151.4.3.3"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504785600">- Update to Calamares 3.1.4:
  - A race condition leading to crashes when starting Calamares
    has been resolved.
  - Packages module has been seriously revamped; it is now also
    translatable.
  - Translations in the partitioning module have been improved.
  - Encrypted swap is now correctly configured.
  - Minor visual improvements.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
</package>
<package pkgid="73042e38b11c048efb864ff64353054e5b205e5e4fa46ea1690c67342eeaad45" name="calamares-webview" arch="x86_64">
  <version epoch="0" ver="3.2.15" rel="lp151.4.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1577102400">- Exclude /etc/dracut.conf.d/02-livecd.conf from copying into
  filesystem, otherwise installation may fail with with
  "Failed to run dracut on the target" error (boo#1159739)</changelog>
</package>
<package pkgid="c640a3b38ed1aca72993815e6898210d3b26e67b59e329b837578000c511f938" name="calamares-webview" arch="x86_64">
  <version epoch="0" ver="3.2.15" rel="lp151.4.9.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1577102400">- Exclude /etc/dracut.conf.d/02-livecd.conf from copying into
  filesystem, otherwise installation may fail with with
  "Failed to run dracut on the target" error (boo#1159739)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1582027200">- Use kdesu to start Calamares:
  - xdg-su may autoselect gnomesu which fails (boo#1164072);
  - pkexec may have theme issues.</changelog>
</package>
<package pkgid="49b84d3769f3e318a8b6fec7b12e3dd879e1e738f069cc0ddda52ade0a09b4b3" name="calamaris" arch="noarch">
  <version epoch="0" ver="2.59" rel="lp151.3.3.1"/>
  <changelog author="tcrhak@suse.cz" date="1026561600">- update to version 2.50</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="tcrhak@suse.cz" date="1045483200">- update to version 2.57</changelog>
  <changelog author="tcrhak@suse.cz" date="1059480000">- update to version 2.58</changelog>
  <changelog author="adrian@suse.de" date="1073822400">- add %defattr</changelog>
  <changelog author="tcrhak@suse.cz" date="1091793600">- update to 2.59</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update download url
- Clenup spec file with spec-cleaner
- Build as noarch</changelog>
  <changelog author="mpluskal@suse.com" date="1529409600">- More spec file modernisations</changelog>
  <changelog author="Kasimir _ &lt;kasimir_@outlook.de&gt;" date="1566820800">- Fix generation of reports with Perl &gt;= 5.12 (boo#1145328)
  + 0001_perl.patch</changelog>
</package>
<package pkgid="a998101ff794c0e29d37a40b1dde3133cd1e75217cec89aaa7ce0d36f7d6b1f8" name="calamaris" arch="src">
  <version epoch="0" ver="2.59" rel="lp151.3.3.1"/>
  <changelog author="grimmer@suse.de" date="930916800">- initial package (Version 2.27)</changelog>
  <changelog author="grimmer@suse.de" date="931176000">- corrected permissions for /usr/bin/calamaris</changelog>
  <changelog author="bs@suse.de" date="937224000">- ran old prepare_spec on spec file to switch to new prepare_spec.</changelog>
  <changelog author="grimmer@suse.de" date="945950400">- new version (2.29)
- specfile cleanups</changelog>
  <changelog author="grimmer@suse.de" date="948456000">- spec file cleanups (added version- and manpath macros)</changelog>
  <changelog author="nadvornik@suse.cz" date="953812800">- added BuildRoot</changelog>
  <changelog author="nadvornik@suse.cz" date="970833600">- fixed Copyright</changelog>
  <changelog author="nadvornik@suse.cz" date="973771200">- renamed calamari -&gt; calamaris
- update to 2.40</changelog>
  <changelog author="adostal@suse.cz" date="996494400">- change gz to bz2</changelog>
  <changelog author="tcrhak@suse.cz" date="1007985600">- update to 2.42</changelog>
  <changelog author="tcrhak@suse.cz" date="1026561600">- update to version 2.50</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="tcrhak@suse.cz" date="1045483200">- update to version 2.57</changelog>
  <changelog author="tcrhak@suse.cz" date="1059480000">- update to version 2.58</changelog>
  <changelog author="adrian@suse.de" date="1073822400">- add %defattr</changelog>
  <changelog author="tcrhak@suse.cz" date="1091793600">- update to 2.59</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update download url
- Clenup spec file with spec-cleaner
- Build as noarch</changelog>
  <changelog author="mpluskal@suse.com" date="1529409600">- More spec file modernisations</changelog>
  <changelog author="Kasimir _ &lt;kasimir_@outlook.de&gt;" date="1566820800">- Fix generation of reports with Perl &gt;= 5.12 (boo#1145328)
  + 0001_perl.patch</changelog>
</package>
<package pkgid="e42662f967b0606a16908e170d9550b935c762513c67212b95d9f1cf617fb58e" name="cargo" arch="i586">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="ef5ee70e630eb20a2010d46d3c265cb763ed21528bd4b1ed182e98d388e5527c" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="dfde874d8f54bcd82003bb74a6e6b8d961ac1538cc667410b559a0533e776fe5" name="cargo" arch="i586">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="9a282d1f72da556fc87fab09ad5cd49298aeba3aecf42d42d35cc8a33c0ba8fd" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="2b72512dd64a93fdcf8263604cee1cfb3c117a13b5428c9cd15ff406ea48d1c0" name="cargo" arch="i586">
  <version epoch="0" ver="1.36.0" rel="lp151.5.8.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="03a20d831f2fd3c12b6d8a819bc6c79377f662f02c9b835889822b5af274d1d3" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp151.5.8.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="5fb5ffa17a6cffcf9f295b89e23aa3295040566a1e6a932c910f37565731273c" name="cargo" arch="i586">
  <version epoch="0" ver="1.43.1" rel="lp151.5.13.1"/>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-61206-assume-tarball-llvm-is-fresh.patch - Upstream fix to make
  LLVM not be rebuilt during the installation phase.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="cb73d4db8f42998faed5e26e3406c7f9eaff0c0279b25fab98f87beb9cbd4009" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.43.1" rel="lp151.5.13.1"/>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-61206-assume-tarball-llvm-is-fresh.patch - Upstream fix to make
  LLVM not be rebuilt during the installation phase.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="b2c784b680266c38db1ca142368d5a2d21b74871a1437102c154d003fdb43b56" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="0bfaf4f4d02750af5bc0f75299bc25827dd534694511e2217371760e13a05df0" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="5a5170bc447353ad7ee080b825098445dadd85a44bbfcd3c961b960d8e1861fa" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.36.0" rel="lp151.5.8.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="6a27143210cf272ab4a94ae67450a1014aa28f776799100328a157d27e7b2b49" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.43.1" rel="lp151.5.13.1"/>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-61206-assume-tarball-llvm-is-fresh.patch - Upstream fix to make
  LLVM not be rebuilt during the installation phase.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="f08e06caeacf703cdb9c8cf298b323109cdc18b675838f67730fa6f5e01fe772" name="catatonit" arch="src">
  <version epoch="0" ver="0.1.5" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="671ca657f7f78b0c8b080e65e1168c90a0b0ad7456e1753fd300eee22b9e950a" name="catatonit" arch="x86_64">
  <version epoch="0" ver="0.1.5" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="de305a61f68a9b953cff4f7883a453371fe654a3e5c8f46319060eed0e4d3547" name="cdda2wav" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1417262400">- Update to new upstream release 3.01~a25
  * Precursory work for localization
- Run spec-beautifier for spec files
- Reenable missing capability support [bnc#899718]</changelog>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
</package>
<package pkgid="4af31c37d9e12aebd6e9cb7267c2fd39b651e46883ef595c35929c6cb28598a4" name="cdda2wav" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1417262400">- Update to new upstream release 3.01~a25
  * Precursory work for localization
- Run spec-beautifier for spec files
- Reenable missing capability support [bnc#899718]</changelog>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
</package>
<package pkgid="e17cb108a29daf4877c74270d21093fd807b9f8a0677e00eb57a3d53d40045a8" name="cdda2wav" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.6.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="b451a48ced5c11e21e5d82fae68f1414bfc579c7b2f3e586009a7e56e2ac6342" name="cdda2wav" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.6.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="a363409a7edc7cb5e8abf0039e4b718efa0a511663d731994857bb94adce13bf" name="cdio-utils" arch="src">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1249560000">- Updated to version 0.81:
  * license of manual now GFDL 1.2 or later
  * Nero image handling more complete.
  * ISRC query for image files.
  * Allow reading pregap of a track via get_track_pregap_lsn().
  * Fixes of iso9660 time setting/getting routines, making them
    reentrant.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="ro@suse.de" date="1272283200">- add build-ignore for libcdio-mini-devel</changelog>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Created seperate linked package cdio-utils to prevent cycles.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Change description to reflect the package content.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
</package>
<package pkgid="9bb0d6bdf5a19faaff90f06c60e4d206ab1ff77978a4532e9cb6f40dad253f11" name="cdio-utils" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="davejplater@gmail.com" date="1337342400">- Created seperate linked package cdio-utils to prevent cycles.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Change description to reflect the package content.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
</package>
<package pkgid="d072cd47abac9bf7cf20ee1658bbd737e06ea7f1b67b0efa2b6bc9787a32c270" name="cdrecord" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1417262400">- Update to new upstream release 3.01~a25
  * Precursory work for localization
- Run spec-beautifier for spec files
- Reenable missing capability support [bnc#899718]</changelog>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
</package>
<package pkgid="8b47377969a5dc7ddb362e892805cb9b98345dc2fd0892c433551317a563fc6a" name="cdrecord" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1417262400">- Update to new upstream release 3.01~a25
  * Precursory work for localization
- Run spec-beautifier for spec files
- Reenable missing capability support [bnc#899718]</changelog>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
</package>
<package pkgid="97d1ef23d33c2d71df3c9ca74cfb1ed6f5f0308b85357c93e90c6aa96c993c49" name="cdrecord" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.6.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="5148340a0c3b04d9cd81b88ee5ad4b49a4ddeea5a578cafab82afdea17dc229b" name="cdrecord" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.6.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="f1b2092770425043f47b322d32d0a8e9fd207615817b12790372e80f5cfc7ca0" name="cdrtools" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1417262400">- Update to new upstream release 3.01~a25
  * Precursory work for localization
- Run spec-beautifier for spec files
- Reenable missing capability support [bnc#899718]</changelog>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
</package>
<package pkgid="49e0531be0f8d0059e7cbb6bf4cd3043afc51ae7f223bde70804957698028491" name="cdrtools" arch="src">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1417262400">- Update to new upstream release 3.01~a25
  * Precursory work for localization
- Run spec-beautifier for spec files
- Reenable missing capability support [bnc#899718]</changelog>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
</package>
<package pkgid="7948f458b09de31c1d487dfd0d9f48f842b24432b773e2c0188d06909b14c108" name="cdrtools" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1417262400">- Update to new upstream release 3.01~a25
  * Precursory work for localization
- Run spec-beautifier for spec files
- Reenable missing capability support [bnc#899718]</changelog>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
</package>
<package pkgid="f8fd252aaa30292c4fd72f54978220caceb7a659287947040bc45c9ad116b751" name="cdrtools" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.6.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="e98536f809267f1db0aa8e77b62a828897ff3707b015af49061efc15775b3494" name="cdrtools" arch="src">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.6.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="8413af7d16ba29a83654f4945baf68136dd8d219b2a762fe38d1eeeb7da4a5d8" name="cdrtools" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp151.4.6.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="449ae69f29e56f53f7a9be5126da367fa67187c435e48307bf6376e564359c0f" name="ceph" arch="src">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="01ba08942ffe4ec03f42fa58761981b2ccb495ac077f8a45e2b82390f2d96d57" name="ceph" arch="x86_64">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="9ed1fd42aa35580a2845c0da5dc8d63daebf4bda998e4c897b859df015f07c34" name="ceph" arch="src">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="728146cd9e8f324c4f4680031da0326976bbb9cb8e91e1e8935dac40fdc13b3e" name="ceph" arch="x86_64">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="a3d50cd91df0c5369dcc549edb54b0aeb47204b948263e6ee2a2dd63cdd9c43b" name="ceph" arch="src">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="1ee800a609c4f730cdd020107e586d35f36e7e118745728570196e2ad9494ea2" name="ceph" arch="x86_64">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="208511e38091a8bf790933ff56fa8ca3dcfd1910ca48a594a3015b8a224beaf2" name="ceph" arch="src">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="5116c31dff638699c9f5e4e08dca96c1338ef592c6e38754201e8946c841a849" name="ceph" arch="x86_64">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="6e1ae72ad5889fabe7f5dfc514f94e00f39f2f82438f88b333dd71c7ec13170f" name="ceph" arch="src">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="43f330bf1e896150dec574e5f9ba539cae457fc0b71b782a8848ec380072caf4" name="ceph" arch="x86_64">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="273998f56220ce4e04aa0200cdcef671fd9bf32eaa36b1d52c8747fe986e6bc0" name="ceph" arch="src">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="e7a5525992f9f6086e52b76209a6fa19cee8ede8af862837a8ec5f355ffb0c47" name="ceph" arch="x86_64">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="0c0d77dbe2b8df9e8c7ee893a56bb4e27842e2541c434f2e4fd6c438e3b9901c" name="ceph" arch="src">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="a2555788698bcc28ff96ebf388ddd68ac62cf3a1814576ada98a1410259d5cc9" name="ceph" arch="x86_64">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="83fca147f0d15a626ce430abe70e6f553fa102a79be9891e8339a90c48ba6e45" name="ceph" arch="src">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="84863448ad4ab6ed212d2dae61c53d5ee39a39dc51e8cf85f6233a1ac4798ec8" name="ceph" arch="x86_64">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="b4752605ab643098d3abcf1c78aca91b4f2f5742af6605baa505fa3ec14c90ee" name="ceph" arch="src">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="16371ccd491ed4e9712bc51888a79fadeb53792f960cf907423d1a8d3b963874" name="ceph" arch="x86_64">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="38a061b3716fca069fd6618b4c3c80d4e6188f6970c8eaf549b8a98a72506c15" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="35d27e013873b313fe11836b0357a62125a9eccc56173ab6633cc2cb979b451e" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="d0426e3c9c814e640a6b9b5f5615e6f5b91e906966eec3afb1abebb724728953" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="5db7eba18c77fe0811227cedb2b1c705e18e31d3b0127615c4bcfde3bfd345c5" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="40833758fd506a951426018ca901c240126939ea371e7691a4f3659826672067" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="8bef4292669535147a85be8bd87277ca7c480df74d1bfb026536809669731269" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="0cfe57dae11459ff9d5154543068479b316ca68fcefee4eb53c398606dca7e91" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="d3f95bacb9ebf902c03e9fd78c3ac5b53e5be765700c419a53bd4f339da45c89" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="d7c3fd56c999f0f8d012cd9ab8542c550b85ed793b959361271cae6cefa693aa" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="14d0c8ff8c762dbcc691146fde78af26995627f87e5021540968cef1e769c83d" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="469e05a4a911cfa368a03cd27e1dd640b91fc58971fd1fa9ce3c5e4328def762" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="e0256478ee2e5ba6810312e8093adfc37f27cbbb6789684c8fa52752a25797cb" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="d8bdbd342f06d9b6152c2bc742f0972884b97715234b1337c9e84cd741546160" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="4d6043ae8d0bd4bafd5b3becdbbdd864d5572297812215253a18441f0b574b8c" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="ef9ebb071b2ed41b4d1c693232a018b4e7328d27cf4f366c71a05cc68173de31" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="05873eedcb91c0a583bfb9e1748f128b479d1bf466ef1dbb9ed293aff1d67436" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="29710c5b2301f4704e9f3d67c3964256bc1c3f4e8806f48eecc29302688379f4" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="7de07c11b4f5a2455ef449a899958c325aeae5753fdf8e47c65b50589c77fe26" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="0d3023c322581961ab48a5104555f03660ded07642c64b68a086746349249fdf" name="ceph-dashboard-e2e" arch="noarch">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="5bfca00dfbdde8942491e9ad4f0ef9cdb78e34b823a2abc8c4ac90d9458fbf1d" name="ceph-dashboard-e2e" arch="noarch">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="1f7d856e5f050a190469586f717cdb1865d1296a972202f07bb5f4096984a6ae" name="ceph-dashboard-e2e" arch="noarch">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="20399237364529c1499d019daad6a93275ad9ab9f3568cfbc1cfe2a8f494a318" name="ceph-dashboard-e2e" arch="noarch">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="4eef5288f6d4ceaf1f2198c8666e3128167976290435aac285da0ede045a1c4f" name="ceph-dashboard-e2e" arch="noarch">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="4b359890c8dba15d56965ad4ac4bad9d1a8b88d65ae0d41f55e8cbee856eaa79" name="ceph-dashboard-e2e" arch="noarch">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="0c9623ea204ff84feab65764cbe37dee57ea26d6f654daf6b94902487167d03a" name="ceph-dashboard-e2e" arch="noarch">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="bb059ad49e7562f43c8d26549755d90be6fed6d91365852ed5c7f21f85445644" name="ceph-dashboard-e2e" arch="noarch">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="a2026ea9bac3c40a991dda8815b9b6fd340a73036438b643b3618a7632b47c05" name="ceph-dashboard-e2e" arch="noarch">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="7e78ca84b6564068adc89a951766b971df598e7b4d502619e72085fcf60dac5a" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="15c7ea9e7528f39d214127850f9bea13b42f22739d8f0fe147d6eafe5f729be2" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="b2605e4b901c4b36a9c1977f6d7226218a6c62b648d32522e25efe6d5f523d53" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="ec18c4c3a1db99896e6e4754d1a4c79a9f9937ba283d2f5c1e33a2b4df59dc19" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="22ef42692b42c9ba952bf33c9df267d0b2a9c65cafdea97ceb5d97a1ae4856aa" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="89f513ab0d52f659d09dcb91503627babde0fc6ebe147459b9a015566c853625" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="2b34725bf09453ee1af0dc0cef971b078c525d0279cafdcfcf2d6b717524b91e" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="182d2ff70f3a6f5229ff672b79c97eed86f9ad6a205015101329b299205f72c0" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="e94937710b22355df1674182d754c321f6642167b6d72ca995e711edb208a962" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="63f721917b7df0b363850bb4c7a2abeae9d6753584a9334aa00ebe51b3ce4a1a" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="0f8d47b951a33d91d4c22aa44bfe07594c6687c2a1cd6c25d754f48f799476bf" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="164df75a9adb7ce7232141de73d0f6618d90484f7420de6635981861363936da" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="12b20b6888706359886d70e9bf528fcbcd210c60af6953e3fdfc4586746a657e" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="6ac9aa95a3a40553e2cb8f3f8528e73e24cd864cdc665f1c7d020022449f7c15" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="0d5300ac7acf10ca7df9124b04fbfae0a1eb0c95ca293f077b8737791b875c29" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="9b54587dab23ff33dae7bbb774a6322aa4568e190b6280ea808a1f45408a2ec1" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="0e47922a450cde252bac52f949c0a7ae8f54e90b75dfc304000702443ab60b36" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="552867be083099a084d0f0ebbccbcaee726b576e471c7872ae9573877f5410aa" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="c25e8907b44e4bd064d1ef67bf0475a99a1cb634ed9b1072c3ea4d69ec3b6e11" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="0394eecc676b2458f4dc87a72781dc3b317fd25183a535bc9239199b6e1a423f" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="745618dcfdfa7e9c3cd6bf9aec00aa4bf5853bc6e721e8c7f5301001c4e16c7b" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="e95f3fa7f4b5509a26971b0aaa930dc48ea012df0520c96138fb553a00076bf1" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="4ca99fcd1a0dbd8a2bb48d6ddc8f905abe5588bf42487aa456bda52f3c481964" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="879fbd1e25767458cb0474e630850ef44ee1440965025e398c0c13707ac00876" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="78c387e2f485a340d306746319ccfa36870331340e7c284299d96e7db723a9cc" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="f8c871038cfb70af5b759fefc40cb87c00e9038c08f640e5bea64459db0f0985" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="dc450eabde40c07c791e23fd0664a79d257426a2b2e1ec828799078fdfae371e" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="eea8d069a4fc2d477586a747112ae8f36d129f333ca9fe9191ea4ad9a15dd245" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="7f98c85089f14404e8e072eba409d176037122c7077cfe4a4f1de12200e0b61a" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="73564248586ee4c8d4ee7afdb34107e971f8ee495d0cfa6dbb5ae03b0266a4d6" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="fb66566edea2f9b56454f2ce1c644c94b357127db1649b2f50ade5cdd507d56c" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="a29b2c8414a96ad7842fbc588d7a28e5864a8b40fb386740e181985fdd2da964" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="c16a72dc5d5fd88212da3a633ddae356a9792cb7b3a980d4f33f409634265fad" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="8b7abfdaaa96645e98177dc97b17d69b0aef051e164cc49c0a9595d98f8fa06e" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="1e85762dbf97be5c1869fb1308ee717e3d66f126635860e18fef43a2936baaab" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="3a7e2f5624d3da49f0b0d41b5f86a9b28b9f7c3923d8eda67d0508bf67c151ba" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="74fe3426622fb6505bad2f910bf9168f670302e519bba8cb6a58ca3550c85c9e" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="15d97cf13eb6aaed20379906923526f6f017c2cdd841d1d062738fb5e1e72ef6" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="9380fa786d7fd08f53936e8f0da06540fa35679d71f9e3bff2657ffdcd9e38d4" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="a214ee5c7cb8b58621ec9c74bdefad7339f97d8f902d65a0a81bbac3f210b764" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="fa015445756c0431afa5123a6fc1c825c88f707ff0a572aa26fb6b0e1d8f91c4" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="0cdb36d236cea46e0007e6604b8a02460ebc1fa485f03d14df8feb948dd7d86a" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="ce77a5eb97ffd121bae3f855dde92f7581e706ee712107bc9ab043082d182ca6" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="91f7dc8ecdac5f81c95daca5466cfac1a42453e64db7187eac1d9f011d7fe0ac" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="aaef553a536dff9a3d6be54418817569efe7a313ee526bcdbb32c354c78b38ba" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="b05dbe08884911b6b62551d187b4e3cbbc72e8f132e95a8311240137f2d37824" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="c5edb15ad39c029de17e81b1104a066bb09b59d1bd0cb865d09619d805830298" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="d9a17cb80fb6b86c9dfc8bcf6643b20938a54120efe8b13bc6ff866988e52086" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="d743faa971a7b3c58924df26289f32bf384f87ad10eebc7baa45591ed8ce8ece" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="5b92c9438d1cd5dcd152e81675401ee71f29f2a85eaf9ef03066fe41e2e84896" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="4469b39616e7346777643de64edcf63bcedf78d52dfa5a31acd7c61c527dedee" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="99e6412c9337caec40aef5c6c27eace1a8a5f80736c65f5d82a9db6d3f7f7fc6" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="1347c61fc814ef98e799fd6f03942a93f3dbb58940265c1f3e6b363e8e069c10" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="0389e77228a97d5d8796169e46811428be625990c95b21ed406b99a73efd27c0" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="6fc6fbc183d8fe0f6bdfeefa1e9654d8009c26c1957793077d28763433814775" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="486c134c3a1be6f6dfc0f8892e77f4692e16e56f456063028482b372f46edebe" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="59b2673ea1578783af4028dd5e15bee2547417437f0d6d191dbd017c0120c6c5" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="a55afd44d3a4ed5d5071b7117a3cad49f8f31ffd0e02a4341ff6901e619afcc8" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="b856aebfd544b9403e64ae9e2cd66f5f558264bd291a336f4e30d147c1a58c58" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="1beb425059f742e75577c373d8ae7eec447ea1ad2d464f1f25163693e55e8e21" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="d5c1a43ab16d992ec4d764981d0e7c9b06f764f0fad350f4460180e24b9e890f" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="8c11b5e88c56c0e9cb9ac4eb92a1656539c197bd9ed8414afe493dc14e42db6d" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="b0507e7350b56772b3b5b050fb01436e4ba3fec860cb7faa172627d26b45d7d6" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="d177e79028e7c4645c6c00e99c18833465b57b0282d0a2ec5f8eb398f83cf6c7" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="76c890b04345de6208ca97193a7c3e1e261fb8233171351fa68e5c65a9790ec8" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="617035c6818b96f925a000515f995be8b49c97667b36f44cc5bea60c3caee05e" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="6b2bf5c1c64144eed02f417a807c62ba35bb061f9d4ff7460f0f63530039c540" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="e7b0be7f840ea5ed00127eff2dca09927590801358f6c9239fa3ace21a98f987" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="049eef95e27d6e6f75b1a0954d6f6d7e63d57f9731f009419c05cb584cb77261" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="be9ce81d248f81f5b47bbb2a24fa3212a8d2c2c6c8da2d08fc05f83d9a527bd3" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="e199ac2a6f47458f2970e74c4e1aba4fc1be55c178d4a301d6f7a95bb2124e0f" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="a2a801344dfc406a518c36175d2f4f37a008102236189ccbe65b4d3b155b2b5d" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="046f0b20d50c0d6d8645546e7d3809f5219cd2c431f68e78e6e5b83d04b6cea0" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="d71edb387f6edc481ce8c1383e81816aacfe2a240a1300a5ee12f7500272b162" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="609ff3ac0768a566b1985f7c8972abf805ce402dbbc10c81dbd07e2116806e24" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="b75f2028dfcfae75c13c9ebde73f395372f916f04fb528467d1469794b997a57" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="9cf7083c9dd8208a40daacc227f6e293daf0c16d4f20d9debfcd676234701722" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="a8f837ee45d1d3e0a1a2d4220c5fa176e79236ba6a894d0153482ed9e48d6af5" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="2171309225d88bc06f4a8d115c9901b04489b7cd47dc174329b3f336fa38caf3" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="c081f1bf67a0ea56cb4f1d151ab22ddf2c9e3a1f932a2bad2e8962d18a487e60" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="2f93e3aef59ec5d16c100f3bde40532dff0b0fed1cbb1a4e652784f931629a85" name="ceph-mgr-ssh" arch="noarch">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="05739c86d5fe9e0c80cc3eacb6012ed19eb05df6d4d32c4ffae122e3a3b6f43e" name="ceph-mgr-ssh" arch="noarch">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="6755d4fd9b79f58fe311d5828daaa63537c8dfd55cdee042d8255d93fb03aa5e" name="ceph-mgr-ssh" arch="noarch">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="9607975fc8f88ba916059870a131c8169e2dfee37215a98af03865e9dbb8a06b" name="ceph-mgr-ssh" arch="noarch">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="653daf1433dc29fbb169218281e5cd1875dbc392544f0c64b9afb9ebaa8aa6d0" name="ceph-mgr-ssh" arch="noarch">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="7979c9f15edaead47c37f1040ca5062c1b99ce05a943617dc29ed17c306e13ee" name="ceph-mgr-ssh" arch="noarch">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="acf52ffa66fab6fd273c23250d477d6aad203289fd934e5b017aaa9adb700121" name="ceph-mgr-ssh" arch="noarch">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="a4aaf4a9a41a63791f8823183c503a8b05f648dd4d94306e3a8d24e1c79dc51e" name="ceph-mgr-ssh" arch="noarch">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="a41bb6f4704a62c08735efabb46d32792f5a130227ce1df4ccbf2bcb58876f89" name="ceph-mgr-ssh" arch="noarch">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="dd96081bcbac93b845f3eed84cf8d58ca3d59d375f1a61f9db5d625e937e8112" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="fc6ab435976110274f77aafc771340f32422ac9dda7872a83ecd8c64df661f90" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="4840f137c26852f6b87d1138727add014b73be9126bbbec3ff8b27a5963e3b6b" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="937d5bb3117c666714a3ccecf4cabd393964615328998a4fd4f6ef0ab1f826ee" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="f869683d50d20a87680688de69fe0c295246ccbced137d334e1d254ac6198020" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="8f2f80a484256a5378e27f54496e5437e806a36332a7777366bac6fd80465015" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="6cadc1b1d82f3a599cda469c1c779f930ec3ccc4584d1745359af17d55b224c8" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="f09f5d95b8e448ebd12a4485d523f5adee23a176e48648512cf7883764aa1a7c" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="b5530080b3515675a15120b2397e38a5bcad4c39eaa12884e0fb68f23960cc40" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="e772f6f9182ef6bbae08e80adaa1fddd9ed502d0d330cc9f1264c3b61b9d4ef3" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="b8caa5ab06b36cb1c3dd92a9caf6ecbbac055c39b91c8fd57eb1b5b6344c2ba6" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="c5376b8966afb22b9895673d92cdec4f03cdd2d272f60599a9c95870f3ed01e6" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="62cacc0283e006eb70693995d85ef303322ba8cf04b044122bae2e8a5b3e53db" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="62407468a71b47425283d945faaa16384c161a42e8bc247f34d13c0234f6de0f" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="38566c0df2a32b49a8f1133e0c990dfb752a73b760dd4b5961720184f16fea77" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="ee0d7480f7817cc78e82c4c98df882dd1449bf11a3de5326a3591c84b70c2379" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="cfdcbccf9578f3e88bd9573434f1e758cc9c559f014b8d34b51d9bc77ce6194f" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="2f99c9bab451e87d8a3c4f1b149aaad0b7953d462fa3103854fad58d10d29eb3" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="e71abbce6841c959f3c3b0d7d93453a3da04ddb2858ecc8b832c44f86d14f198" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="2adae306437574abad427056598f238a794befe2b2e9395aaf58e2d4b85e1644" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="ace7183737a82a0d70f9cfe1eefa5390596d574e972625de0a5892ea1bfcd8c5" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="49bc05e52480fb37332264a00baf47c9e863bf5cd617127435f03d5434b0cce7" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="4636025317694995a08e219bffe8100ab7e1cb21c7965703db5a1bdd763f63a9" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="52c1eebca6de4133d0070b4f1915969a3baa10abeb912966b02683846c142ccd" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="fc512c42bacc320bb7d8df79374cf98b7be468546e479663a395dc5f67990827" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="da4d450843ea2a93f0e9239cb489d25d572305e934e6e0131ca63e56298238d6" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="9336e11055aa5d6ae113007a34fde6dfd4778836f6feb2e5e03d2ed52fa39c12" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="6482b2a0c755cc7f6e6705a50f14afa653a16b25b4780beb20cc9d1bb97cdbfd" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="e477ccf7755f1b36b31a86a81a065b2c3720ff0e46ee07f8bc31a5c631f14107" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="f056a3cb9231c0764da552647cbc0f4f20cef29a8ead9d9ff7b8d43ad7bb4435" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="366e8c5bc46745bff3101fd6c2189f196cd77bec043ad2dd3edf9482d510aa37" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="ee56bd0219aed55b01926cf503274fec0ac3893a2ac466a15cc1e4d5de2cbc65" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="7ba177dd3e92bd92841d663e0ee0600388138f0836cd61038824879cff42000d" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="de22f33dfcf8d99480ef69fc37705af2fb433cece789871cc7fe22cb0ce7abbd" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="201e096ba9e45522e66b85a005c4f95a3ca0daf6b9a7a86dddaae8f686ff7663" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="b5e8a4edd4be13c9f7aba6ecb49a0aa6256eee89680f230d46df4722bc479c1b" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="92be6f54de00255b2cd094febb6af0eedae1aef0588b7ec405a594b128a45f63" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="6c9e537ba9c38b742a06f058511028f0b7e2de79d5267c20cc662860ffdc2a8e" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="1c389886ffed8b81a3d01bb7e204ee7dfe1b85ba9a89a5ceeaa0fe1caaee3879" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="10384decd079433d74280000ef0ebd1917b9dc2ba370a60d659099640bb55e98" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="95e9594bd13fd89cb9b3088627e6f28b142e9743a70e6378b5340fc41fac5ce2" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="ff9a9b9f89d43dcb9065d3fa9224114633f17c2fea4d7c0920830c3040d3601d" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="5ba1189b3fc9dc2c5f26575bd02e27fb0b29809f8adf15572c803e7bc2f15fb6" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="b9f9a05658ea9022a84bd3c8a15c60a4fab946a2bde5cf71724d89bb56976288" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="33122055f67b580bd6bf3278c1a9e4fbe2983b320795006e04c57e0bfc7bdb06" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="8a6e26e02c280422de388726fdba684e69b083a6e462880cbb0b2a2682d614fc" name="ceph-test" arch="src">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="ee9463b7f2e576bcf33c28d8a2758913cf98ca088db142cf8dc28e947725569d" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="ed72cbf35929ff2cad7eaf3ea76b24ae27f9dfef24550057c9bee2a46f12a53f" name="ceph-test" arch="src">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="0b1f3c4df736c0db70b7b0170866272230fc86662e500677d68efdec20edfca7" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="a70691ab7742b57eab9be4f77161ae0d1c3478f2143dbe52bd24ea6d997b76b9" name="ceph-test" arch="src">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="51748247714e0b7d2bd11ffecb67c3e31fd9d1649463df49a67c52a16ec90e49" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="50ed5e5519a1de78226e91cd47ade03a39e75b393fd7dd0de5244099c3eee797" name="ceph-test" arch="src">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="ce9202015bc9e8f785abe7a77f3dfb85fa3520a88180239138f5d255bc0b530d" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="b4c89750bf26ab5f82894c0fd478fdabd8a21069cb30e34130ee41554af501b0" name="ceph-test" arch="src">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="d9f5274065057838bee5a2492b6cae956f72b9d4459235094bf0228b29000e96" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="265839663e2177abe6931d1d592a9f638a15f99ecc4ab6b0d344a39240fb671e" name="ceph-test" arch="src">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="fe391dfae5059a94f154ba78bbe1021e16b526ea2dc04c3a80fae0f24fb63179" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="4ca135b08018108b7807616e038e48d38ae6c18b7a20a712cccac780b450debe" name="ceph-test" arch="src">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="99656feb0e2ab48bed6c320ee422cef0adb2e3d0f56792a97731c0b0e22fef8d" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="22ac6e9939be2903e0e15b5e747aecb8e43067b1e2dde9e632c9157917d67f1a" name="ceph-test" arch="src">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="22d1ba15a5af25fa6623e4ee102f82b21db96c2eb36db21c4bdee57533327cdd" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="54e49199047f4dad2651eda963a89070667ecea61d7208591ef663e727696743" name="ceph-test" arch="src">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="8b82c3c93f7d4f9b7cae8b8af3ab53f1d7276a781552454c8990bcd45117efe2" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="5b29f1b0b103caee06b6e5e1985baa8d03de507d35e67c5c289904e7646b1a2e" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="14.2.10.392+gb3a13b81cb" rel="lp151.2.22.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
</package>
<package pkgid="646a50038e7b537466008132c43e1394fbbc632c725d7e3d0384fb3b42f1977b" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="14.2.11.394+g9cbbc473c0" rel="lp151.2.25.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
</package>
<package pkgid="14fe8850bedb855445006205e5a50e5dfae5332e098546deb8acd481e4575e2b" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="14.2.13.450+g65ea1b614d" rel="lp151.2.28.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1593172800">- Update to 14.2.10-392-gb3a13b81cb:
  + Upstream 14.2.10 release
    see https://ceph.io/releases/v14-2-10-nautilus-released/
  * mgr: Improve internal python to c++ interface (bsc#1167477)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1597406400">- Update to 14.2.11-394-g9cbbc473c0:
  + Upstream 14.2.11 release
    see https://ceph.io/releases/v14-2-11-nautilus-released/
  * mgr/progress: Skip pg_summary update if _events dict is empty
    (bsc#1167477) (bsc#1172142) (bsc#1171956)
  * mgr/dashboard: Allow to edit iSCSI target with active session
    (bsc#1173339)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603368000">- Update to 14.2.12-436-g6feab505b7:
  + Upstream 14.2.12 release
    see https://ceph.io/releases/v14-2-12-nautilus-released/
  * (bsc#1169134) mgr/dashboard: document Prometheus' security model
  * (bsc#1170487) monclient: schedule first tick using mon_client_hunt_interval
  * (bsc#1172546) os/bluestore: fix collection_list ordering
  * (bsc#1174591) mgr/dashboard: Unable to edit iSCSI logged-in client
  * (bsc#1174591) mgr/dashboard: Allow editing iSCSI targets with initiators logged-in
  * (bsc#1175061) os/bluestore: dump onode that has too many spanning blobs
  * (bsc#1175240) pybind/mgr/restful: use dict.items() for py3 compatible
  * (bsc#1175585) mgr/dashboard: Fix many-to-many issue in host-details Grafana dashboard
  + (bsc#1175781) ceph-volume: lvmcache: print help correctly
  + spec: move python-enum34 into rhel 7 conditional</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1604404800">- Update to 14.2.13-398-gb6c514eec7:
  + Upstream 14.2.13 release
    see https://ceph.io/releases/v14-2-13-nautilus-released/
  * (bsc#1151612, bsc#1158257) ceph-volume: major batch refactor</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="56882dbd493c7ca5bdfeff9ab3d26545998e79220aa55a1b3772df4943b27daf" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="14.2.4.386+g73475e3ee1" rel="lp151.2.4.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558353600">- Update to 14.2.1-440-g0ac6920288:
  + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60
  + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558440000">- Update to 14.2.1-448-g1bd10a856f:
  + monitoring: update Grafana dashboards
  + mgr/dashboard: fix some performance data are not displayed
  + monitoring: SNMP OID per every Prometheus alert rule
  + mgr/dashboard: Validate if any client belongs to more than one group
  + mgr/dashboard: Admin resource not honored
  + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388)
  + mgr/dashboard: iSCSI form does not support IPv6</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1558526400">- civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821)
  (fix has been in since February 2019)
- rgw: sanitize customer encryption keys from log output in v4 auth
  (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559217600">- Update to 14.2.1-457-gb42e3171b3:
  + qa/deepsea/salt:
  * 1node5disks salt configuration
  * grafana_service_check validation test
  * Disk drive replacement test
  * use "ceph_cm_ansible: false" instead of "ceph_cm: salt"
  + spec: Disable LTO in spec when being used (bsc#1135030)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559304000">- Update to 14.2.1-463-g99339b576a:
  + qa/deepsea: redirect journalctl output to a logfile
  + spec: install/package ceph-volume lvmcache plugin
  + common: make ms_bind_msgr2 default to "false" (bsc#1124957)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559563200">- Update to 14.2.1-467-g9e10776aa2:
  + mon/Monitor: allow probe if MMonProbe::mon_release == 0 (bsc#1132396)
  + spec: make python3-rgw replace python-rgw on upgrade</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1559736000">- Update to 14.2.1-468-g994fd9e0cc:
  + spec:
  * install grafana dashboards world readable (bsc#1136110)
  * put "without python2" conditionals around python3-* provides/obsoletes
    (align with upstream)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562241600">- Update to 14.2.1-469-g454d851f0a:
  + lvmcache: refactor argument parsing and add -h flag
  + qa/deepsea: expand testing of dashboard (branding and E2E tests)
  + spec:
  * package the Dashboard E2E tests
  * drop explicit systemd BuildRequires in case of building for SUSE
    (allow OBS to pick better candidates to shorten rebuild queues)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1562932800">- Update to 14.2.1-475-g83b977ffbd:
  + packaging: remove SuSEfirewall2 support</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1564056000">- Update to 14.2.2-348-gf6da3d1d18:
  + rebase on top of upstream Nautilus v14.2.2 release, SHA1 4f8fa0a0024755aae7d95567c63f11d6862d55be
  + mgr/volumes: add CephFS subvolumes library (bsc#1135205)
  + mgr/dashboard: Warn that tcmu-runner backstore is tech-preview (bsc#1137261)
  + mgr/dashboard: Add, update and remove translations (bsc#1140737)
  + osd/PG: fix cleanup of pgmeta-like objects on PG deletion</changelog>
  <changelog author="Abhishek Lekshmanan &lt;abhishek@suse.com&gt;" date="1565784000">- Update to 14.2.2.349+g6716a1e448:
  + rgw: fix for CVE-2019-10222/bsc#1145093 for the beast frontend
    ("rgw: asio: check the remote endpoint before processing requests")</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
</package>
<package pkgid="ae396302970df38b2c11cbef64d6471907082b52a65071397837d57d584a87fe" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="14.2.5.380+g1387ceaf78" rel="lp151.2.7.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567080000">- Update to 14.2.2-354-g8878cf2360:
  + rgw: Move upload_info declaration out of conditional (bsc#1137189,
    https://github.com/SUSE/ceph/pull/325)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
</package>
<package pkgid="bac7ad57ce880271eab9d0d3d63f09faff5d33843e5eaece3ab2aa697a2686b0" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="14.2.5.382+g8881d33957" rel="lp151.2.10.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1567684800">- Update to 14.2.3-349-g7b1552ea82:
  + rebase on top of upstream Nautilus v14.2.3 release, SHA1 0f776cf838a1ae3130b2b73dc26be9c95c6ccc39
    for details, see https://ceph.io/releases/v14-2-3-nautilus-released/
  * ceph-volume: prints errors to stdout with --format json (bsc#1132767)
  * mgr/dashboard: Changing rgw-api-host does not get effective without
    disable/enable dashboard mgr module (bsc#1137503)
  * mgr/dashboard: Silence Alertmanager alerts (bsc#1141174)
  * mgr/dashboard: Fix e2e failures caused by webdriver version (bsc#1145759)
  + librbd: always try to acquire exclusive lock when removing image (bsc#1149093)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1568721600">- Update to 14.2.4-352-g2060e25d1c:
  + rebase on top of upstream Nautilus v14.2.4 release, SHA1 75f4de193b3ea58512f204623e6c5a16e6c1e1ba
    for details, see https://ceph.io/releases/v14-2-4-nautilus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
</package>
<package pkgid="4334d209b3f939736212c45400edb5fa0e885e74017ebf953ce81fd2b2b20f96" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="14.2.5.389+gb0f23ac248" rel="lp151.2.13.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.2 brought the following notable changes:
  * The no{up,down,in,out} related commands have been revamped (bsc#1151990)
  * radosgw-admin gets two new subcommands for managing expire-stale objects (bsc#1151991)
  * Deploying a single new BlueStore OSD on a cluster upgraded to SES6 from
    SES5 breaks pool utilization stats reported by ceph df (bsc#1151992)
  * As of 14.2.2, Ceph cluster will issue a health warning if CRUSH tunables
    are older than "hammer" (bsc#1151993)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412802">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
</package>
<package pkgid="931dff97b9b226006f6cd497648453563228734df0ce6b038263f7ae0de44a1a" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="14.2.9.969+g9917342dc8" rel="lp151.2.16.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.3 brings the following notable changes:
  * Fixed a denial of service vulnerability where an unauthenticated client
    of Ceph Object Gateway could trigger a crash from an uncaught exception
    (CVE-2019-10222/bsc#1145093)
  * Fixed bsc#1151994 - Nautilus-based librbd clients can not open images on
    Jewel clusters
  * The RGW num_rados_handles has been removed in Ceph 14.2.3 (bsc#1151995)
  * "osd_deep_scrub_large_omap_object_key_threshold" has been lowered in
    Nautilus 14.2.3 (bsc#1152002)
  * The ceph dashboard now supports silencing Prometheus notifications (bsc#1141174)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412801">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
</package>
<package pkgid="7687aba154789a06e6a4214dcbed02e15bd8dbd0a7b9baa3beae217134eaa8a0" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="14.2.9.970+ged84cae0c9" rel="lp151.2.19.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1569412800">- Addendum:
  + upstream Nautilus 14.2.4 brings the following notable changes:
  * fixed a ceph-volume regression introduced by 14.2.3 (NOTE: SES customers
    were never exposed to this regression) (bsc#1132767)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1570017600">- Update to 14.2.4-373-gc3e67ed133:
  + Support iSCSI target-level CHAP authentication (bsc#1145617)
  + Validation and render of iSCSI controls based "type" (bsc#1140491)
  + Fix error editing iSCSI image advanced settings (bsc#1146656)
  + Fix error during iSCSI target edit</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1571400000">- Update to 14.2.4-378-gac1bcd6547:
  + qa/suse: move dashboard-e2e to tier3 and add debugging code to
    src/script/dashboard_e2e_tests.sh</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1573819200">- Update to 14.2.4-386-g73475e3ee1:
  + os/bluestore: consolidate extents from the same device only (bsc#1156282)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574337600">- Update to 14.2.4-387-g031cd69d0d:
  + mgr/dashboard: Automatically use correct chromedriver version</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424000">- Update to 14.2.4-1283-g9ab65f8799:
  + rebase on tip of upstream nautilus, SHA1 9989c20373e2294b7479ec4bd6ac5cce80b01645
  * rgw: add S3 object lock feature to support object worm (jsc#SES-582)
  * os/bluestore: apply garbage collection against excessive blob count growth (bsc#1124556)
  * doc: update bluestore cache settings and clarify data fraction (bsc#1131817)
  * mgr/dashboard: Allow the decrease of pg's of an existing pool (bsc#1132337)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1134365)
  * mgr/dashboard: Set RO as the default access_type for RGW NFS exports (bsc#1137227)
  * mgr/dashboard: Allow disabling redirection on standby Dashboards (bsc#1140504)
  * rgw: dns name is not case sensitive (bsc#1141203)
  * os/bluestore: shallow fsck mode and legacy statfs auto repair (bsc#1145571)
  * mgr/dashboard: Display WWN and LUN number in iSCSI target details (bsc#1145756)
  * mgr/dashboard: access_control: add grafana scope read access to *-manager roles (bsc#1148360)
  * mgr/dashboard: internationalization support with AOT enabled (bsc#1148498)
  * mgr/dashboard: Fix data point alignment in MDS counters chart (bsc#1153876)
  * mgr/balancer: python3 compatibility issue (bsc#1154230)
  * mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking (bsc#1155045)
  * mgr/{dashboard,prometheus}: return FQDN instead of '0.0.0.0' (bsc#1155463)
  * core: Improve health status for backfill_toofull and recovery_toofull and
    fix backfill_toofull seen on cluster where the most full OSD is at 1% (bsc#1155655)
  * mon: ensure prepare_failure() marks no_reply on op (bsc#1156571)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574424001">- Update to 14.2.4-1284-g2c00724365:
  + qa/dashboard_e2e_tests.sh: Automatically use correct chromedriver version (bsc#1155950)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574683200">- Update to 14.2.4-1292-gfd63c4e6a7:
  + ceph-volume: check if we run in an selinux environment</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769600">- pre_checkin.sh: accommodate upstream patch "nautilus: rpm: always build
  ceph-test package"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1574769601">- Update to 14.2.4-1295-g7bb6db3bbc:
  + mgr/dashboard: Remove env_build from e2e:ci
  + checkin.sh: build all dashboard frontend languages (bsc#1148498)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575460800">- Update to 14.2.4-1296-g250efec9f7:
  + doc: mention --namespace option in rados manpage (bsc#1157611)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575547200">- Update to 14.2.4-1299-gd41e25301a:
  + checkin.sh:
  * bail out if make-dist does not create tarball
  * run make-dist with "set -x"
  + mon: keep v1 address type when explicitly (bsc#1140879)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1575979200">- Update to 14.2.5-371-g3551250731:
  + upstream Nautilus 14.2.5 point release, see https://ceph.io/releases/v14-2-5-nautilus-released/
  * health warnings will be issued if daemons have recently crashed (bsc#1158923)
  * pg_num must be a power of two, otherwise HEALTH_WARN (bsc#1158925)
  * pool size must be &gt; 1, otherwise HEALTH_WARN (bsc#1158926)
  * health warning if average OSD heartbeat ping time exceeds threshold (bsc#1158927)
  * changes in the telemetry MGR module (bsc#1158929)
  * new OSD daemon command dump_recovery_reservations (bsc#1158930)
  * new OSD daemon command dump_scrub_reservations (bsc#1158931)
  * RGW now supports S3 Object Lock set of APIs (bsc#1158932)
  * RGW now supports List Objects V2 (bsc#1158933)
  + checkin.sh: eliminate dashboard frontend build parallelism</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579003200">- Update to 14.2.5-379-g202c110bf7:
  + include hotfix from upstream v14.2.6 release (bsc#1160920):
  * mon/PGMap.h: disable network stats in dump_osd_stats
  * osd_stat_t::dump: Add option for ceph-mgr python callers to skip ping network</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1579089600">- Update to 14.2.5-378-g1387ceaf78:
  + Revert "rgw_file: introduce fast S3 Unix stats (immutable)"
    because it is incompatible with NFS-Ganesha 2.8</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1580126400">- Update to 14.2.5-382-g8881d33957:
  + mgr/dashboard: fix improper URL checking (bsc#1161074, CVE-2020-1699)
  + rgw: drop the partial message check while reading messages (bsc#1161312, CVE-2020-1700)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1583323200">- Update to 14.2.5-383-geb21f1a807:
  + spec: add "bc" as a runtime dependency of ceph-test, because the
    downstream test suite now needs it</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1585310400">- Update to 14.2.5-389-gb0f23ac248:
  + fix Nonce reuse in msgr V2 secure mode (bsc#1166403, CVE-2020-1759)
  + prevent RGW GetObject header-splitting XSS (bsc#1166484, CVE-2020-1760)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1590408000">- Update to 14.2.9-969-g9917342dc8d:
  * rebase on top of upstream nautilus, SHA1 ccd9c04f88e53aef7e4f1068ce1221fa3b97450d
  * cmake: Improve test for 16-byte atomic support on IBM Z
  * (jsc#SES-680) monitoring: add details to Prometheus alerts
  * (bsc#1155045) mgr/dashboard: add debug mode, and accept expected exception when SSL handshaking
  * (bsc#1152100) monitoring: alert for prediction of disk and pool fill up broken
  * (bsc#1155262) mgr/dashboard: iSCSI targets not available if any gateway is down
  * (bsc#1159689) os/bluestore: more flexible DB volume space usage
  * (bsc#1156087) ceph-volume: make get_devices fs location independent
  * (bsc#1156409) monitoring: wait before firing osd full alert
  * (bsc#1160626) mgr/dashboard: Unable to remove an iSCSI gateway that is already in use
  * (bsc#1161718) mount.ceph: remove arbitrary limit on size of name= option
  * (bsc#1162553) ceph-volume: strip _dmcrypt suffix in simple scan json output
  * (bsc#1163119) mgr/dashboard: Not able to restrict bucket creation for new user
  * (bsc#1164571) mgr/dashboard: Prevent iSCSI target recreation when editing controls
  * (bsc#1165713) mgr/dashboard: Repair broken grafana panels
  * (bsc#1165835) rgw: get barbican secret key request maybe return error code
  * (bsc#1165840) rgw: making implicit_tenants backwards compatible
  * (bsc#1166297) mgr/dashboard: Repair broken grafana panels
  * (bsc#1166393) mgr/dashboard: KeyError on dashboard reload
  * (bsc#1166624) mgr/dashboard: Fix iSCSI's username and password validation
  * (bsc#1166670) monitoring: root volume full alert fires false positives
  * (bsc#1166932) mgr: synchronize ClusterState's health and mon_status
  * (bsc#1168403) mgr/dashboard: Add more debug information to Dashboard RGW backend
  * (bsc#1169356) rgw: reshard: skip stale bucket id entries from reshard queue
  * (bsc#1170938) mon/OSDMonitor: allow trimming maps even if osds are down
  * (bsc#1171367) Set OSD's bluefs-buffered-io param to false by default</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1592136000">- Update to 14.2.9-970-ged84cae0c9:
  + rgw: sanitize newlines in s3 CORSConfiguration's ExposeHeader
    (bsc#1171921, CVE-2020-10753)</changelog>
</package>
<package pkgid="943e9c73796ce35b5a849a01b669c7ff5ab0831e052e67ea8fe1de6acdacf152" name="cgit" arch="src">
  <version epoch="0" ver="1.2.1" rel="lp151.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
  <changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
  <changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
  <changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
  <changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
  <changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
  <changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
  <changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
  <changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
  <changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
  <changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
  <changelog author="tiwai@suse.de" date="1458129600">- Fix remote code execution via buffer overflow (CVE-2016-2315,
  CVE-2016-2324, bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="astieger@suse.com" date="1465819200">- cgit 1.0:
  * Add repo.homepage/gitweb.homepage setting and homepage tab.
  * Considerable internal cleanups.
  * Show reverse paths in title bar so that browser tab shows
    filename.
  * Add syntax highlighting to md2html.
  * Allow redirects even when caching is turned on.
  * Fix empty PATH_INFO on redirect.
  * Better HTML5 compliance.
  * Simplified decorations.
  * Show repo's root directory in plain view.
  * Date printing and timezone normalization.
  * Unicode issues in syntax highlighting.
  * Account for caches with empty key.
  * Use size_t for all lengths.
  * More gracefully deal with unparsable commits.
- with git 2.8.3
- the following patches are now included upstream git 2.8.3:
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1483617600">- remove redundant gnu-crypto BuildRequires</changelog>
  <changelog author="vsvecova@suse.com" date="1484827200">- Version bump to v1.1:
  * For more information see complete changelog at
    https://git.zx2c4.com/cgit/log/
- Add cgit-built-with-git-v2.11.0.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Update bundled git to 2.11.1</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 1.2.1
  * fixes CVE-2018-14912 directory traversal vulnerability
    [boo#1103799]
  * syntax-highlighting: replace invalid unicode with '?'
  * ui-repolist: properly sort by age
  * ui-patch: fix crash when using path limit
- Remove cgit-built-with-git-v2.11.0.patch (merged upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Create a /var/cache/cgit [boo#1116567]
- Update bundled git to 2.18.1
- Remove cgit-optflags.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1558353600">- Add the missing zlib requirement.</changelog>
</package>
<package pkgid="5cc3f97a3e4487f84271c9cc56d66a7da99cad643087ba6799d8207de3f835b3" name="cgit" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="lp151.2.3.1"/>
  <changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
  <changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
  <changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
  <changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
  <changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
  <changelog author="tiwai@suse.de" date="1458129600">- Fix remote code execution via buffer overflow (CVE-2016-2315,
  CVE-2016-2324, bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="astieger@suse.com" date="1465819200">- cgit 1.0:
  * Add repo.homepage/gitweb.homepage setting and homepage tab.
  * Considerable internal cleanups.
  * Show reverse paths in title bar so that browser tab shows
    filename.
  * Add syntax highlighting to md2html.
  * Allow redirects even when caching is turned on.
  * Fix empty PATH_INFO on redirect.
  * Better HTML5 compliance.
  * Simplified decorations.
  * Show repo's root directory in plain view.
  * Date printing and timezone normalization.
  * Unicode issues in syntax highlighting.
  * Account for caches with empty key.
  * Use size_t for all lengths.
  * More gracefully deal with unparsable commits.
- with git 2.8.3
- the following patches are now included upstream git 2.8.3:
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1483617600">- remove redundant gnu-crypto BuildRequires</changelog>
  <changelog author="vsvecova@suse.com" date="1484827200">- Version bump to v1.1:
  * For more information see complete changelog at
    https://git.zx2c4.com/cgit/log/
- Add cgit-built-with-git-v2.11.0.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Update bundled git to 2.11.1</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 1.2.1
  * fixes CVE-2018-14912 directory traversal vulnerability
    [boo#1103799]
  * syntax-highlighting: replace invalid unicode with '?'
  * ui-repolist: properly sort by age
  * ui-patch: fix crash when using path limit
- Remove cgit-built-with-git-v2.11.0.patch (merged upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Create a /var/cache/cgit [boo#1116567]
- Update bundled git to 2.18.1
- Remove cgit-optflags.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1558353600">- Add the missing zlib requirement.</changelog>
</package>
<package pkgid="baa5e15c1437a713855050c24174ccb709520a9ccf1bb065af1d011f515bd0e4" name="charliecloud" arch="src">
  <version epoch="0" ver="0.11" rel="lp151.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements</changelog>
</package>
<package pkgid="e9bd11c5025079fbf086ce91f8fd82ea313301ccd9ce47eb24fec75f39dd9097" name="charliecloud" arch="x86_64">
  <version epoch="0" ver="0.11" rel="lp151.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements</changelog>
</package>
<package pkgid="bfb07149eccc2b50273fb916e368b20c44c030786d2a8f91452dd4238fe89386" name="charliecloud-doc" arch="noarch">
  <version epoch="0" ver="0.11" rel="lp151.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements</changelog>
</package>
<package pkgid="307062043feece8b113683c2d50fdacea62bca5773eb568c53057c0c8ad39399" name="charliecloud-examples" arch="noarch">
  <version epoch="0" ver="0.11" rel="lp151.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements</changelog>
</package>
<package pkgid="c8569209dbaa3947266acfda85e415a65e98c9174308f5198d8185303e24bc29" name="checkbashisms" arch="noarch">
  <version epoch="0" ver="2.19.5" rel="lp151.3.5.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="b26b284264dbfaf8b771e9ad6beaea8cd40810226d1d0a22f02bf14189f4724b" name="checkbashisms" arch="noarch">
  <version epoch="0" ver="2.19.5" rel="lp151.3.8.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5 bsc#1174163:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="3af169a970ab74a5e961efda50940340c6737473b2cb924bd611ecf4ee133f89" name="checkmedia" arch="i586">
  <version epoch="0" ver="5.2" rel="lp151.2.3.1"/>
  <changelog author="snwint_jenkins@suse.com" date="1413288000">- added 'archive' Makefile target
- update git2log
- 3.3</changelog>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
</package>
<package pkgid="754a3b7da50679f9c0e149e1eca86f6ec87691f7d4c9799e2096d2c1766871aa" name="checkmedia" arch="src">
  <version epoch="0" ver="5.2" rel="lp151.2.3.1"/>
  <changelog author="snwint@suse.de" date="1251201600">- fixed tagmedia to use iso size from header</changelog>
  <changelog author="snwint@suse.de" date="1286884800">- don't check the first 512 bytes to avoid problems with isohybrid</changelog>
  <changelog author="snwint@suse.de" date="1310558400">- change isohybrid md5 calculation to report 'real' md5 sum (bnc#678739)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="snwint@suse.de" date="1327492800">- support more digests: md5, sha1, sha224, sha256, sha384, sha512
- changed license to gpl3
- new major version</changelog>
  <changelog author="dvaleev@suse.com" date="1383220800">- make sure WORDS_BIGENDIAN is defined correctly where needed</changelog>
  <changelog author="snwint@suse.de" date="1383652800">- added github url to spec</changelog>
  <changelog author="snwint@suse.de" date="1398859200">- ignore padding area when calculating checksum (bnc#804160)
- 3.2</changelog>
  <changelog author="snwint_jenkins@suse.com" date="1413288000">- added 'archive' Makefile target
- update git2log
- 3.3</changelog>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
</package>
<package pkgid="a5052592b6c1e630c9b7064d655fc1e0cefd4cd5b1aca66aa008eb18cc2fd9c0" name="checkmedia" arch="x86_64">
  <version epoch="0" ver="5.2" rel="lp151.2.3.1"/>
  <changelog author="snwint_jenkins@suse.com" date="1413288000">- added 'archive' Makefile target
- update git2log
- 3.3</changelog>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
</package>
<package pkgid="8e6aa9b0e148a23457eb0b9c56d6f5cac957016d579523ee8a1cd3389a484308" name="chocolate-doom" arch="src">
  <version epoch="0" ver="3.0.1" rel="lp151.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1307534400">- Initial package (version 1.6.0) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1339416000">- Update to new upstream release 1.7.0
  * Running servers now re-resolve the address of the master server
  occasionally, to adapt to DNS address changes.
  * A workaround for SDL mouse lag is now only used on Windows
  (where it is needed)
  * UTF-8 usernames are supported, and Windows usernames with
  non-ASCII characters are now supported
  * Palette accuracy is reduced to 6 bits per channel, to more
  accurately emulate the PC VGA hardware</changelog>
  <changelog author="jengelh@inai.de" date="1367496000">- Search /usr/share/doom for IWADs as well (bnc#818102)
  + Added chdoom-iwaddir.diff
- Remove unnecessary INSTALL file</changelog>
  <changelog author="jengelh@inai.de" date="1386676800">- Update to new upstream release 2.0
  * Support for three other Doom engine-based games: Heretic, Hexen,
  and Strife.</changelog>
  <changelog author="jengelh@inai.de" date="1399809600">- Add python to BuildRequires - it is used for manpage generation
  (was previously implicitly included)</changelog>
  <changelog author="jengelh@inai.de" date="1427544000">- Update to new upstream release 2.1
  * Chocolate Doom now supports high-quality substitute music packs
  that are used in place of the original MIDI music tracks.
  * Support for joysticks and gamepads has been significantly
  improved in this version.
  * OPL MIDI playback has been significantly improved. Multi-track
  MIDI files now play back properly.
  * The "no fog on spawn west" Vanilla bug is now correctly
  emulated.
  * Behavior of older versions of Doom back to v1.666 can now be
  emulated.
- Add chdoom-nonvoid.diff, chdoom-prng.diff to quench compiler
  warnings. Add chdoom-date.diff to kill __DATE__ instances.</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 2.2.1
  * The Hexen four level demo IWAD is now supported.
  * The Doom reload hack has been added back.
  * OPL music playback has been improved in a number of ways to
  match the behavior of Vanilla Doom's DMX library much more
  closely. OPL3 playback is also now supported.
- Drop chdoom-nonvoid.diff (included upstream),
  drop chdoom-prng.diff (PRNG impl. was switched)</changelog>
  <changelog author="jengelh@inai.de" date="1479297600">- Add chdoom-sdlsound.diff to resolve build error with new
  libsamplerate</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Update to new upstream release 2.3.0 (2016-12-29)
  * Pitch-shifting from early versions of Doom, Heretic, and Hexen
    is now supported.
  * Aspect ratio-corrected 1600×1200 PNGs are now written.
  * OPL emulation is more accurate.
  * DMX bugs with GUS cards are now better emulated.
  * Checksum calculations are fixed on big endian systems, allowing
    multiplayer games to be played in mixed little/big-endian
    environments.
  * The vanilla limit of 4046 lumps per WAD is now enforced.
  * Solidsegs overflow is emulated like in vanilla.
  * It is now possible to start multiplayer Chex Quest games.
  * Versions 1.666, 1.7, and 1.8 are emulated.
  * An issue was fixed where the game crashed while killing the
    Wraithverge in 64-bit builds.
- Drop chdoom-date.diff (no longer needed), drop
  chdoom-sdlsound.diff (merged upstream).</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Update to new upstream release 3.0.0 (2017-12-30)
  * Update to SDL2. All scaling is now done in hardware.
  * It is possible to toggle fullscreen with Alt-Enter.
  * On multimonitor setups, the game will remember the used screen.
  * A new parameter, -savedir allows users to specify a directory
    from which to load and save games.
  * The GOG install of Doom 3: BFG Edition is now detected.
  * The CD audio option for music playback has been removed; the CD
    playback API has been removed from SDL 2.0.
  * Strife's voices.wad is now correctly loaded before PWADs.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542196800">- Update description.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591444800">- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1593604800">- Update to release 3.0.1
  * Fixed a bug where a client in a networked game can
    cause a stack-based buffer overflow on the server
    [CVE-2020-14983, boo#1173595]</changelog>
</package>
<package pkgid="b2df478b089e140369ba4244a2c144a0da8e768607cfecbd9d4af603ac1930d8" name="chocolate-doom" arch="x86_64">
  <version epoch="0" ver="3.0.1" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1386676800">- Update to new upstream release 2.0
  * Support for three other Doom engine-based games: Heretic, Hexen,
  and Strife.</changelog>
  <changelog author="jengelh@inai.de" date="1399809600">- Add python to BuildRequires - it is used for manpage generation
  (was previously implicitly included)</changelog>
  <changelog author="jengelh@inai.de" date="1427544000">- Update to new upstream release 2.1
  * Chocolate Doom now supports high-quality substitute music packs
  that are used in place of the original MIDI music tracks.
  * Support for joysticks and gamepads has been significantly
  improved in this version.
  * OPL MIDI playback has been significantly improved. Multi-track
  MIDI files now play back properly.
  * The "no fog on spawn west" Vanilla bug is now correctly
  emulated.
  * Behavior of older versions of Doom back to v1.666 can now be
  emulated.
- Add chdoom-nonvoid.diff, chdoom-prng.diff to quench compiler
  warnings. Add chdoom-date.diff to kill __DATE__ instances.</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 2.2.1
  * The Hexen four level demo IWAD is now supported.
  * The Doom reload hack has been added back.
  * OPL music playback has been improved in a number of ways to
  match the behavior of Vanilla Doom's DMX library much more
  closely. OPL3 playback is also now supported.
- Drop chdoom-nonvoid.diff (included upstream),
  drop chdoom-prng.diff (PRNG impl. was switched)</changelog>
  <changelog author="jengelh@inai.de" date="1479297600">- Add chdoom-sdlsound.diff to resolve build error with new
  libsamplerate</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Update to new upstream release 2.3.0 (2016-12-29)
  * Pitch-shifting from early versions of Doom, Heretic, and Hexen
    is now supported.
  * Aspect ratio-corrected 1600×1200 PNGs are now written.
  * OPL emulation is more accurate.
  * DMX bugs with GUS cards are now better emulated.
  * Checksum calculations are fixed on big endian systems, allowing
    multiplayer games to be played in mixed little/big-endian
    environments.
  * The vanilla limit of 4046 lumps per WAD is now enforced.
  * Solidsegs overflow is emulated like in vanilla.
  * It is now possible to start multiplayer Chex Quest games.
  * Versions 1.666, 1.7, and 1.8 are emulated.
  * An issue was fixed where the game crashed while killing the
    Wraithverge in 64-bit builds.
- Drop chdoom-date.diff (no longer needed), drop
  chdoom-sdlsound.diff (merged upstream).</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Update to new upstream release 3.0.0 (2017-12-30)
  * Update to SDL2. All scaling is now done in hardware.
  * It is possible to toggle fullscreen with Alt-Enter.
  * On multimonitor setups, the game will remember the used screen.
  * A new parameter, -savedir allows users to specify a directory
    from which to load and save games.
  * The GOG install of Doom 3: BFG Edition is now detected.
  * The CD audio option for music playback has been removed; the CD
    playback API has been removed from SDL 2.0.
  * Strife's voices.wad is now correctly loaded before PWADs.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542196800">- Update description.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591444800">- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1593604800">- Update to release 3.0.1
  * Fixed a bug where a client in a networked game can
    cause a stack-based buffer overflow on the server
    [CVE-2020-14983, boo#1173595]</changelog>
</package>
<package pkgid="47074044aa64a83791be56a7fa904aeb611dad32baf07986953725578988a151" name="chocolate-doom-bash-completion" arch="noarch">
  <version epoch="0" ver="3.0.1" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1386676800">- Update to new upstream release 2.0
  * Support for three other Doom engine-based games: Heretic, Hexen,
  and Strife.</changelog>
  <changelog author="jengelh@inai.de" date="1399809600">- Add python to BuildRequires - it is used for manpage generation
  (was previously implicitly included)</changelog>
  <changelog author="jengelh@inai.de" date="1427544000">- Update to new upstream release 2.1
  * Chocolate Doom now supports high-quality substitute music packs
  that are used in place of the original MIDI music tracks.
  * Support for joysticks and gamepads has been significantly
  improved in this version.
  * OPL MIDI playback has been significantly improved. Multi-track
  MIDI files now play back properly.
  * The "no fog on spawn west" Vanilla bug is now correctly
  emulated.
  * Behavior of older versions of Doom back to v1.666 can now be
  emulated.
- Add chdoom-nonvoid.diff, chdoom-prng.diff to quench compiler
  warnings. Add chdoom-date.diff to kill __DATE__ instances.</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 2.2.1
  * The Hexen four level demo IWAD is now supported.
  * The Doom reload hack has been added back.
  * OPL music playback has been improved in a number of ways to
  match the behavior of Vanilla Doom's DMX library much more
  closely. OPL3 playback is also now supported.
- Drop chdoom-nonvoid.diff (included upstream),
  drop chdoom-prng.diff (PRNG impl. was switched)</changelog>
  <changelog author="jengelh@inai.de" date="1479297600">- Add chdoom-sdlsound.diff to resolve build error with new
  libsamplerate</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Update to new upstream release 2.3.0 (2016-12-29)
  * Pitch-shifting from early versions of Doom, Heretic, and Hexen
    is now supported.
  * Aspect ratio-corrected 1600×1200 PNGs are now written.
  * OPL emulation is more accurate.
  * DMX bugs with GUS cards are now better emulated.
  * Checksum calculations are fixed on big endian systems, allowing
    multiplayer games to be played in mixed little/big-endian
    environments.
  * The vanilla limit of 4046 lumps per WAD is now enforced.
  * Solidsegs overflow is emulated like in vanilla.
  * It is now possible to start multiplayer Chex Quest games.
  * Versions 1.666, 1.7, and 1.8 are emulated.
  * An issue was fixed where the game crashed while killing the
    Wraithverge in 64-bit builds.
- Drop chdoom-date.diff (no longer needed), drop
  chdoom-sdlsound.diff (merged upstream).</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Update to new upstream release 3.0.0 (2017-12-30)
  * Update to SDL2. All scaling is now done in hardware.
  * It is possible to toggle fullscreen with Alt-Enter.
  * On multimonitor setups, the game will remember the used screen.
  * A new parameter, -savedir allows users to specify a directory
    from which to load and save games.
  * The GOG install of Doom 3: BFG Edition is now detected.
  * The CD audio option for music playback has been removed; the CD
    playback API has been removed from SDL 2.0.
  * Strife's voices.wad is now correctly loaded before PWADs.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542196800">- Update description.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591444800">- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1593604800">- Update to release 3.0.1
  * Fixed a bug where a client in a networked game can
    cause a stack-based buffer overflow on the server
    [CVE-2020-14983, boo#1173595]</changelog>
</package>
<package pkgid="f00d082cc8b238603d49c23bfb0920803604bf193c297b57c70f9c44ca4b1f32" name="choqok" arch="src">
  <version epoch="0" ver="1.7.0" rel="lp151.3.3.1"/>
  <changelog author="coolo@novell.com" date="1300795200">- licenses package is about to die</changelog>
  <changelog author="wstephenson@novell.com" date="1301918400">- Update to version 1.1
  * Translator plugin
  * Quick Filter plugin
  * System tray icon problem in GNOME fixed
  * Hide Menu-bar option
  * Choqok caches posts automatically and not just at exit
  * Fixed video preview plugin problem that causes Choqok to crash
  * Bug fixes</changelog>
  <changelog author="javier@opensuse.org" date="1311854400">- Add user friends list bugfix (bko#275185)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Removed commented files (fix for RPMLINT warning)
- Cleaned up spec file formatting</changelog>
  <changelog author="mlin@suse.com" date="1331035200">- Update to version 1.3
  * Support for Twitter photo upload API method
  * Translator plugin shuts off due Google terminated its free API
  * Toolbar for Choqok
  * Filter plugin new feature: Add a filter to Highlight a post containing some text
  * Improvements in new tab bar UI
  * Show first 4 characters of search timeline name over the timeline icon</changelog>
  <changelog author="coolo@suse.com" date="1366200000">- remove file conflicting with kdepimlibs4</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1371384000">- Added patch twitter-api.diff to make choqok work with the
  Twitter api v1.1 (bko#264091)</changelog>
  <changelog author="fisiu@opensuse.org" date="1378296000">- Update to 1.4:
  * Support for Twitter API v1.1.
  * "Mark timeline as read" menu item added to tabs context menu.
  * Show "In reply to" in twitter search timelines.
  * Identi.ca support removed from StatusNet plugin.
  * And some other minor fixes
- Drop twitter-api.diff: fixed upstream.</changelog>
  <changelog author="fisiu@opensuse.org" date="1391688000">- Add choqok-1.4-twitter-favorities-fix.patch: fix bnc#862467.
- Add choqok-1.4-plugin-yourls-fix.patch: fix yourls shortener plugin,
  kde#265219.</changelog>
  <changelog author="olaf@aepfle.de" date="1418299200">- Correct usage of fdupes macro</changelog>
  <changelog author="buschmann23@opensuse.org" date="1424779200">- Update to 1.5:
  * Yourls plugin fixed. (by Benjamin Marwell) [BUG:265219]
  * Pump.io plugin added. (by Andrea Scarpino) [BUG:319348]
  * Preview of images posted via Twitter.com added. (by Daniel Kreuter) [BUG:299433]
  * Option to disable system tray. (by Andrea Scarpino) [BUG:241152]
  * Twitter friend list update fixed. [BUG:325071]
  * Add "Report User" to User menu Actions (by Ahmed I. Khalil)
  * Get custom char limit for the Status.net accounts. (by Andrea Scarpino) [BUG:283298]
  * Goo.gl shortner plugin fixed. (by Andrea Scarpino) [BUG:338917]
  * New plugin for expanding tiny URLs. (by Andrea Scarpino) [BUG:294600]
  * KDE Telepathy support in IMStatus Plugin (by Ahmed I. Khalil) [BUG:301702]
  * Broken shortening plugins removed
- removed patches that have been integrated upstream
  * choqok-1.4-twitter-favorities-fix.patch
  * choqok-1.4-plugin-yourls-fix.patch
- added libattical devel to the BuildRequires</changelog>
  <changelog author="dimstar@opensuse.org" date="1454068800">- Add a comment to the .desktop file using
  suse_update_desktop_file.</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="wbauer@tmo.at" date="1482840000">- Update to 1.6.0:
  * Migrated to Qt and KDE Frameworks 5 (config files are migrated first time)
  * Add Friendica microblog based on GNU Social api
  * Rename StatusNet microblog as GNU Social
  * Twitter: fix user lists loading
  * Twitter: allow to select any follower when sending a direct message
  * Twitter: fix searches by username
  * Twitter: fix searches by hashtag
  * Twitter: show original retweet time
  * Twitter: fix external URL to access direct messages and tweets
  * Twitter: send direct message without text limits
  * Twitter: support to send and view tweets with quoted text
  * Twitter: allow to delete direct messages
  * GNU Social: fix medium attachment to post
  * GNU Social: allow to send direct messages
  * Fix removal of accounts with spaces in their names
  * Fixed the bug that overwrite an account if you use the same alias of another
  * Always use HTTPS when available
  * ImageView: dropped Twitpic, Plixi and Tweetphoto support (services are dead)
  * Enable Untiny plugin
  * Remove LongUrl plugin (service is dead)
  * Remove Ur.ly shortner (service is dead)
  * A couple of segmentation fault fixes</changelog>
  <changelog author="wbauer@tmo.at" date="1486555200">- Fix source URL</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Trim filler words, remove redundant %clean</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565611200">- Add Fix-build-with-Qt-5_13.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1580990400">- Update to 1.7.0:
  * Port to QtNetworkAuth and drop qoauth dependency
  * Plugin compability break: MicroBlog::profileUrl returns a QUrl
    instead
  * Plugin compability break: MicroBlog::postUrl returns a QUrl
    instead
  * Allow to disable accounts
  * Honour the default font (kde#372291)
  * Make the sign footer consistent between all microplugins
  * Unread post count in the application title sums all unread
    posts' accounts
  * Twitter: update char limit to 280
  * Twitter: support extended tweets (kde#370260)
  * Twitter: fix list browsing (kde#382392)
  * Twitter: fix followers list
  * Twitter: show client source even for private messages
  * Twitter: show user' real name when no description is set
  * GNU Social: do not rely over qvitter to get the post url
  * GNU Social: hide linkback statuses
  * GNU Social: show user' real name when no description is set
  * Pump.io: escape the description
  * Pump.io: show user' real name when no description is set
  * Drop yFrog support from ImagePreview plugin
- Drop Fix-build-with-Qt-5_13.patch, merged upstream
- Update BuildRequires, switch to cmake() style
- Update URL</changelog>
  <changelog author="wbauer@tmo.at" date="1584187200">- Add upstream patches to fix problems that still were present in
  the 1.7.0 release:
  * Fix-retrieving-Twitter-conversations.patch (kde#417193)
  * Link-to-the-original-post-for-retweets.patch
  * twitter-Dont-overwrite-contents-of-retweets.patch (kde#370260)</changelog>
</package>
<package pkgid="a1a56dc04558b3139dcc27fd3fd9bb3f7254af90cfd3c602026d136d90b2b8ed" name="choqok" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="lp151.3.3.1"/>
  <changelog author="olaf@aepfle.de" date="1418299200">- Correct usage of fdupes macro</changelog>
  <changelog author="buschmann23@opensuse.org" date="1424779200">- Update to 1.5:
  * Yourls plugin fixed. (by Benjamin Marwell) [BUG:265219]
  * Pump.io plugin added. (by Andrea Scarpino) [BUG:319348]
  * Preview of images posted via Twitter.com added. (by Daniel Kreuter) [BUG:299433]
  * Option to disable system tray. (by Andrea Scarpino) [BUG:241152]
  * Twitter friend list update fixed. [BUG:325071]
  * Add "Report User" to User menu Actions (by Ahmed I. Khalil)
  * Get custom char limit for the Status.net accounts. (by Andrea Scarpino) [BUG:283298]
  * Goo.gl shortner plugin fixed. (by Andrea Scarpino) [BUG:338917]
  * New plugin for expanding tiny URLs. (by Andrea Scarpino) [BUG:294600]
  * KDE Telepathy support in IMStatus Plugin (by Ahmed I. Khalil) [BUG:301702]
  * Broken shortening plugins removed
- removed patches that have been integrated upstream
  * choqok-1.4-twitter-favorities-fix.patch
  * choqok-1.4-plugin-yourls-fix.patch
- added libattical devel to the BuildRequires</changelog>
  <changelog author="dimstar@opensuse.org" date="1454068800">- Add a comment to the .desktop file using
  suse_update_desktop_file.</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="wbauer@tmo.at" date="1482840000">- Update to 1.6.0:
  * Migrated to Qt and KDE Frameworks 5 (config files are migrated first time)
  * Add Friendica microblog based on GNU Social api
  * Rename StatusNet microblog as GNU Social
  * Twitter: fix user lists loading
  * Twitter: allow to select any follower when sending a direct message
  * Twitter: fix searches by username
  * Twitter: fix searches by hashtag
  * Twitter: show original retweet time
  * Twitter: fix external URL to access direct messages and tweets
  * Twitter: send direct message without text limits
  * Twitter: support to send and view tweets with quoted text
  * Twitter: allow to delete direct messages
  * GNU Social: fix medium attachment to post
  * GNU Social: allow to send direct messages
  * Fix removal of accounts with spaces in their names
  * Fixed the bug that overwrite an account if you use the same alias of another
  * Always use HTTPS when available
  * ImageView: dropped Twitpic, Plixi and Tweetphoto support (services are dead)
  * Enable Untiny plugin
  * Remove LongUrl plugin (service is dead)
  * Remove Ur.ly shortner (service is dead)
  * A couple of segmentation fault fixes</changelog>
  <changelog author="wbauer@tmo.at" date="1486555200">- Fix source URL</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Trim filler words, remove redundant %clean</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565611200">- Add Fix-build-with-Qt-5_13.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1580990400">- Update to 1.7.0:
  * Port to QtNetworkAuth and drop qoauth dependency
  * Plugin compability break: MicroBlog::profileUrl returns a QUrl
    instead
  * Plugin compability break: MicroBlog::postUrl returns a QUrl
    instead
  * Allow to disable accounts
  * Honour the default font (kde#372291)
  * Make the sign footer consistent between all microplugins
  * Unread post count in the application title sums all unread
    posts' accounts
  * Twitter: update char limit to 280
  * Twitter: support extended tweets (kde#370260)
  * Twitter: fix list browsing (kde#382392)
  * Twitter: fix followers list
  * Twitter: show client source even for private messages
  * Twitter: show user' real name when no description is set
  * GNU Social: do not rely over qvitter to get the post url
  * GNU Social: hide linkback statuses
  * GNU Social: show user' real name when no description is set
  * Pump.io: escape the description
  * Pump.io: show user' real name when no description is set
  * Drop yFrog support from ImagePreview plugin
- Drop Fix-build-with-Qt-5_13.patch, merged upstream
- Update BuildRequires, switch to cmake() style
- Update URL</changelog>
  <changelog author="wbauer@tmo.at" date="1584187200">- Add upstream patches to fix problems that still were present in
  the 1.7.0 release:
  * Fix-retrieving-Twitter-conversations.patch (kde#417193)
  * Link-to-the-original-post-for-retweets.patch
  * twitter-Dont-overwrite-contents-of-retweets.patch (kde#370260)</changelog>
</package>
<package pkgid="128bd8da370e549902a57763e2c28c9287052879f4339651ae027d440a55833b" name="choqok-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="lp151.3.3.1"/>
  <changelog author="olaf@aepfle.de" date="1418299200">- Correct usage of fdupes macro</changelog>
  <changelog author="buschmann23@opensuse.org" date="1424779200">- Update to 1.5:
  * Yourls plugin fixed. (by Benjamin Marwell) [BUG:265219]
  * Pump.io plugin added. (by Andrea Scarpino) [BUG:319348]
  * Preview of images posted via Twitter.com added. (by Daniel Kreuter) [BUG:299433]
  * Option to disable system tray. (by Andrea Scarpino) [BUG:241152]
  * Twitter friend list update fixed. [BUG:325071]
  * Add "Report User" to User menu Actions (by Ahmed I. Khalil)
  * Get custom char limit for the Status.net accounts. (by Andrea Scarpino) [BUG:283298]
  * Goo.gl shortner plugin fixed. (by Andrea Scarpino) [BUG:338917]
  * New plugin for expanding tiny URLs. (by Andrea Scarpino) [BUG:294600]
  * KDE Telepathy support in IMStatus Plugin (by Ahmed I. Khalil) [BUG:301702]
  * Broken shortening plugins removed
- removed patches that have been integrated upstream
  * choqok-1.4-twitter-favorities-fix.patch
  * choqok-1.4-plugin-yourls-fix.patch
- added libattical devel to the BuildRequires</changelog>
  <changelog author="dimstar@opensuse.org" date="1454068800">- Add a comment to the .desktop file using
  suse_update_desktop_file.</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="wbauer@tmo.at" date="1482840000">- Update to 1.6.0:
  * Migrated to Qt and KDE Frameworks 5 (config files are migrated first time)
  * Add Friendica microblog based on GNU Social api
  * Rename StatusNet microblog as GNU Social
  * Twitter: fix user lists loading
  * Twitter: allow to select any follower when sending a direct message
  * Twitter: fix searches by username
  * Twitter: fix searches by hashtag
  * Twitter: show original retweet time
  * Twitter: fix external URL to access direct messages and tweets
  * Twitter: send direct message without text limits
  * Twitter: support to send and view tweets with quoted text
  * Twitter: allow to delete direct messages
  * GNU Social: fix medium attachment to post
  * GNU Social: allow to send direct messages
  * Fix removal of accounts with spaces in their names
  * Fixed the bug that overwrite an account if you use the same alias of another
  * Always use HTTPS when available
  * ImageView: dropped Twitpic, Plixi and Tweetphoto support (services are dead)
  * Enable Untiny plugin
  * Remove LongUrl plugin (service is dead)
  * Remove Ur.ly shortner (service is dead)
  * A couple of segmentation fault fixes</changelog>
  <changelog author="wbauer@tmo.at" date="1486555200">- Fix source URL</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Trim filler words, remove redundant %clean</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565611200">- Add Fix-build-with-Qt-5_13.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1580990400">- Update to 1.7.0:
  * Port to QtNetworkAuth and drop qoauth dependency
  * Plugin compability break: MicroBlog::profileUrl returns a QUrl
    instead
  * Plugin compability break: MicroBlog::postUrl returns a QUrl
    instead
  * Allow to disable accounts
  * Honour the default font (kde#372291)
  * Make the sign footer consistent between all microplugins
  * Unread post count in the application title sums all unread
    posts' accounts
  * Twitter: update char limit to 280
  * Twitter: support extended tweets (kde#370260)
  * Twitter: fix list browsing (kde#382392)
  * Twitter: fix followers list
  * Twitter: show client source even for private messages
  * Twitter: show user' real name when no description is set
  * GNU Social: do not rely over qvitter to get the post url
  * GNU Social: hide linkback statuses
  * GNU Social: show user' real name when no description is set
  * Pump.io: escape the description
  * Pump.io: show user' real name when no description is set
  * Drop yFrog support from ImagePreview plugin
- Drop Fix-build-with-Qt-5_13.patch, merged upstream
- Update BuildRequires, switch to cmake() style
- Update URL</changelog>
  <changelog author="wbauer@tmo.at" date="1584187200">- Add upstream patches to fix problems that still were present in
  the 1.7.0 release:
  * Fix-retrieving-Twitter-conversations.patch (kde#417193)
  * Link-to-the-original-post-for-retweets.patch
  * twitter-Dont-overwrite-contents-of-retweets.patch (kde#370260)</changelog>
</package>
<package pkgid="2c278743a3f84f2413bc82e59d0502f01763310e6751650b84af95850a307b8a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="74.0.3729.157" rel="lp151.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
</package>
<package pkgid="529d41e52e1fd3cf102a4f6e7954163c6d78e06078c340d5cc7324bc2fd68af0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="75.0.3770.142" rel="lp151.2.12.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
</package>
<package pkgid="15017191ec8a594c636086501c82f2def8105bf1f887e6ae28df5c6cf72a6f68" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="75.0.3770.80" rel="lp151.2.6.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
</package>
<package pkgid="1eff2764caf34aa00836a7e747d94033f19ded603c6e01166cab7f2a9992422c" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="75.0.3770.90" rel="lp151.2.9.3"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
</package>
<package pkgid="b4616e47979870b8f27fd0db93b6e70439870760a59e2b907b81ac4028648624" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="76.0.3809.100" rel="lp151.2.20.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
</package>
<package pkgid="523042c5f7929826c30f7f0f6b51f668cb68bd396fec7e13627f0b3c7ef23b04" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="76.0.3809.132" rel="lp151.2.25.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
</package>
<package pkgid="72f25bc1a80963beb67484d752643928ce872701f6341fe1c79d1abc40c27935" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="76.0.3809.87" rel="lp151.2.15.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
</package>
<package pkgid="bde205d1093480adf909c2b3623da8b8df8ba8b8ef5a46d1ba1506a1a1202dba" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="77.0.3865.120" rel="lp151.2.36.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="0b4907142e524501e2a3d1f73b404aafcc059143f684f8f47cdb0b08bb0700d1" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="77.0.3865.75" rel="lp151.2.30.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
</package>
<package pkgid="cad1c6f84fb5ab9a7b16b89dd82af5cb79d8ae850dd1f97cd64f3ec3250a3d47" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="77.0.3865.90" rel="lp151.2.33.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
</package>
<package pkgid="f0494a70668e739aae0beeaffe001bb39bb46087d16031c21d756399cbfa1bf7" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="78.0.3904.108" rel="lp151.2.48.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="3a66b3708aeb31cd8082937a6a9c29a7c61e32981d1564178ffbb5854ce29bfa" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="78.0.3904.70" rel="lp151.2.39.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
</package>
<package pkgid="b32ecc8ef457a23b9a45f51338d176dbf16864e2449afef466a487530ad13e58" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="78.0.3904.87" rel="lp151.2.42.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
</package>
<package pkgid="7eae2099be86b017d23ae5d395bc3bb4e05f540746a88fb1f645657a01159d17" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="78.0.3904.97" rel="lp151.2.45.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="b694bfe846f0747ab3e2baec8b64db0d50a1448dfc56bbd85f688b0f697ad497" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="79.0.3945.117" rel="lp151.2.57.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-TBD: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="8ba4cd7ec5a7fffdeb16f70078ea8ad2bac810a1614762d6d5cc0a62c7451c31" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="79.0.3945.130" rel="lp151.2.60.4"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="d0ccc9dfab5c11c2a8e775bb7e6fdfbcaa2b574eb86bcf8c5e78a238741d60ef" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="79.0.3945.79" rel="lp151.2.51.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
</package>
<package pkgid="8949c681d99e63ec9a0037697e7e5bd6c73d3bf48d9632364326fedfcb6a448e" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="79.0.3945.88" rel="lp151.2.54.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
</package>
<package pkgid="c03649bec7447d62248efa4015fd7aacf38306ea5197264259fc06cdc5439bd0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="80.0.3987.122" rel="lp151.2.66.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
</package>
<package pkgid="7f3fca6560cd06398ae83aaecb707bf5894409816265e611320da1a99e30c4aa" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="80.0.3987.132" rel="lp151.2.69.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
</package>
<package pkgid="09f24e2eda0749a8a926098f5b67bfac7bade69acf793215cafd02eb1a04dd92" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="80.0.3987.149" rel="lp151.2.73.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149 (bsc#1167090):
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="991dfb24e641ef21cf95926aac822e79956059608093bc2eee0499be8bfbc10f" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="80.0.3987.87" rel="lp151.2.63.1"/>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
</package>
<package pkgid="e84fc1899e5275b80a49710f3af896d87298d77a14cbf4e582035fc3ee598f6a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="81.0.4044.113" rel="lp151.2.80.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149:
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584964800">- Add patch to allow building with pipewire 0.3:
  * build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585310400">- Use a symbolic icon for GNOME</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585396800">- Add chromium-missing-cstdint-header.patch,
  chromium-missing-cstring-header.patch,
  chromium-missing-cstring-header2.patch and
  chromium-missing-cstddef-header.patch in order to fix boo#1167465.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585483200">- Rebase build-with-pipewire-0.3.patch in order to fix
  patch collision.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 80.0.3987.162 bsc#1168421:
  * CVE-2020-6450: Use after free in WebAudio.
  * CVE-2020-6451: Use after free in WebAudio.
  * CVE-2020-6452: Heap buffer overflow in media.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586347200">- Update to 81.0.4044.92 bsc#1168911:
  * CVE-2020-6454: Use after free in extensions
  * CVE-2020-6423: Use after free in audio
  * CVE-2020-6455: Out of bounds read in WebSQL
  * CVE-2020-6430: Type Confusion in V8
  * CVE-2020-6456: Insufficient validation of untrusted input in clipboard
  * CVE-2020-6431: Insufficient policy enforcement in full screen
  * CVE-2020-6432: Insufficient policy enforcement in navigations
  * CVE-2020-6433: Insufficient policy enforcement in extensions
  * CVE-2020-6434: Use after free in devtools
  * CVE-2020-6435: Insufficient policy enforcement in extensions
  * CVE-2020-6436: Use after free in window management
  * CVE-2020-6437: Inappropriate implementation in WebView
  * CVE-2020-6438: Insufficient policy enforcement in extensions
  * CVE-2020-6439: Insufficient policy enforcement in navigations
  * CVE-2020-6440: Inappropriate implementation in extensions
  * CVE-2020-6441: Insufficient policy enforcement in omnibox
  * CVE-2020-6442: Inappropriate implementation in cache
  * CVE-2020-6443: Insufficient data validation in developer tools
  * CVE-2020-6444: Uninitialized Use in WebRTC
  * CVE-2020-6445: Insufficient policy enforcement in trusted types
  * CVE-2020-6446: Insufficient policy enforcement in trusted types
  * CVE-2020-6447: Inappropriate implementation in developer tools
  * CVE-2020-6448: Use after free in V8
- Add new patches:
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Remove no longer needed patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-missing-cstddef-header.patch
  * chromium-missing-cstdint-header.patch
  * chromium-missing-cstring-header.patch
  * chromium-missing-cstring-header2.patch
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * webrtc-pulse.patch
- Rebase patches:
  * build-with-pipewire-0.3.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * gpu-timeout.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586865600">- Try to use system version of xdg-utils</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587124800">- Update to 81.0.4044.113 bsc#1169729:
  * CVE-2020-6457: Use after free in speech recognizer</changelog>
</package>
<package pkgid="4777cbe2b87c00a54c0774226438c7a1fd41c013de352bad85e1d30e322e1410" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="81.0.4044.129" rel="lp151.2.85.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149:
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584964800">- Add patch to allow building with pipewire 0.3:
  * build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585310400">- Use a symbolic icon for GNOME</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585396800">- Add chromium-missing-cstdint-header.patch,
  chromium-missing-cstring-header.patch,
  chromium-missing-cstring-header2.patch and
  chromium-missing-cstddef-header.patch in order to fix boo#1167465.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585483200">- Rebase build-with-pipewire-0.3.patch in order to fix
  patch collision.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 80.0.3987.162 bsc#1168421:
  * CVE-2020-6450: Use after free in WebAudio.
  * CVE-2020-6451: Use after free in WebAudio.
  * CVE-2020-6452: Heap buffer overflow in media.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586347200">- Update to 81.0.4044.92 bsc#1168911:
  * CVE-2020-6454: Use after free in extensions
  * CVE-2020-6423: Use after free in audio
  * CVE-2020-6455: Out of bounds read in WebSQL
  * CVE-2020-6430: Type Confusion in V8
  * CVE-2020-6456: Insufficient validation of untrusted input in clipboard
  * CVE-2020-6431: Insufficient policy enforcement in full screen
  * CVE-2020-6432: Insufficient policy enforcement in navigations
  * CVE-2020-6433: Insufficient policy enforcement in extensions
  * CVE-2020-6434: Use after free in devtools
  * CVE-2020-6435: Insufficient policy enforcement in extensions
  * CVE-2020-6436: Use after free in window management
  * CVE-2020-6437: Inappropriate implementation in WebView
  * CVE-2020-6438: Insufficient policy enforcement in extensions
  * CVE-2020-6439: Insufficient policy enforcement in navigations
  * CVE-2020-6440: Inappropriate implementation in extensions
  * CVE-2020-6441: Insufficient policy enforcement in omnibox
  * CVE-2020-6442: Inappropriate implementation in cache
  * CVE-2020-6443: Insufficient data validation in developer tools
  * CVE-2020-6444: Uninitialized Use in WebRTC
  * CVE-2020-6445: Insufficient policy enforcement in trusted types
  * CVE-2020-6446: Insufficient policy enforcement in trusted types
  * CVE-2020-6447: Inappropriate implementation in developer tools
  * CVE-2020-6448: Use after free in V8
- Add new patches:
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Remove no longer needed patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-missing-cstddef-header.patch
  * chromium-missing-cstdint-header.patch
  * chromium-missing-cstring-header.patch
  * chromium-missing-cstring-header2.patch
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * webrtc-pulse.patch
- Rebase patches:
  * build-with-pipewire-0.3.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * gpu-timeout.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586865600">- Try to use system version of xdg-utils</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587124800">- Update to 81.0.4044.113 bsc#1169729:
  * CVE-2020-6457: Use after free in speech recognizer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587470400">- Update to 81.0.4044.122 (boo#1170107):
  * CVE-2020-6459: Use after free in payments
  * CVE-2020-6460: Insufficient data validation in URL formatting
  * CVE-2020-6458: Out of bounds read and write in PDFium</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1588075200">- Add chromium-80.0.3987.87-missing-cstdint-header.patch,
  chromium-80.0.3987.87-missing-string-header.patch and
  chromium-80.0.3987.106-missing-cstddef-header.patch
  in order to fix build with GCC 10.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588161600">- update to 81.0.4044.129 (boo#1170707):
  * CVE-2020-0561: Use after free in storage
  * CVE-2020-6462: Use after free in task scheduling</changelog>
</package>
<package pkgid="d69b910f7ffdd89465f09846d6b2d8ddfb71f0af09b3042ded169ef20f6e42eb" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="81.0.4044.138" rel="lp151.2.88.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149:
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584964800">- Add patch to allow building with pipewire 0.3:
  * build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585310400">- Use a symbolic icon for GNOME</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585396800">- Add chromium-missing-cstdint-header.patch,
  chromium-missing-cstring-header.patch,
  chromium-missing-cstring-header2.patch and
  chromium-missing-cstddef-header.patch in order to fix boo#1167465.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585483200">- Rebase build-with-pipewire-0.3.patch in order to fix
  patch collision.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 80.0.3987.162 bsc#1168421:
  * CVE-2020-6450: Use after free in WebAudio.
  * CVE-2020-6451: Use after free in WebAudio.
  * CVE-2020-6452: Heap buffer overflow in media.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586347200">- Update to 81.0.4044.92 bsc#1168911:
  * CVE-2020-6454: Use after free in extensions
  * CVE-2020-6423: Use after free in audio
  * CVE-2020-6455: Out of bounds read in WebSQL
  * CVE-2020-6430: Type Confusion in V8
  * CVE-2020-6456: Insufficient validation of untrusted input in clipboard
  * CVE-2020-6431: Insufficient policy enforcement in full screen
  * CVE-2020-6432: Insufficient policy enforcement in navigations
  * CVE-2020-6433: Insufficient policy enforcement in extensions
  * CVE-2020-6434: Use after free in devtools
  * CVE-2020-6435: Insufficient policy enforcement in extensions
  * CVE-2020-6436: Use after free in window management
  * CVE-2020-6437: Inappropriate implementation in WebView
  * CVE-2020-6438: Insufficient policy enforcement in extensions
  * CVE-2020-6439: Insufficient policy enforcement in navigations
  * CVE-2020-6440: Inappropriate implementation in extensions
  * CVE-2020-6441: Insufficient policy enforcement in omnibox
  * CVE-2020-6442: Inappropriate implementation in cache
  * CVE-2020-6443: Insufficient data validation in developer tools
  * CVE-2020-6444: Uninitialized Use in WebRTC
  * CVE-2020-6445: Insufficient policy enforcement in trusted types
  * CVE-2020-6446: Insufficient policy enforcement in trusted types
  * CVE-2020-6447: Inappropriate implementation in developer tools
  * CVE-2020-6448: Use after free in V8
- Add new patches:
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Remove no longer needed patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-missing-cstddef-header.patch
  * chromium-missing-cstdint-header.patch
  * chromium-missing-cstring-header.patch
  * chromium-missing-cstring-header2.patch
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * webrtc-pulse.patch
- Rebase patches:
  * build-with-pipewire-0.3.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * gpu-timeout.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586865600">- Try to use system version of xdg-utils</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587124800">- Update to 81.0.4044.113 bsc#1169729:
  * CVE-2020-6457: Use after free in speech recognizer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587470400">- Update to 81.0.4044.122 (boo#1170107):
  * CVE-2020-6459: Use after free in payments
  * CVE-2020-6460: Insufficient data validation in URL formatting
  * CVE-2020-6458: Out of bounds read and write in PDFium</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1588075200">- Add chromium-80.0.3987.87-missing-cstdint-header.patch,
  chromium-80.0.3987.87-missing-string-header.patch and
  chromium-80.0.3987.106-missing-cstddef-header.patch
  in order to fix build with GCC 10.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588161600">- update to 81.0.4044.129 (boo#1170707):
  * CVE-2020-0561: Use after free in storage
  * CVE-2020-6462: Use after free in task scheduling</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1588680000">- Add icu-v67.patch from upstream to fix build with icu v67</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1588766400">- update to 81.0.4044.138 bsc#1171247:
  * CVE-2020-6831: Stack buffer overflow in SCTP
  * CVE-2020-6464: Type Confusion in Blink.</changelog>
</package>
<package pkgid="d870dd743bb656b3079059104d20e8917182f02b19134d9d18b49898299c1c5d" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="81.0.4044.92" rel="lp151.2.77.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149:
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584964800">- Add patch to allow building with pipewire 0.3:
  * build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585310400">- Use a symbolic icon for GNOME</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585396800">- Add chromium-missing-cstdint-header.patch,
  chromium-missing-cstring-header.patch,
  chromium-missing-cstring-header2.patch and
  chromium-missing-cstddef-header.patch in order to fix boo#1167465.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585483200">- Rebase build-with-pipewire-0.3.patch in order to fix
  patch collision.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 80.0.3987.162 bsc#1168421:
  * CVE-2020-6450: Use after free in WebAudio.
  * CVE-2020-6451: Use after free in WebAudio.
  * CVE-2020-6452: Heap buffer overflow in media.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586347200">- Update to 81.0.4044.92 bsc#1168911:
  * CVE-2020-6454: Use after free in extensions
  * CVE-2020-6423: Use after free in audio
  * CVE-2020-6455: Out of bounds read in WebSQL
  * CVE-2020-6430: Type Confusion in V8
  * CVE-2020-6456: Insufficient validation of untrusted input in clipboard
  * CVE-2020-6431: Insufficient policy enforcement in full screen
  * CVE-2020-6432: Insufficient policy enforcement in navigations
  * CVE-2020-6433: Insufficient policy enforcement in extensions
  * CVE-2020-6434: Use after free in devtools
  * CVE-2020-6435: Insufficient policy enforcement in extensions
  * CVE-2020-6436: Use after free in window management
  * CVE-2020-6437: Inappropriate implementation in WebView
  * CVE-2020-6438: Insufficient policy enforcement in extensions
  * CVE-2020-6439: Insufficient policy enforcement in navigations
  * CVE-2020-6440: Inappropriate implementation in extensions
  * CVE-2020-6441: Insufficient policy enforcement in omnibox
  * CVE-2020-6442: Inappropriate implementation in cache
  * CVE-2020-6443: Insufficient data validation in developer tools
  * CVE-2020-6444: Uninitialized Use in WebRTC
  * CVE-2020-6445: Insufficient policy enforcement in trusted types
  * CVE-2020-6446: Insufficient policy enforcement in trusted types
  * CVE-2020-6447: Inappropriate implementation in developer tools
  * CVE-2020-6448: Use after free in V8
- Add new patches:
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Remove no longer needed patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-missing-cstddef-header.patch
  * chromium-missing-cstdint-header.patch
  * chromium-missing-cstring-header.patch
  * chromium-missing-cstring-header2.patch
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * webrtc-pulse.patch
- Rebase patches:
  * build-with-pipewire-0.3.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * gpu-timeout.patch
  * old-libva.patch</changelog>
</package>
<package pkgid="2c123e63de4bc1f4e6b2f39e013518d39fcb3c175a0406e69421f7da0ccf2c8f" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="83.0.4103.106" rel="lp151.2.101.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587470400">- Update to 81.0.4044.122 (boo#1170107 bsc#1171975):
  * CVE-2020-6459: Use after free in payments
  * CVE-2020-6460: Insufficient data validation in URL formatting
  * CVE-2020-6458: Out of bounds read and write in PDFium
  * CVE-2020-6463: Use after free in ANGLE</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1588075200">- Add chromium-80.0.3987.87-missing-cstdint-header.patch,
  chromium-80.0.3987.87-missing-string-header.patch and
  chromium-80.0.3987.106-missing-cstddef-header.patch
  in order to fix build with GCC 10.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588161600">- update to 81.0.4044.129 (boo#1170707):
  * CVE-2020-0561: Use after free in storage
  * CVE-2020-6462: Use after free in task scheduling</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1588680000">- Add icu-v67.patch from upstream to fix build with icu v67</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1588766400">- update to 81.0.4044.138 bsc#1171247:
  * CVE-2020-6831: Stack buffer overflow in SCTP
  * CVE-2020-6464: Type Confusion in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589976000">- Update to 83.0.4103.61 bsc#1171910:
  * CVE-2020-6465: Use after free in reader mode. Reported by Woojin Oh(@pwn_expoit) of STEALIEN on 2020-04-21
  * CVE-2020-6466: Use after free in media. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-04-26
  * CVE-2020-6467: Use after free in WebRTC. Reported by ZhanJia Song on 2020-04-06
  * CVE-2020-6468: Type Confusion in V8. Reported by Chris Salls and Jake Corina of Seaside Security, Chani Jindal of Shellphish on 2020-04-30
  * CVE-2020-6469: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-04-02
  * CVE-2020-6470: Insufficient validation of untrusted input in clipboard. Reported by Micha? Bentkowski of Securitum on 2020-03-30
  * CVE-2020-6471: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-08
  * CVE-2020-6472: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-25
  * CVE-2020-6473: Insufficient policy enforcement in Blink. Reported by Soroush Karami and Panagiotis Ilia on 2020-02-06
  * CVE-2020-6474: Use after free in Blink. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-03-07
  * CVE-2020-6475: Incorrect security UI in full screen. Reported by Khalil Zhani on 2019-10-31
  * CVE-2020-6476: Insufficient policy enforcement in tab strip. Reported by Alexandre Le Borgne on 2019-12-18
  * CVE-2020-6477: Inappropriate implementation in installer. Reported by RACK911 Labs on 2019-03-26
  * CVE-2020-6478: Inappropriate implementation in full screen. Reported by Khalil Zhani on 2019-12-24
  * CVE-2020-6479: Inappropriate implementation in sharing. Reported by Zhong Zhaochen of andsecurity.cn on 2020-01-14
  * CVE-2020-6480: Insufficient policy enforcement in enterprise. Reported by Marvin Witt on 2020-02-21
  * CVE-2020-6481: Insufficient policy enforcement in URL formatting. Reported by Rayyan Bijoora on 2020-04-07
  * CVE-2020-6482: Insufficient policy enforcement in developer tools. Reported by Abdulrahman Alqabandi (@qab) on 2017-12-17
  * CVE-2020-6483: Insufficient policy enforcement in payments. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on 2019-05-23
  * CVE-2020-6484: Insufficient data validation in ChromeDriver. Reported by Artem Zinenko on 2020-01-26
  * CVE-2020-6485: Insufficient data validation in media router. Reported by Sergei Glazunov of Google Project Zero on 2020-01-30
  * CVE-2020-6486: Insufficient policy enforcement in navigations. Reported by David Erceg on 2020-02-24
  * CVE-2020-6487: Insufficient policy enforcement in downloads. Reported by Jun Kokatsu (@shhnjk) on 2015-10-06
  * CVE-2020-6488: Insufficient policy enforcement in downloads. Reported by David Erceg on 2020-01-21
  * CVE-2020-6489: Inappropriate implementation in developer tools. Reported by @lovasoa (Ophir LOJKINE) on 2020-02-10
  * CVE-2020-6490: Insufficient data validation in loader. Reported by Twitter on 2019-12-19
  * CVE-2020-6491: Incorrect security UI in site information. Reported by Sultan Haikal M.A on 2020-02-07
- Rebase patch:
  * chromium-vaapi.patch
- Remove merged patches:
  * icu-v67.patch
  * chromium-80-gcc-blink.patch
  * chromium-80.0.3987.106-missing-cstddef-header.patch
  * chromium-80.0.3987.87-missing-cstdint-header.patch
  * chromium-80.0.3987.87-missing-string-header.patch
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * chromium-old-glibc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Add new patches:
  * chromium-82-gcc-constexpr.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-82-gcc-template.patch
  * chromium-83-gcc-10.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589976001">- Update _constraints to avoid very slow builds seen on obs-arm-4
  (probably due to swap)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590148800">- Add patch to fix building with new re2:
  * chromium-81-re2-0.2020.05.01.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
</package>
<package pkgid="67bccfed8a4b53d0efaecadd5232b2d6b8d7cb65bd55314879c0ef4eb1ab866e" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="83.0.4103.116" rel="lp151.2.106.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590148800">- Add patch to fix building with new re2:
  * chromium-81-re2-0.2020.05.01.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
</package>
<package pkgid="387ac007803b4d1743d52804bfaf39ce9c352c2f0b12fddb8f9c6945b2a9ee09" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="83.0.4103.97" rel="lp151.2.96.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586865600">- Try to use system version of xdg-utils</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587124800">- Update to 81.0.4044.113 bsc#1169729:
  * CVE-2020-6457: Use after free in speech recognizer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587470400">- Update to 81.0.4044.122 (boo#1170107 bsc#1171975):
  * CVE-2020-6459: Use after free in payments
  * CVE-2020-6460: Insufficient data validation in URL formatting
  * CVE-2020-6458: Out of bounds read and write in PDFium
  * CVE-2020-6463: Use after free in ANGLE</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1588075200">- Add chromium-80.0.3987.87-missing-cstdint-header.patch,
  chromium-80.0.3987.87-missing-string-header.patch and
  chromium-80.0.3987.106-missing-cstddef-header.patch
  in order to fix build with GCC 10.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588161600">- update to 81.0.4044.129 (boo#1170707):
  * CVE-2020-0561: Use after free in storage
  * CVE-2020-6462: Use after free in task scheduling</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1588680000">- Add icu-v67.patch from upstream to fix build with icu v67</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1588766400">- update to 81.0.4044.138 bsc#1171247:
  * CVE-2020-6831: Stack buffer overflow in SCTP
  * CVE-2020-6464: Type Confusion in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589976000">- Update to 83.0.4103.61 bsc#1171910:
  * CVE-2020-6465: Use after free in reader mode. Reported by Woojin Oh(@pwn_expoit) of STEALIEN on 2020-04-21
  * CVE-2020-6466: Use after free in media. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-04-26
  * CVE-2020-6467: Use after free in WebRTC. Reported by ZhanJia Song on 2020-04-06
  * CVE-2020-6468: Type Confusion in V8. Reported by Chris Salls and Jake Corina of Seaside Security, Chani Jindal of Shellphish on 2020-04-30
  * CVE-2020-6469: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-04-02
  * CVE-2020-6470: Insufficient validation of untrusted input in clipboard. Reported by Micha? Bentkowski of Securitum on 2020-03-30
  * CVE-2020-6471: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-08
  * CVE-2020-6472: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-25
  * CVE-2020-6473: Insufficient policy enforcement in Blink. Reported by Soroush Karami and Panagiotis Ilia on 2020-02-06
  * CVE-2020-6474: Use after free in Blink. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-03-07
  * CVE-2020-6475: Incorrect security UI in full screen. Reported by Khalil Zhani on 2019-10-31
  * CVE-2020-6476: Insufficient policy enforcement in tab strip. Reported by Alexandre Le Borgne on 2019-12-18
  * CVE-2020-6477: Inappropriate implementation in installer. Reported by RACK911 Labs on 2019-03-26
  * CVE-2020-6478: Inappropriate implementation in full screen. Reported by Khalil Zhani on 2019-12-24
  * CVE-2020-6479: Inappropriate implementation in sharing. Reported by Zhong Zhaochen of andsecurity.cn on 2020-01-14
  * CVE-2020-6480: Insufficient policy enforcement in enterprise. Reported by Marvin Witt on 2020-02-21
  * CVE-2020-6481: Insufficient policy enforcement in URL formatting. Reported by Rayyan Bijoora on 2020-04-07
  * CVE-2020-6482: Insufficient policy enforcement in developer tools. Reported by Abdulrahman Alqabandi (@qab) on 2017-12-17
  * CVE-2020-6483: Insufficient policy enforcement in payments. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on 2019-05-23
  * CVE-2020-6484: Insufficient data validation in ChromeDriver. Reported by Artem Zinenko on 2020-01-26
  * CVE-2020-6485: Insufficient data validation in media router. Reported by Sergei Glazunov of Google Project Zero on 2020-01-30
  * CVE-2020-6486: Insufficient policy enforcement in navigations. Reported by David Erceg on 2020-02-24
  * CVE-2020-6487: Insufficient policy enforcement in downloads. Reported by Jun Kokatsu (@shhnjk) on 2015-10-06
  * CVE-2020-6488: Insufficient policy enforcement in downloads. Reported by David Erceg on 2020-01-21
  * CVE-2020-6489: Inappropriate implementation in developer tools. Reported by @lovasoa (Ophir LOJKINE) on 2020-02-10
  * CVE-2020-6490: Insufficient data validation in loader. Reported by Twitter on 2019-12-19
  * CVE-2020-6491: Incorrect security UI in site information. Reported by Sultan Haikal M.A on 2020-02-07
- Rebase patch:
  * chromium-vaapi.patch
- Remove merged patches:
  * icu-v67.patch
  * chromium-80-gcc-blink.patch
  * chromium-80.0.3987.106-missing-cstddef-header.patch
  * chromium-80.0.3987.87-missing-cstdint-header.patch
  * chromium-80.0.3987.87-missing-string-header.patch
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * chromium-old-glibc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Add new patches:
  * chromium-82-gcc-constexpr.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-82-gcc-template.patch
  * chromium-83-gcc-10.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589976001">- Update _constraints to avoid very slow builds seen on obs-arm-4
  (probably due to swap)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590148800">- Add patch to fix building with new re2:
  * chromium-81-re2-0.2020.05.01.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
</package>
<package pkgid="8e72be76c8dd46cf4ef8ef26779863764724b1e267c65832ea7d7a09bb558792" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="84.0.4147.105" rel="lp151.2.112.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
</package>
<package pkgid="5fc8e4f115af2aab887e55d584512ce6396491cfe45e1b1ef7f8c0ba26cf8810" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="84.0.4147.125" rel="lp151.2.115.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="ca972743da87b07e4a56104c4918f1ee07c52cd6cf7aec91af1c265e51777476" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="84.0.4147.135" rel="lp151.2.120.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597838400">- Use new _constraint memoryperjob.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
</package>
<package pkgid="a01d718c0332e82c24d07d9509e81cbd1a8b42e63bccf453f10b16fa0c715f88" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="84.0.4147.89" rel="lp151.2.109.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667200">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
</package>
<package pkgid="5cd87302abdb50622df67c006b972691bc426c5809fa71d6e8ae65b03bf2c30d" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="85.0.4183.102" rel="lp151.2.133.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
</package>
<package pkgid="e15ff9ce6c3e070b10960f4c0a6a60eb035014673c3fed37fdc9d815f8b9c106" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="85.0.4183.121" rel="lp151.2.136.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
</package>
<package pkgid="706a2ca36eef41563d3f2600937b57796a0670ca9d6b75c966f563151e3ac779" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="85.0.4183.69" rel="lp151.2.123.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
</package>
<package pkgid="8b8101f7ddccb8668b49959fba4ab59dad2a524f39013d2f084a10eb3a85179d" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="86.0.4240.111" rel="lp151.2.147.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060800">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
</package>
<package pkgid="b720d58680169dbf8ac6f5de345902b58cd69a6614bc59ad0b98275ade17a4a5" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="86.0.4240.183" rel="lp151.2.150.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
</package>
<package pkgid="34fcb1ec9f9e9af5a955408c6481341b2d529b00e96f317116b65f493b76dc59" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="86.0.4240.198" rel="lp151.2.153.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
</package>
<package pkgid="4dd7795391b8cff085905aba766e7dbfcf1261716eb1a9b254cf0161537f14a3" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="86.0.4240.75" rel="lp151.2.144.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
</package>
<package pkgid="a3c8ac43fe05a677084a92d52f0e28544226a638d165a54a3608cec79201f6c9" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="87.0.4280.66" rel="lp151.2.156.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
</package>
<package pkgid="38dc6f3c84a4441372aa8419a1409bac971e677fbff64d6066239b5c210dfa64" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="87.0.4280.66" rel="lp151.2.159.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
</package>
<package pkgid="9ceb6bdaef38b57b300a0569a1c77c4013c693d3fdde73f05e661197037db80f" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="87.0.4280.88" rel="lp151.2.162.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
</package>
<package pkgid="b9691c9621d6a535594aa4897ad04fc10cd88f7550cbe8bb6cb68e15773917ef" name="chromium" arch="src">
  <version epoch="0" ver="74.0.3729.157" rel="lp151.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
</package>
<package pkgid="3706fe8ecaf00895627d33acdeede6c9bedf4c2118d6341491e0ecdcd9bd293a" name="chromium" arch="x86_64">
  <version epoch="0" ver="74.0.3729.157" rel="lp151.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
</package>
<package pkgid="6122844f17ba0ec7f1d4cfd4344da361ae0f7aed5775ec64dc3ed4f857332df7" name="chromium" arch="src">
  <version epoch="0" ver="75.0.3770.142" rel="lp151.2.12.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
</package>
<package pkgid="f3815db0ae78582e14a6452239f3efdc7d1d32c1b51221641e6372b8f2c68329" name="chromium" arch="x86_64">
  <version epoch="0" ver="75.0.3770.142" rel="lp151.2.12.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
</package>
<package pkgid="611b90d8304dd0d37cc17fa5c449b3c9eaceb8d7c8234d8ae4ff1e15dfd7802f" name="chromium" arch="src">
  <version epoch="0" ver="75.0.3770.80" rel="lp151.2.6.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
</package>
<package pkgid="a464cd9e9a0e9e49bd65fb4fb37143c8eb4af677d532815addd35917eb5d80b2" name="chromium" arch="x86_64">
  <version epoch="0" ver="75.0.3770.80" rel="lp151.2.6.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
</package>
<package pkgid="5c5354f61539aea37e5ba9e479d49428c8cb7ac5314b96e45bab9d99785c39a5" name="chromium" arch="src">
  <version epoch="0" ver="75.0.3770.90" rel="lp151.2.9.3"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
</package>
<package pkgid="44bd9470ba236106432b54f6467ef5fb0250c880f905407369b3fbc709c9a06d" name="chromium" arch="x86_64">
  <version epoch="0" ver="75.0.3770.90" rel="lp151.2.9.3"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
</package>
<package pkgid="aa06bffbd53c30b39a4f4be9d66083308bb1e1181bdd1c4f5e43f3beababfa61" name="chromium" arch="src">
  <version epoch="0" ver="76.0.3809.100" rel="lp151.2.20.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
</package>
<package pkgid="8b740065319208d32bfeeaa3102c839afbc876a88a8dd27b215c8f416505287e" name="chromium" arch="x86_64">
  <version epoch="0" ver="76.0.3809.100" rel="lp151.2.20.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
</package>
<package pkgid="b4333a324a81700c82d2f208e33637f65c432ad744aadcb5e6a278e25ec8175b" name="chromium" arch="src">
  <version epoch="0" ver="76.0.3809.132" rel="lp151.2.25.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
</package>
<package pkgid="80c398e44d9cbdc2103bc5da4cc31198287cc237cce52f7ed2b230c54860e352" name="chromium" arch="x86_64">
  <version epoch="0" ver="76.0.3809.132" rel="lp151.2.25.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
</package>
<package pkgid="fc74299c765590030dfbcc100a95b55d16f2e2d3a9c491132ba4ef98946ffbae" name="chromium" arch="src">
  <version epoch="0" ver="76.0.3809.87" rel="lp151.2.15.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
</package>
<package pkgid="d6a709aed96a3d49c6a1a9983c04d4ae6dbbe959bd8c9168e9fd059807578766" name="chromium" arch="x86_64">
  <version epoch="0" ver="76.0.3809.87" rel="lp151.2.15.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
</package>
<package pkgid="24f49706d871efd52302cba4738dcdfa42e2f06b06f6022bb2388ff2c940baf4" name="chromium" arch="src">
  <version epoch="0" ver="77.0.3865.120" rel="lp151.2.36.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="23991c9f3b9e5a6c7b26d5f62441e8262007eb4fd63d537d2bf1938f9a58c3ee" name="chromium" arch="x86_64">
  <version epoch="0" ver="77.0.3865.120" rel="lp151.2.36.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="5947b29677e529ae4ec2fe8eec3eb3c3c5e3471e4c711ff9f4fca933758fea7f" name="chromium" arch="src">
  <version epoch="0" ver="77.0.3865.75" rel="lp151.2.30.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
</package>
<package pkgid="9d79c49120065959b4a221ee437bbb8d67b4390306f7947b5ffe7f9708db1740" name="chromium" arch="x86_64">
  <version epoch="0" ver="77.0.3865.75" rel="lp151.2.30.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
</package>
<package pkgid="3d69221c13dce7260233cae88be16809a0e21062077fc07f829abfa4f5c910e3" name="chromium" arch="src">
  <version epoch="0" ver="77.0.3865.90" rel="lp151.2.33.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
</package>
<package pkgid="cee487bc1bd47429b225ee6e3958983dd188b57253e1a6ef53651cd79c5f42b7" name="chromium" arch="x86_64">
  <version epoch="0" ver="77.0.3865.90" rel="lp151.2.33.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
</package>
<package pkgid="544719b57b1a56d09049c09681948a0ac6b022f6d7593163a2f39b9773392a73" name="chromium" arch="src">
  <version epoch="0" ver="78.0.3904.108" rel="lp151.2.48.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="a3ace072c73a9647a4a2eb6d7333c29f9fbdd922c65cc6d7275e6efcfd59de79" name="chromium" arch="x86_64">
  <version epoch="0" ver="78.0.3904.108" rel="lp151.2.48.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="ca6d35bb0439e7bed529529476bfdfffdbe0ebf1ebe78ee8ea4ef2c8fa5fa540" name="chromium" arch="src">
  <version epoch="0" ver="78.0.3904.70" rel="lp151.2.39.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
</package>
<package pkgid="3711412e26a21ccfadc5e6c7e59f869e2c8ee0cb289a2bff33ee581dfe13f744" name="chromium" arch="x86_64">
  <version epoch="0" ver="78.0.3904.70" rel="lp151.2.39.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
</package>
<package pkgid="975064018b316826448a13f02d9b9cbdca55b25f69c42b380d644eeaa25f75ca" name="chromium" arch="src">
  <version epoch="0" ver="78.0.3904.87" rel="lp151.2.42.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
</package>
<package pkgid="d0087293aa42832e3528e0ed57bba120c5a779d1207f41b7339bc44969154baf" name="chromium" arch="x86_64">
  <version epoch="0" ver="78.0.3904.87" rel="lp151.2.42.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
</package>
<package pkgid="da90160c17dc49597873561aa88a9a0ba517762fba17313a3e0a9cb1daa160d8" name="chromium" arch="src">
  <version epoch="0" ver="78.0.3904.97" rel="lp151.2.45.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="fdcccd7c9de87e1e0fe7dbf9fcd0a1205bbec117a6cec9a8c85e766757d92f12" name="chromium" arch="x86_64">
  <version epoch="0" ver="78.0.3904.97" rel="lp151.2.45.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="a156174bbf11beb775b303aacd4d239e47246babd5a501a34c121711c46a2d64" name="chromium" arch="src">
  <version epoch="0" ver="79.0.3945.117" rel="lp151.2.57.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-TBD: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="074ecd861a80f4a337e848f290f16b355d70783a3f116b2a0183d30772767139" name="chromium" arch="x86_64">
  <version epoch="0" ver="79.0.3945.117" rel="lp151.2.57.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-TBD: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="42cbdc5cf26ca6d4309c0412532fc0f1de59c1d265cc29f12a9aba9119e40a72" name="chromium" arch="src">
  <version epoch="0" ver="79.0.3945.130" rel="lp151.2.60.4"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="39f1f17df0be8adac1de81c358bdc1c92005f01d2687a7b6bf9ee954fc2835be" name="chromium" arch="x86_64">
  <version epoch="0" ver="79.0.3945.130" rel="lp151.2.60.4"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="e25b7a732a73bc1a708c1d93b8a1623e8a7b9e39180092f07d43d5f9582aee25" name="chromium" arch="src">
  <version epoch="0" ver="79.0.3945.79" rel="lp151.2.51.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
</package>
<package pkgid="e8867c8b54c56f365cffef4e82816bf35cdddaad7df33eef50878cb85397554c" name="chromium" arch="x86_64">
  <version epoch="0" ver="79.0.3945.79" rel="lp151.2.51.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
</package>
<package pkgid="b4573d53fc81ca3ba6f9fd82018e279c5c0ca72f2a1e75c1ed003d124ab9d7c7" name="chromium" arch="src">
  <version epoch="0" ver="79.0.3945.88" rel="lp151.2.54.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
</package>
<package pkgid="e435d0b246711b05394248c2f1f9c610221f63af8ba29b02246bc6a1c5a1f380" name="chromium" arch="x86_64">
  <version epoch="0" ver="79.0.3945.88" rel="lp151.2.54.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
</package>
<package pkgid="726a373870ff9f267ffac839f0d6a541765e087eb2e18f701e5decc2772bf314" name="chromium" arch="src">
  <version epoch="0" ver="80.0.3987.122" rel="lp151.2.66.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
</package>
<package pkgid="41c777d637b87e8073aa6fb9bad8d8a1b33465d4c3d5cac9f1651e79171fc111" name="chromium" arch="x86_64">
  <version epoch="0" ver="80.0.3987.122" rel="lp151.2.66.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
</package>
<package pkgid="3f100242e5e042f998f6237b96f4a2b2a0dc26693a5583498a2878abafb02576" name="chromium" arch="src">
  <version epoch="0" ver="80.0.3987.132" rel="lp151.2.69.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
</package>
<package pkgid="921b988a0c318fac3987c655ddfa6909a35bb69db682e2a0bbde5c0b1ba3385a" name="chromium" arch="x86_64">
  <version epoch="0" ver="80.0.3987.132" rel="lp151.2.69.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
</package>
<package pkgid="1a84b946ef5643b15fa2f8a912901782aa66a5214002169747289fb7dc901360" name="chromium" arch="src">
  <version epoch="0" ver="80.0.3987.149" rel="lp151.2.73.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149 (bsc#1167090):
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="2a8e0f73c6b458944a08f1fec10c9b8d42751f3122613079dbf0629042fa1a5e" name="chromium" arch="x86_64">
  <version epoch="0" ver="80.0.3987.149" rel="lp151.2.73.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149 (bsc#1167090):
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="f003e8b1a6e3cf10386baf2ab280cd0f5a3026dc1e8315f50c9dec4f2e17ec0d" name="chromium" arch="src">
  <version epoch="0" ver="80.0.3987.87" rel="lp151.2.63.1"/>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
</package>
<package pkgid="598956582e3c6452505242ab270321a6021244eb5933455468a6e84d7619e96a" name="chromium" arch="x86_64">
  <version epoch="0" ver="80.0.3987.87" rel="lp151.2.63.1"/>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
</package>
<package pkgid="9ef2f9937a04cdad51008b3dc8921262bb97b58559776355e0e20f3035b0f3e1" name="chromium" arch="src">
  <version epoch="0" ver="81.0.4044.113" rel="lp151.2.80.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149:
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584964800">- Add patch to allow building with pipewire 0.3:
  * build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585310400">- Use a symbolic icon for GNOME</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585396800">- Add chromium-missing-cstdint-header.patch,
  chromium-missing-cstring-header.patch,
  chromium-missing-cstring-header2.patch and
  chromium-missing-cstddef-header.patch in order to fix boo#1167465.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585483200">- Rebase build-with-pipewire-0.3.patch in order to fix
  patch collision.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 80.0.3987.162 bsc#1168421:
  * CVE-2020-6450: Use after free in WebAudio.
  * CVE-2020-6451: Use after free in WebAudio.
  * CVE-2020-6452: Heap buffer overflow in media.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586347200">- Update to 81.0.4044.92 bsc#1168911:
  * CVE-2020-6454: Use after free in extensions
  * CVE-2020-6423: Use after free in audio
  * CVE-2020-6455: Out of bounds read in WebSQL
  * CVE-2020-6430: Type Confusion in V8
  * CVE-2020-6456: Insufficient validation of untrusted input in clipboard
  * CVE-2020-6431: Insufficient policy enforcement in full screen
  * CVE-2020-6432: Insufficient policy enforcement in navigations
  * CVE-2020-6433: Insufficient policy enforcement in extensions
  * CVE-2020-6434: Use after free in devtools
  * CVE-2020-6435: Insufficient policy enforcement in extensions
  * CVE-2020-6436: Use after free in window management
  * CVE-2020-6437: Inappropriate implementation in WebView
  * CVE-2020-6438: Insufficient policy enforcement in extensions
  * CVE-2020-6439: Insufficient policy enforcement in navigations
  * CVE-2020-6440: Inappropriate implementation in extensions
  * CVE-2020-6441: Insufficient policy enforcement in omnibox
  * CVE-2020-6442: Inappropriate implementation in cache
  * CVE-2020-6443: Insufficient data validation in developer tools
  * CVE-2020-6444: Uninitialized Use in WebRTC
  * CVE-2020-6445: Insufficient policy enforcement in trusted types
  * CVE-2020-6446: Insufficient policy enforcement in trusted types
  * CVE-2020-6447: Inappropriate implementation in developer tools
  * CVE-2020-6448: Use after free in V8
- Add new patches:
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Remove no longer needed patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-missing-cstddef-header.patch
  * chromium-missing-cstdint-header.patch
  * chromium-missing-cstring-header.patch
  * chromium-missing-cstring-header2.patch
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * webrtc-pulse.patch
- Rebase patches:
  * build-with-pipewire-0.3.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * gpu-timeout.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586865600">- Try to use system version of xdg-utils</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587124800">- Update to 81.0.4044.113 bsc#1169729:
  * CVE-2020-6457: Use after free in speech recognizer</changelog>
</package>
<package pkgid="6e67110e25a15fa69acebf3df606591d136c8d5301ea59b263172bde1a9060e3" name="chromium" arch="x86_64">
  <version epoch="0" ver="81.0.4044.113" rel="lp151.2.80.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149:
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584964800">- Add patch to allow building with pipewire 0.3:
  * build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585310400">- Use a symbolic icon for GNOME</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585396800">- Add chromium-missing-cstdint-header.patch,
  chromium-missing-cstring-header.patch,
  chromium-missing-cstring-header2.patch and
  chromium-missing-cstddef-header.patch in order to fix boo#1167465.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585483200">- Rebase build-with-pipewire-0.3.patch in order to fix
  patch collision.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 80.0.3987.162 bsc#1168421:
  * CVE-2020-6450: Use after free in WebAudio.
  * CVE-2020-6451: Use after free in WebAudio.
  * CVE-2020-6452: Heap buffer overflow in media.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586347200">- Update to 81.0.4044.92 bsc#1168911:
  * CVE-2020-6454: Use after free in extensions
  * CVE-2020-6423: Use after free in audio
  * CVE-2020-6455: Out of bounds read in WebSQL
  * CVE-2020-6430: Type Confusion in V8
  * CVE-2020-6456: Insufficient validation of untrusted input in clipboard
  * CVE-2020-6431: Insufficient policy enforcement in full screen
  * CVE-2020-6432: Insufficient policy enforcement in navigations
  * CVE-2020-6433: Insufficient policy enforcement in extensions
  * CVE-2020-6434: Use after free in devtools
  * CVE-2020-6435: Insufficient policy enforcement in extensions
  * CVE-2020-6436: Use after free in window management
  * CVE-2020-6437: Inappropriate implementation in WebView
  * CVE-2020-6438: Insufficient policy enforcement in extensions
  * CVE-2020-6439: Insufficient policy enforcement in navigations
  * CVE-2020-6440: Inappropriate implementation in extensions
  * CVE-2020-6441: Insufficient policy enforcement in omnibox
  * CVE-2020-6442: Inappropriate implementation in cache
  * CVE-2020-6443: Insufficient data validation in developer tools
  * CVE-2020-6444: Uninitialized Use in WebRTC
  * CVE-2020-6445: Insufficient policy enforcement in trusted types
  * CVE-2020-6446: Insufficient policy enforcement in trusted types
  * CVE-2020-6447: Inappropriate implementation in developer tools
  * CVE-2020-6448: Use after free in V8
- Add new patches:
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Remove no longer needed patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-missing-cstddef-header.patch
  * chromium-missing-cstdint-header.patch
  * chromium-missing-cstring-header.patch
  * chromium-missing-cstring-header2.patch
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * webrtc-pulse.patch
- Rebase patches:
  * build-with-pipewire-0.3.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * gpu-timeout.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586865600">- Try to use system version of xdg-utils</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587124800">- Update to 81.0.4044.113 bsc#1169729:
  * CVE-2020-6457: Use after free in speech recognizer</changelog>
</package>
<package pkgid="7da0230209579603cfd88359598d54280be185b85952b7f8d0c8ddb3849d00b9" name="chromium" arch="src">
  <version epoch="0" ver="81.0.4044.129" rel="lp151.2.85.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149:
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584964800">- Add patch to allow building with pipewire 0.3:
  * build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585310400">- Use a symbolic icon for GNOME</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585396800">- Add chromium-missing-cstdint-header.patch,
  chromium-missing-cstring-header.patch,
  chromium-missing-cstring-header2.patch and
  chromium-missing-cstddef-header.patch in order to fix boo#1167465.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585483200">- Rebase build-with-pipewire-0.3.patch in order to fix
  patch collision.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 80.0.3987.162 bsc#1168421:
  * CVE-2020-6450: Use after free in WebAudio.
  * CVE-2020-6451: Use after free in WebAudio.
  * CVE-2020-6452: Heap buffer overflow in media.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586347200">- Update to 81.0.4044.92 bsc#1168911:
  * CVE-2020-6454: Use after free in extensions
  * CVE-2020-6423: Use after free in audio
  * CVE-2020-6455: Out of bounds read in WebSQL
  * CVE-2020-6430: Type Confusion in V8
  * CVE-2020-6456: Insufficient validation of untrusted input in clipboard
  * CVE-2020-6431: Insufficient policy enforcement in full screen
  * CVE-2020-6432: Insufficient policy enforcement in navigations
  * CVE-2020-6433: Insufficient policy enforcement in extensions
  * CVE-2020-6434: Use after free in devtools
  * CVE-2020-6435: Insufficient policy enforcement in extensions
  * CVE-2020-6436: Use after free in window management
  * CVE-2020-6437: Inappropriate implementation in WebView
  * CVE-2020-6438: Insufficient policy enforcement in extensions
  * CVE-2020-6439: Insufficient policy enforcement in navigations
  * CVE-2020-6440: Inappropriate implementation in extensions
  * CVE-2020-6441: Insufficient policy enforcement in omnibox
  * CVE-2020-6442: Inappropriate implementation in cache
  * CVE-2020-6443: Insufficient data validation in developer tools
  * CVE-2020-6444: Uninitialized Use in WebRTC
  * CVE-2020-6445: Insufficient policy enforcement in trusted types
  * CVE-2020-6446: Insufficient policy enforcement in trusted types
  * CVE-2020-6447: Inappropriate implementation in developer tools
  * CVE-2020-6448: Use after free in V8
- Add new patches:
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Remove no longer needed patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-missing-cstddef-header.patch
  * chromium-missing-cstdint-header.patch
  * chromium-missing-cstring-header.patch
  * chromium-missing-cstring-header2.patch
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * webrtc-pulse.patch
- Rebase patches:
  * build-with-pipewire-0.3.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * gpu-timeout.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586865600">- Try to use system version of xdg-utils</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587124800">- Update to 81.0.4044.113 bsc#1169729:
  * CVE-2020-6457: Use after free in speech recognizer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587470400">- Update to 81.0.4044.122 (boo#1170107):
  * CVE-2020-6459: Use after free in payments
  * CVE-2020-6460: Insufficient data validation in URL formatting
  * CVE-2020-6458: Out of bounds read and write in PDFium</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1588075200">- Add chromium-80.0.3987.87-missing-cstdint-header.patch,
  chromium-80.0.3987.87-missing-string-header.patch and
  chromium-80.0.3987.106-missing-cstddef-header.patch
  in order to fix build with GCC 10.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588161600">- update to 81.0.4044.129 (boo#1170707):
  * CVE-2020-0561: Use after free in storage
  * CVE-2020-6462: Use after free in task scheduling</changelog>
</package>
<package pkgid="f9e63208887ea0c8d4db2a8a31ee92d97feff776b05fb2e017f735af7c3967ed" name="chromium" arch="x86_64">
  <version epoch="0" ver="81.0.4044.129" rel="lp151.2.85.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149:
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584964800">- Add patch to allow building with pipewire 0.3:
  * build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585310400">- Use a symbolic icon for GNOME</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585396800">- Add chromium-missing-cstdint-header.patch,
  chromium-missing-cstring-header.patch,
  chromium-missing-cstring-header2.patch and
  chromium-missing-cstddef-header.patch in order to fix boo#1167465.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585483200">- Rebase build-with-pipewire-0.3.patch in order to fix
  patch collision.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 80.0.3987.162 bsc#1168421:
  * CVE-2020-6450: Use after free in WebAudio.
  * CVE-2020-6451: Use after free in WebAudio.
  * CVE-2020-6452: Heap buffer overflow in media.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586347200">- Update to 81.0.4044.92 bsc#1168911:
  * CVE-2020-6454: Use after free in extensions
  * CVE-2020-6423: Use after free in audio
  * CVE-2020-6455: Out of bounds read in WebSQL
  * CVE-2020-6430: Type Confusion in V8
  * CVE-2020-6456: Insufficient validation of untrusted input in clipboard
  * CVE-2020-6431: Insufficient policy enforcement in full screen
  * CVE-2020-6432: Insufficient policy enforcement in navigations
  * CVE-2020-6433: Insufficient policy enforcement in extensions
  * CVE-2020-6434: Use after free in devtools
  * CVE-2020-6435: Insufficient policy enforcement in extensions
  * CVE-2020-6436: Use after free in window management
  * CVE-2020-6437: Inappropriate implementation in WebView
  * CVE-2020-6438: Insufficient policy enforcement in extensions
  * CVE-2020-6439: Insufficient policy enforcement in navigations
  * CVE-2020-6440: Inappropriate implementation in extensions
  * CVE-2020-6441: Insufficient policy enforcement in omnibox
  * CVE-2020-6442: Inappropriate implementation in cache
  * CVE-2020-6443: Insufficient data validation in developer tools
  * CVE-2020-6444: Uninitialized Use in WebRTC
  * CVE-2020-6445: Insufficient policy enforcement in trusted types
  * CVE-2020-6446: Insufficient policy enforcement in trusted types
  * CVE-2020-6447: Inappropriate implementation in developer tools
  * CVE-2020-6448: Use after free in V8
- Add new patches:
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Remove no longer needed patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-missing-cstddef-header.patch
  * chromium-missing-cstdint-header.patch
  * chromium-missing-cstring-header.patch
  * chromium-missing-cstring-header2.patch
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * webrtc-pulse.patch
- Rebase patches:
  * build-with-pipewire-0.3.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * gpu-timeout.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586865600">- Try to use system version of xdg-utils</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587124800">- Update to 81.0.4044.113 bsc#1169729:
  * CVE-2020-6457: Use after free in speech recognizer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587470400">- Update to 81.0.4044.122 (boo#1170107):
  * CVE-2020-6459: Use after free in payments
  * CVE-2020-6460: Insufficient data validation in URL formatting
  * CVE-2020-6458: Out of bounds read and write in PDFium</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1588075200">- Add chromium-80.0.3987.87-missing-cstdint-header.patch,
  chromium-80.0.3987.87-missing-string-header.patch and
  chromium-80.0.3987.106-missing-cstddef-header.patch
  in order to fix build with GCC 10.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588161600">- update to 81.0.4044.129 (boo#1170707):
  * CVE-2020-0561: Use after free in storage
  * CVE-2020-6462: Use after free in task scheduling</changelog>
</package>
<package pkgid="c7986c8a3ec2e6cf62867b4952b8d3c32590dd74deaa2715351009e3533255dc" name="chromium" arch="src">
  <version epoch="0" ver="81.0.4044.138" rel="lp151.2.88.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149:
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584964800">- Add patch to allow building with pipewire 0.3:
  * build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585310400">- Use a symbolic icon for GNOME</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585396800">- Add chromium-missing-cstdint-header.patch,
  chromium-missing-cstring-header.patch,
  chromium-missing-cstring-header2.patch and
  chromium-missing-cstddef-header.patch in order to fix boo#1167465.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585483200">- Rebase build-with-pipewire-0.3.patch in order to fix
  patch collision.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 80.0.3987.162 bsc#1168421:
  * CVE-2020-6450: Use after free in WebAudio.
  * CVE-2020-6451: Use after free in WebAudio.
  * CVE-2020-6452: Heap buffer overflow in media.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586347200">- Update to 81.0.4044.92 bsc#1168911:
  * CVE-2020-6454: Use after free in extensions
  * CVE-2020-6423: Use after free in audio
  * CVE-2020-6455: Out of bounds read in WebSQL
  * CVE-2020-6430: Type Confusion in V8
  * CVE-2020-6456: Insufficient validation of untrusted input in clipboard
  * CVE-2020-6431: Insufficient policy enforcement in full screen
  * CVE-2020-6432: Insufficient policy enforcement in navigations
  * CVE-2020-6433: Insufficient policy enforcement in extensions
  * CVE-2020-6434: Use after free in devtools
  * CVE-2020-6435: Insufficient policy enforcement in extensions
  * CVE-2020-6436: Use after free in window management
  * CVE-2020-6437: Inappropriate implementation in WebView
  * CVE-2020-6438: Insufficient policy enforcement in extensions
  * CVE-2020-6439: Insufficient policy enforcement in navigations
  * CVE-2020-6440: Inappropriate implementation in extensions
  * CVE-2020-6441: Insufficient policy enforcement in omnibox
  * CVE-2020-6442: Inappropriate implementation in cache
  * CVE-2020-6443: Insufficient data validation in developer tools
  * CVE-2020-6444: Uninitialized Use in WebRTC
  * CVE-2020-6445: Insufficient policy enforcement in trusted types
  * CVE-2020-6446: Insufficient policy enforcement in trusted types
  * CVE-2020-6447: Inappropriate implementation in developer tools
  * CVE-2020-6448: Use after free in V8
- Add new patches:
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Remove no longer needed patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-missing-cstddef-header.patch
  * chromium-missing-cstdint-header.patch
  * chromium-missing-cstring-header.patch
  * chromium-missing-cstring-header2.patch
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * webrtc-pulse.patch
- Rebase patches:
  * build-with-pipewire-0.3.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * gpu-timeout.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586865600">- Try to use system version of xdg-utils</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587124800">- Update to 81.0.4044.113 bsc#1169729:
  * CVE-2020-6457: Use after free in speech recognizer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587470400">- Update to 81.0.4044.122 (boo#1170107):
  * CVE-2020-6459: Use after free in payments
  * CVE-2020-6460: Insufficient data validation in URL formatting
  * CVE-2020-6458: Out of bounds read and write in PDFium</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1588075200">- Add chromium-80.0.3987.87-missing-cstdint-header.patch,
  chromium-80.0.3987.87-missing-string-header.patch and
  chromium-80.0.3987.106-missing-cstddef-header.patch
  in order to fix build with GCC 10.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588161600">- update to 81.0.4044.129 (boo#1170707):
  * CVE-2020-0561: Use after free in storage
  * CVE-2020-6462: Use after free in task scheduling</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1588680000">- Add icu-v67.patch from upstream to fix build with icu v67</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1588766400">- update to 81.0.4044.138 bsc#1171247:
  * CVE-2020-6831: Stack buffer overflow in SCTP
  * CVE-2020-6464: Type Confusion in Blink.</changelog>
</package>
<package pkgid="ff737cb3ddfec704a9e10a13408705809ead05158b72bf8c05bb9bfb8bc85e2c" name="chromium" arch="x86_64">
  <version epoch="0" ver="81.0.4044.138" rel="lp151.2.88.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149:
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584964800">- Add patch to allow building with pipewire 0.3:
  * build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585310400">- Use a symbolic icon for GNOME</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585396800">- Add chromium-missing-cstdint-header.patch,
  chromium-missing-cstring-header.patch,
  chromium-missing-cstring-header2.patch and
  chromium-missing-cstddef-header.patch in order to fix boo#1167465.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585483200">- Rebase build-with-pipewire-0.3.patch in order to fix
  patch collision.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 80.0.3987.162 bsc#1168421:
  * CVE-2020-6450: Use after free in WebAudio.
  * CVE-2020-6451: Use after free in WebAudio.
  * CVE-2020-6452: Heap buffer overflow in media.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586347200">- Update to 81.0.4044.92 bsc#1168911:
  * CVE-2020-6454: Use after free in extensions
  * CVE-2020-6423: Use after free in audio
  * CVE-2020-6455: Out of bounds read in WebSQL
  * CVE-2020-6430: Type Confusion in V8
  * CVE-2020-6456: Insufficient validation of untrusted input in clipboard
  * CVE-2020-6431: Insufficient policy enforcement in full screen
  * CVE-2020-6432: Insufficient policy enforcement in navigations
  * CVE-2020-6433: Insufficient policy enforcement in extensions
  * CVE-2020-6434: Use after free in devtools
  * CVE-2020-6435: Insufficient policy enforcement in extensions
  * CVE-2020-6436: Use after free in window management
  * CVE-2020-6437: Inappropriate implementation in WebView
  * CVE-2020-6438: Insufficient policy enforcement in extensions
  * CVE-2020-6439: Insufficient policy enforcement in navigations
  * CVE-2020-6440: Inappropriate implementation in extensions
  * CVE-2020-6441: Insufficient policy enforcement in omnibox
  * CVE-2020-6442: Inappropriate implementation in cache
  * CVE-2020-6443: Insufficient data validation in developer tools
  * CVE-2020-6444: Uninitialized Use in WebRTC
  * CVE-2020-6445: Insufficient policy enforcement in trusted types
  * CVE-2020-6446: Insufficient policy enforcement in trusted types
  * CVE-2020-6447: Inappropriate implementation in developer tools
  * CVE-2020-6448: Use after free in V8
- Add new patches:
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Remove no longer needed patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-missing-cstddef-header.patch
  * chromium-missing-cstdint-header.patch
  * chromium-missing-cstring-header.patch
  * chromium-missing-cstring-header2.patch
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * webrtc-pulse.patch
- Rebase patches:
  * build-with-pipewire-0.3.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * gpu-timeout.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586865600">- Try to use system version of xdg-utils</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587124800">- Update to 81.0.4044.113 bsc#1169729:
  * CVE-2020-6457: Use after free in speech recognizer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587470400">- Update to 81.0.4044.122 (boo#1170107):
  * CVE-2020-6459: Use after free in payments
  * CVE-2020-6460: Insufficient data validation in URL formatting
  * CVE-2020-6458: Out of bounds read and write in PDFium</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1588075200">- Add chromium-80.0.3987.87-missing-cstdint-header.patch,
  chromium-80.0.3987.87-missing-string-header.patch and
  chromium-80.0.3987.106-missing-cstddef-header.patch
  in order to fix build with GCC 10.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588161600">- update to 81.0.4044.129 (boo#1170707):
  * CVE-2020-0561: Use after free in storage
  * CVE-2020-6462: Use after free in task scheduling</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1588680000">- Add icu-v67.patch from upstream to fix build with icu v67</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1588766400">- update to 81.0.4044.138 bsc#1171247:
  * CVE-2020-6831: Stack buffer overflow in SCTP
  * CVE-2020-6464: Type Confusion in Blink.</changelog>
</package>
<package pkgid="043697ae1ac958ee2d0a6dadcd936e72b8ba35580baa3358b672ebac421a4c5c" name="chromium" arch="src">
  <version epoch="0" ver="81.0.4044.92" rel="lp151.2.77.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149:
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584964800">- Add patch to allow building with pipewire 0.3:
  * build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585310400">- Use a symbolic icon for GNOME</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585396800">- Add chromium-missing-cstdint-header.patch,
  chromium-missing-cstring-header.patch,
  chromium-missing-cstring-header2.patch and
  chromium-missing-cstddef-header.patch in order to fix boo#1167465.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585483200">- Rebase build-with-pipewire-0.3.patch in order to fix
  patch collision.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 80.0.3987.162 bsc#1168421:
  * CVE-2020-6450: Use after free in WebAudio.
  * CVE-2020-6451: Use after free in WebAudio.
  * CVE-2020-6452: Heap buffer overflow in media.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586347200">- Update to 81.0.4044.92 bsc#1168911:
  * CVE-2020-6454: Use after free in extensions
  * CVE-2020-6423: Use after free in audio
  * CVE-2020-6455: Out of bounds read in WebSQL
  * CVE-2020-6430: Type Confusion in V8
  * CVE-2020-6456: Insufficient validation of untrusted input in clipboard
  * CVE-2020-6431: Insufficient policy enforcement in full screen
  * CVE-2020-6432: Insufficient policy enforcement in navigations
  * CVE-2020-6433: Insufficient policy enforcement in extensions
  * CVE-2020-6434: Use after free in devtools
  * CVE-2020-6435: Insufficient policy enforcement in extensions
  * CVE-2020-6436: Use after free in window management
  * CVE-2020-6437: Inappropriate implementation in WebView
  * CVE-2020-6438: Insufficient policy enforcement in extensions
  * CVE-2020-6439: Insufficient policy enforcement in navigations
  * CVE-2020-6440: Inappropriate implementation in extensions
  * CVE-2020-6441: Insufficient policy enforcement in omnibox
  * CVE-2020-6442: Inappropriate implementation in cache
  * CVE-2020-6443: Insufficient data validation in developer tools
  * CVE-2020-6444: Uninitialized Use in WebRTC
  * CVE-2020-6445: Insufficient policy enforcement in trusted types
  * CVE-2020-6446: Insufficient policy enforcement in trusted types
  * CVE-2020-6447: Inappropriate implementation in developer tools
  * CVE-2020-6448: Use after free in V8
- Add new patches:
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Remove no longer needed patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-missing-cstddef-header.patch
  * chromium-missing-cstdint-header.patch
  * chromium-missing-cstring-header.patch
  * chromium-missing-cstring-header2.patch
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * webrtc-pulse.patch
- Rebase patches:
  * build-with-pipewire-0.3.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * gpu-timeout.patch
  * old-libva.patch</changelog>
</package>
<package pkgid="9b353b7202e851fbc6cb9d9f78a3cbf060adc8d3424fa35dccae41a87b6a3b9e" name="chromium" arch="x86_64">
  <version epoch="0" ver="81.0.4044.92" rel="lp151.2.77.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1576065600">- Update to 79.0.3945.79:
  * CVE-2019-13725: Use after free in Bluetooth
  * CVE-2019-13726: Heap buffer overflow in password manager
  * CVE-2019-13727: Insufficient policy enforcement in WebSockets
  * CVE-2019-13728: Out of bounds write in V8
  * CVE-2019-13729: Use after free in WebSockets
  * CVE-2019-13730: Type Confusion in V8
  * CVE-2019-13732: Use after free in WebAudio
  * CVE-2019-13734: Out of bounds write in SQLite
  * CVE-2019-13735: Out of bounds write in V8
  * CVE-2019-13764: Type Confusion in V8
  * CVE-2019-13736: Integer overflow in PDFium
  * CVE-2019-13737: Insufficient policy enforcement in autocomplete
  * CVE-2019-13738: Insufficient policy enforcement in navigation
  * CVE-2019-13739: Incorrect security UI in Omnibox
  * CVE-2019-13740: Incorrect security UI in sharing
  * CVE-2019-13741: Insufficient validation of untrusted input in Blink
  * CVE-2019-13742: Incorrect security UI in Omnibox
  * CVE-2019-13743: Incorrect security UI in external protocol handling
  * CVE-2019-13744: Insufficient policy enforcement in cookies
  * CVE-2019-13745: Insufficient policy enforcement in audio
  * CVE-2019-13746: Insufficient policy enforcement in Omnibox
  * CVE-2019-13747: Uninitialized Use in rendering
  * CVE-2019-13748: Insufficient policy enforcement in developer tools
  * CVE-2019-13749: Incorrect security UI in Omnibox
  * CVE-2019-13750: Insufficient data validation in SQLite
  * CVE-2019-13751: Uninitialized Use in SQLite
  * CVE-2019-13752: Out of bounds read in SQLite
  * CVE-2019-13753: Out of bounds read in SQLite
  * CVE-2019-13754: Insufficient policy enforcement in extensions
  * CVE-2019-13755: Insufficient policy enforcement in extensions
  * CVE-2019-13756: Incorrect security UI in printing
  * CVE-2019-13757: Incorrect security UI in Omnibox
  * CVE-2019-13758: Insufficient policy enforcement in navigation
  * CVE-2019-13759: Incorrect security UI in interstitials
  * CVE-2019-13761: Incorrect security UI in Omnibox
  * CVE-2019-13762: Insufficient policy enforcement in downloads
  * CVE-2019-13763: Insufficient policy enforcement in payments
- Remove merged patches:
  * chromium-77-clang.patch
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Add new patches:
  * chromium-79-gcc-alignas.patch
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * fix_building_widevinecdm_with_chromium.patch
  * old-libva.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576756800">- update to 79.0.3945.88:
  * CVE-2019-13767: Use after free in media picker (boo#1159498)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1577707200">- Drop obsolete liboil BuildRequires.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Update to 79.0.3945.117 bsc#1160337:
  * CVE-2020-6377: Use after free in audio
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1579348800">- Update to 79.0.3945.130 boo#1161252:
  * CVE-2020-6378: Use-after-free in speech recognizer
  * CVE-2020-6379: Use-after-free in speech recognizer
  * CVE-2020-6380: Extension message verification error
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Update to 80.0.3987.87 bsc#1162833:
  * CVE-2020-6381: Integer overflow in JavaScript
  * CVE-2020-6382: Type Confusion in JavaScript
  * CVE-2019-18197: Multiple vulnerabilities in XML
  * CVE-2019-19926: Inappropriate implementation in SQLite
  * CVE-2020-6385: Insufficient policy enforcement in storage
  * CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite
  * CVE-2020-6387: Out of bounds write in WebRTC
  * CVE-2020-6388: Out of bounds memory access in WebAudio
  * CVE-2020-6389: Out of bounds write in WebRTC
  * CVE-2020-6390: Out of bounds memory access in streams
  * CVE-2020-6391: Insufficient validation of untrusted input in Blink
  * CVE-2020-6392: Insufficient policy enforcement in extensions
  * CVE-2020-6393: Insufficient policy enforcement in Blink
  * CVE-2020-6394: Insufficient policy enforcement in Blink
  * CVE-2020-6395: Out of bounds read in JavaScript
  * CVE-2020-6396: Inappropriate implementation in Skia
  * CVE-2020-6397: Incorrect security UI in sharing
  * CVE-2020-6398: Uninitialized use in PDFium
  * CVE-2020-6399: Insufficient policy enforcement in AppCache
  * CVE-2020-6400: Inappropriate implementation in CORS
  * CVE-2020-6401: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6402: Insufficient policy enforcement in downloads
  * CVE-2020-6403: Incorrect security UI in Omnibox
  * CVE-2020-6404: Inappropriate implementation in Blink
  * CVE-2020-6405: Out of bounds read in SQLite
  * CVE-2020-6406: Use after free in audio
  * CVE-2019-19923: Out of bounds memory access in SQLite
  * CVE-2020-6408: Insufficient policy enforcement in CORS
  * CVE-2020-6409: Inappropriate implementation in Omnibox
  * CVE-2020-6410: Insufficient policy enforcement in navigation
  * CVE-2020-6411: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6412: Insufficient validation of untrusted input in Omnibox
  * CVE-2020-6413: Inappropriate implementation in Blink
  * CVE-2020-6414: Insufficient policy enforcement in Safe Browsing
  * CVE-2020-6415: Inappropriate implementation in JavaScript
  * CVE-2020-6416: Insufficient data validation in streams
  * CVE-2020-6417: Inappropriate implementation in installer
- Disable lto for now as it consumes &gt;16GB ram
- Added patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-blink.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-gcc-quiche.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-80.0.3987.87.tar.xz
  * chromium-fix-char_traits.patch
  * gpu-timeout.patch
- Removed patches:
  * chromium-79-gcc-ambiguous-nodestructor.patch
  * chromium-79-gcc-name-clash.patch
  * chromium-79-gcc-permissive.patch
  * chromium-79-icu-65.patch
  * chromium-79-include.patch
  * chromium-79-system-hb.patch
- Rebased patches:
  * chromium-old-glibc-noexcept.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581508800">- Update to 80.0.3987.100 bsc#1163484:
  * feature fixes only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581595200">- Drop sandbox binary as it should not be needed really bsc#1163588
- Remove unused patch:
  * chromium-sandbox-pie.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1581940800">- Add chromedriver binary to bindir</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582632000">- Update to 80.0.3987.122 bsc#1164828:
  * CVE-2020-6418: Type confusion in V8
  * CVE-2020-6407: Out of bounds memory access in streams.
  * Integer overflow in ICU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583236800">- Add patch trying to fix pulse audio issues with webrtc:
  * webrtc-pulse.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583409600">- Update to 80.0.3987.132 bsc#1165826:
  * CVE-2020-6420: Insufficient policy enforcement in media.
  * Various fixes from internal audits, fuzzing and other initiatives [2].</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584187200">- Do not pull in python deps except interpreter, the bundles
  are patched anwyays</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584619200">- Update to 80.0.3987.149:
  * High CVE-2020-6422: Use after free in WebGL.
  * High CVE-2020-6424: Use after free in media.
  * High CVE-2020-6425: Insufficient policy enforcement in extensions.
  * High CVE-2020-6426: Inappropriate implementation in V8.
  * High CVE-2020-6427: Use after free in audio.
  * High CVE-2020-6428: Use after free in audio.
  * High CVE-2020-6429: Use after free in audio.
  * High CVE-2019-20503: Out of bounds read in usersctplib.
  * High CVE-2020-6449: Use after free in audio.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584964800">- Add patch to allow building with pipewire 0.3:
  * build-with-pipewire-0.3.patch
- Use pipewire in Leap 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585310400">- Use a symbolic icon for GNOME</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585396800">- Add chromium-missing-cstdint-header.patch,
  chromium-missing-cstring-header.patch,
  chromium-missing-cstring-header2.patch and
  chromium-missing-cstddef-header.patch in order to fix boo#1167465.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585483200">- Rebase build-with-pipewire-0.3.patch in order to fix
  patch collision.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 80.0.3987.162 bsc#1168421:
  * CVE-2020-6450: Use after free in WebAudio.
  * CVE-2020-6451: Use after free in WebAudio.
  * CVE-2020-6452: Heap buffer overflow in media.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586347200">- Update to 81.0.4044.92 bsc#1168911:
  * CVE-2020-6454: Use after free in extensions
  * CVE-2020-6423: Use after free in audio
  * CVE-2020-6455: Out of bounds read in WebSQL
  * CVE-2020-6430: Type Confusion in V8
  * CVE-2020-6456: Insufficient validation of untrusted input in clipboard
  * CVE-2020-6431: Insufficient policy enforcement in full screen
  * CVE-2020-6432: Insufficient policy enforcement in navigations
  * CVE-2020-6433: Insufficient policy enforcement in extensions
  * CVE-2020-6434: Use after free in devtools
  * CVE-2020-6435: Insufficient policy enforcement in extensions
  * CVE-2020-6436: Use after free in window management
  * CVE-2020-6437: Inappropriate implementation in WebView
  * CVE-2020-6438: Insufficient policy enforcement in extensions
  * CVE-2020-6439: Insufficient policy enforcement in navigations
  * CVE-2020-6440: Inappropriate implementation in extensions
  * CVE-2020-6441: Insufficient policy enforcement in omnibox
  * CVE-2020-6442: Inappropriate implementation in cache
  * CVE-2020-6443: Insufficient data validation in developer tools
  * CVE-2020-6444: Uninitialized Use in WebRTC
  * CVE-2020-6445: Insufficient policy enforcement in trusted types
  * CVE-2020-6446: Insufficient policy enforcement in trusted types
  * CVE-2020-6447: Inappropriate implementation in developer tools
  * CVE-2020-6448: Use after free in V8
- Add new patches:
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Remove no longer needed patches:
  * chromium-80-gcc-abstract.patch
  * chromium-80-gcc-incomplete-type.patch
  * chromium-80-gcc-permissive.patch
  * chromium-80-include.patch
  * chromium-80-unbundle-libxml.patch
  * chromium-missing-cstddef-header.patch
  * chromium-missing-cstdint-header.patch
  * chromium-missing-cstring-header.patch
  * chromium-missing-cstring-header2.patch
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * webrtc-pulse.patch
- Rebase patches:
  * build-with-pipewire-0.3.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * gpu-timeout.patch
  * old-libva.patch</changelog>
</package>
<package pkgid="dfbcf1d8ba785a6660d6d3aff0caab5fa1113a9d81f1f73fb8577c948efd88bb" name="chromium" arch="src">
  <version epoch="0" ver="83.0.4103.106" rel="lp151.2.101.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587470400">- Update to 81.0.4044.122 (boo#1170107 bsc#1171975):
  * CVE-2020-6459: Use after free in payments
  * CVE-2020-6460: Insufficient data validation in URL formatting
  * CVE-2020-6458: Out of bounds read and write in PDFium
  * CVE-2020-6463: Use after free in ANGLE</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1588075200">- Add chromium-80.0.3987.87-missing-cstdint-header.patch,
  chromium-80.0.3987.87-missing-string-header.patch and
  chromium-80.0.3987.106-missing-cstddef-header.patch
  in order to fix build with GCC 10.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588161600">- update to 81.0.4044.129 (boo#1170707):
  * CVE-2020-0561: Use after free in storage
  * CVE-2020-6462: Use after free in task scheduling</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1588680000">- Add icu-v67.patch from upstream to fix build with icu v67</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1588766400">- update to 81.0.4044.138 bsc#1171247:
  * CVE-2020-6831: Stack buffer overflow in SCTP
  * CVE-2020-6464: Type Confusion in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589976000">- Update to 83.0.4103.61 bsc#1171910:
  * CVE-2020-6465: Use after free in reader mode. Reported by Woojin Oh(@pwn_expoit) of STEALIEN on 2020-04-21
  * CVE-2020-6466: Use after free in media. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-04-26
  * CVE-2020-6467: Use after free in WebRTC. Reported by ZhanJia Song on 2020-04-06
  * CVE-2020-6468: Type Confusion in V8. Reported by Chris Salls and Jake Corina of Seaside Security, Chani Jindal of Shellphish on 2020-04-30
  * CVE-2020-6469: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-04-02
  * CVE-2020-6470: Insufficient validation of untrusted input in clipboard. Reported by Micha? Bentkowski of Securitum on 2020-03-30
  * CVE-2020-6471: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-08
  * CVE-2020-6472: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-25
  * CVE-2020-6473: Insufficient policy enforcement in Blink. Reported by Soroush Karami and Panagiotis Ilia on 2020-02-06
  * CVE-2020-6474: Use after free in Blink. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-03-07
  * CVE-2020-6475: Incorrect security UI in full screen. Reported by Khalil Zhani on 2019-10-31
  * CVE-2020-6476: Insufficient policy enforcement in tab strip. Reported by Alexandre Le Borgne on 2019-12-18
  * CVE-2020-6477: Inappropriate implementation in installer. Reported by RACK911 Labs on 2019-03-26
  * CVE-2020-6478: Inappropriate implementation in full screen. Reported by Khalil Zhani on 2019-12-24
  * CVE-2020-6479: Inappropriate implementation in sharing. Reported by Zhong Zhaochen of andsecurity.cn on 2020-01-14
  * CVE-2020-6480: Insufficient policy enforcement in enterprise. Reported by Marvin Witt on 2020-02-21
  * CVE-2020-6481: Insufficient policy enforcement in URL formatting. Reported by Rayyan Bijoora on 2020-04-07
  * CVE-2020-6482: Insufficient policy enforcement in developer tools. Reported by Abdulrahman Alqabandi (@qab) on 2017-12-17
  * CVE-2020-6483: Insufficient policy enforcement in payments. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on 2019-05-23
  * CVE-2020-6484: Insufficient data validation in ChromeDriver. Reported by Artem Zinenko on 2020-01-26
  * CVE-2020-6485: Insufficient data validation in media router. Reported by Sergei Glazunov of Google Project Zero on 2020-01-30
  * CVE-2020-6486: Insufficient policy enforcement in navigations. Reported by David Erceg on 2020-02-24
  * CVE-2020-6487: Insufficient policy enforcement in downloads. Reported by Jun Kokatsu (@shhnjk) on 2015-10-06
  * CVE-2020-6488: Insufficient policy enforcement in downloads. Reported by David Erceg on 2020-01-21
  * CVE-2020-6489: Inappropriate implementation in developer tools. Reported by @lovasoa (Ophir LOJKINE) on 2020-02-10
  * CVE-2020-6490: Insufficient data validation in loader. Reported by Twitter on 2019-12-19
  * CVE-2020-6491: Incorrect security UI in site information. Reported by Sultan Haikal M.A on 2020-02-07
- Rebase patch:
  * chromium-vaapi.patch
- Remove merged patches:
  * icu-v67.patch
  * chromium-80-gcc-blink.patch
  * chromium-80.0.3987.106-missing-cstddef-header.patch
  * chromium-80.0.3987.87-missing-cstdint-header.patch
  * chromium-80.0.3987.87-missing-string-header.patch
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * chromium-old-glibc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Add new patches:
  * chromium-82-gcc-constexpr.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-82-gcc-template.patch
  * chromium-83-gcc-10.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589976001">- Update _constraints to avoid very slow builds seen on obs-arm-4
  (probably due to swap)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590148800">- Add patch to fix building with new re2:
  * chromium-81-re2-0.2020.05.01.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
</package>
<package pkgid="e5826c1b1cf4e84eeb64b052c1e0cfc7359f3ea078ab016b7b88c9f47888cec2" name="chromium" arch="x86_64">
  <version epoch="0" ver="83.0.4103.106" rel="lp151.2.101.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587470400">- Update to 81.0.4044.122 (boo#1170107 bsc#1171975):
  * CVE-2020-6459: Use after free in payments
  * CVE-2020-6460: Insufficient data validation in URL formatting
  * CVE-2020-6458: Out of bounds read and write in PDFium
  * CVE-2020-6463: Use after free in ANGLE</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1588075200">- Add chromium-80.0.3987.87-missing-cstdint-header.patch,
  chromium-80.0.3987.87-missing-string-header.patch and
  chromium-80.0.3987.106-missing-cstddef-header.patch
  in order to fix build with GCC 10.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588161600">- update to 81.0.4044.129 (boo#1170707):
  * CVE-2020-0561: Use after free in storage
  * CVE-2020-6462: Use after free in task scheduling</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1588680000">- Add icu-v67.patch from upstream to fix build with icu v67</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1588766400">- update to 81.0.4044.138 bsc#1171247:
  * CVE-2020-6831: Stack buffer overflow in SCTP
  * CVE-2020-6464: Type Confusion in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589976000">- Update to 83.0.4103.61 bsc#1171910:
  * CVE-2020-6465: Use after free in reader mode. Reported by Woojin Oh(@pwn_expoit) of STEALIEN on 2020-04-21
  * CVE-2020-6466: Use after free in media. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-04-26
  * CVE-2020-6467: Use after free in WebRTC. Reported by ZhanJia Song on 2020-04-06
  * CVE-2020-6468: Type Confusion in V8. Reported by Chris Salls and Jake Corina of Seaside Security, Chani Jindal of Shellphish on 2020-04-30
  * CVE-2020-6469: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-04-02
  * CVE-2020-6470: Insufficient validation of untrusted input in clipboard. Reported by Micha? Bentkowski of Securitum on 2020-03-30
  * CVE-2020-6471: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-08
  * CVE-2020-6472: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-25
  * CVE-2020-6473: Insufficient policy enforcement in Blink. Reported by Soroush Karami and Panagiotis Ilia on 2020-02-06
  * CVE-2020-6474: Use after free in Blink. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-03-07
  * CVE-2020-6475: Incorrect security UI in full screen. Reported by Khalil Zhani on 2019-10-31
  * CVE-2020-6476: Insufficient policy enforcement in tab strip. Reported by Alexandre Le Borgne on 2019-12-18
  * CVE-2020-6477: Inappropriate implementation in installer. Reported by RACK911 Labs on 2019-03-26
  * CVE-2020-6478: Inappropriate implementation in full screen. Reported by Khalil Zhani on 2019-12-24
  * CVE-2020-6479: Inappropriate implementation in sharing. Reported by Zhong Zhaochen of andsecurity.cn on 2020-01-14
  * CVE-2020-6480: Insufficient policy enforcement in enterprise. Reported by Marvin Witt on 2020-02-21
  * CVE-2020-6481: Insufficient policy enforcement in URL formatting. Reported by Rayyan Bijoora on 2020-04-07
  * CVE-2020-6482: Insufficient policy enforcement in developer tools. Reported by Abdulrahman Alqabandi (@qab) on 2017-12-17
  * CVE-2020-6483: Insufficient policy enforcement in payments. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on 2019-05-23
  * CVE-2020-6484: Insufficient data validation in ChromeDriver. Reported by Artem Zinenko on 2020-01-26
  * CVE-2020-6485: Insufficient data validation in media router. Reported by Sergei Glazunov of Google Project Zero on 2020-01-30
  * CVE-2020-6486: Insufficient policy enforcement in navigations. Reported by David Erceg on 2020-02-24
  * CVE-2020-6487: Insufficient policy enforcement in downloads. Reported by Jun Kokatsu (@shhnjk) on 2015-10-06
  * CVE-2020-6488: Insufficient policy enforcement in downloads. Reported by David Erceg on 2020-01-21
  * CVE-2020-6489: Inappropriate implementation in developer tools. Reported by @lovasoa (Ophir LOJKINE) on 2020-02-10
  * CVE-2020-6490: Insufficient data validation in loader. Reported by Twitter on 2019-12-19
  * CVE-2020-6491: Incorrect security UI in site information. Reported by Sultan Haikal M.A on 2020-02-07
- Rebase patch:
  * chromium-vaapi.patch
- Remove merged patches:
  * icu-v67.patch
  * chromium-80-gcc-blink.patch
  * chromium-80.0.3987.106-missing-cstddef-header.patch
  * chromium-80.0.3987.87-missing-cstdint-header.patch
  * chromium-80.0.3987.87-missing-string-header.patch
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * chromium-old-glibc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Add new patches:
  * chromium-82-gcc-constexpr.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-82-gcc-template.patch
  * chromium-83-gcc-10.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589976001">- Update _constraints to avoid very slow builds seen on obs-arm-4
  (probably due to swap)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590148800">- Add patch to fix building with new re2:
  * chromium-81-re2-0.2020.05.01.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
</package>
<package pkgid="950ee9871dbc238bdc1674de426a381fff69919836c2e9a9d292f4530cda51b1" name="chromium" arch="src">
  <version epoch="0" ver="83.0.4103.116" rel="lp151.2.106.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590148800">- Add patch to fix building with new re2:
  * chromium-81-re2-0.2020.05.01.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
</package>
<package pkgid="99278ba2abf87b8e74fa91026e2e64e803afdd0e68584bb76dc63de8b40b2529" name="chromium" arch="x86_64">
  <version epoch="0" ver="83.0.4103.116" rel="lp151.2.106.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590148800">- Add patch to fix building with new re2:
  * chromium-81-re2-0.2020.05.01.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
</package>
<package pkgid="632fcac1b7c0d907cf8a5de488f64d2bf701a2d418eff332b9eca2e3c5e62e74" name="chromium" arch="src">
  <version epoch="0" ver="83.0.4103.97" rel="lp151.2.96.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586865600">- Try to use system version of xdg-utils</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587124800">- Update to 81.0.4044.113 bsc#1169729:
  * CVE-2020-6457: Use after free in speech recognizer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587470400">- Update to 81.0.4044.122 (boo#1170107 bsc#1171975):
  * CVE-2020-6459: Use after free in payments
  * CVE-2020-6460: Insufficient data validation in URL formatting
  * CVE-2020-6458: Out of bounds read and write in PDFium
  * CVE-2020-6463: Use after free in ANGLE</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1588075200">- Add chromium-80.0.3987.87-missing-cstdint-header.patch,
  chromium-80.0.3987.87-missing-string-header.patch and
  chromium-80.0.3987.106-missing-cstddef-header.patch
  in order to fix build with GCC 10.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588161600">- update to 81.0.4044.129 (boo#1170707):
  * CVE-2020-0561: Use after free in storage
  * CVE-2020-6462: Use after free in task scheduling</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1588680000">- Add icu-v67.patch from upstream to fix build with icu v67</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1588766400">- update to 81.0.4044.138 bsc#1171247:
  * CVE-2020-6831: Stack buffer overflow in SCTP
  * CVE-2020-6464: Type Confusion in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589976000">- Update to 83.0.4103.61 bsc#1171910:
  * CVE-2020-6465: Use after free in reader mode. Reported by Woojin Oh(@pwn_expoit) of STEALIEN on 2020-04-21
  * CVE-2020-6466: Use after free in media. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-04-26
  * CVE-2020-6467: Use after free in WebRTC. Reported by ZhanJia Song on 2020-04-06
  * CVE-2020-6468: Type Confusion in V8. Reported by Chris Salls and Jake Corina of Seaside Security, Chani Jindal of Shellphish on 2020-04-30
  * CVE-2020-6469: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-04-02
  * CVE-2020-6470: Insufficient validation of untrusted input in clipboard. Reported by Micha? Bentkowski of Securitum on 2020-03-30
  * CVE-2020-6471: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-08
  * CVE-2020-6472: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-25
  * CVE-2020-6473: Insufficient policy enforcement in Blink. Reported by Soroush Karami and Panagiotis Ilia on 2020-02-06
  * CVE-2020-6474: Use after free in Blink. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-03-07
  * CVE-2020-6475: Incorrect security UI in full screen. Reported by Khalil Zhani on 2019-10-31
  * CVE-2020-6476: Insufficient policy enforcement in tab strip. Reported by Alexandre Le Borgne on 2019-12-18
  * CVE-2020-6477: Inappropriate implementation in installer. Reported by RACK911 Labs on 2019-03-26
  * CVE-2020-6478: Inappropriate implementation in full screen. Reported by Khalil Zhani on 2019-12-24
  * CVE-2020-6479: Inappropriate implementation in sharing. Reported by Zhong Zhaochen of andsecurity.cn on 2020-01-14
  * CVE-2020-6480: Insufficient policy enforcement in enterprise. Reported by Marvin Witt on 2020-02-21
  * CVE-2020-6481: Insufficient policy enforcement in URL formatting. Reported by Rayyan Bijoora on 2020-04-07
  * CVE-2020-6482: Insufficient policy enforcement in developer tools. Reported by Abdulrahman Alqabandi (@qab) on 2017-12-17
  * CVE-2020-6483: Insufficient policy enforcement in payments. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on 2019-05-23
  * CVE-2020-6484: Insufficient data validation in ChromeDriver. Reported by Artem Zinenko on 2020-01-26
  * CVE-2020-6485: Insufficient data validation in media router. Reported by Sergei Glazunov of Google Project Zero on 2020-01-30
  * CVE-2020-6486: Insufficient policy enforcement in navigations. Reported by David Erceg on 2020-02-24
  * CVE-2020-6487: Insufficient policy enforcement in downloads. Reported by Jun Kokatsu (@shhnjk) on 2015-10-06
  * CVE-2020-6488: Insufficient policy enforcement in downloads. Reported by David Erceg on 2020-01-21
  * CVE-2020-6489: Inappropriate implementation in developer tools. Reported by @lovasoa (Ophir LOJKINE) on 2020-02-10
  * CVE-2020-6490: Insufficient data validation in loader. Reported by Twitter on 2019-12-19
  * CVE-2020-6491: Incorrect security UI in site information. Reported by Sultan Haikal M.A on 2020-02-07
- Rebase patch:
  * chromium-vaapi.patch
- Remove merged patches:
  * icu-v67.patch
  * chromium-80-gcc-blink.patch
  * chromium-80.0.3987.106-missing-cstddef-header.patch
  * chromium-80.0.3987.87-missing-cstdint-header.patch
  * chromium-80.0.3987.87-missing-string-header.patch
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * chromium-old-glibc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Add new patches:
  * chromium-82-gcc-constexpr.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-82-gcc-template.patch
  * chromium-83-gcc-10.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589976001">- Update _constraints to avoid very slow builds seen on obs-arm-4
  (probably due to swap)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590148800">- Add patch to fix building with new re2:
  * chromium-81-re2-0.2020.05.01.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
</package>
<package pkgid="adec8f3dd098773cbcef8ca513ddd831e6de60da68e7037c014d8ae86bbeec05" name="chromium" arch="x86_64">
  <version epoch="0" ver="83.0.4103.97" rel="lp151.2.96.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586865600">- Try to use system version of xdg-utils</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1587124800">- Update to 81.0.4044.113 bsc#1169729:
  * CVE-2020-6457: Use after free in speech recognizer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587470400">- Update to 81.0.4044.122 (boo#1170107 bsc#1171975):
  * CVE-2020-6459: Use after free in payments
  * CVE-2020-6460: Insufficient data validation in URL formatting
  * CVE-2020-6458: Out of bounds read and write in PDFium
  * CVE-2020-6463: Use after free in ANGLE</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1588075200">- Add chromium-80.0.3987.87-missing-cstdint-header.patch,
  chromium-80.0.3987.87-missing-string-header.patch and
  chromium-80.0.3987.106-missing-cstddef-header.patch
  in order to fix build with GCC 10.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588161600">- update to 81.0.4044.129 (boo#1170707):
  * CVE-2020-0561: Use after free in storage
  * CVE-2020-6462: Use after free in task scheduling</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1588680000">- Add icu-v67.patch from upstream to fix build with icu v67</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1588766400">- update to 81.0.4044.138 bsc#1171247:
  * CVE-2020-6831: Stack buffer overflow in SCTP
  * CVE-2020-6464: Type Confusion in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589976000">- Update to 83.0.4103.61 bsc#1171910:
  * CVE-2020-6465: Use after free in reader mode. Reported by Woojin Oh(@pwn_expoit) of STEALIEN on 2020-04-21
  * CVE-2020-6466: Use after free in media. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-04-26
  * CVE-2020-6467: Use after free in WebRTC. Reported by ZhanJia Song on 2020-04-06
  * CVE-2020-6468: Type Confusion in V8. Reported by Chris Salls and Jake Corina of Seaside Security, Chani Jindal of Shellphish on 2020-04-30
  * CVE-2020-6469: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-04-02
  * CVE-2020-6470: Insufficient validation of untrusted input in clipboard. Reported by Micha? Bentkowski of Securitum on 2020-03-30
  * CVE-2020-6471: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-08
  * CVE-2020-6472: Insufficient policy enforcement in developer tools. Reported by David Erceg on 2020-03-25
  * CVE-2020-6473: Insufficient policy enforcement in Blink. Reported by Soroush Karami and Panagiotis Ilia on 2020-02-06
  * CVE-2020-6474: Use after free in Blink. Reported by Zhe Jin from cdsrc of Qihoo 360 on 2020-03-07
  * CVE-2020-6475: Incorrect security UI in full screen. Reported by Khalil Zhani on 2019-10-31
  * CVE-2020-6476: Insufficient policy enforcement in tab strip. Reported by Alexandre Le Borgne on 2019-12-18
  * CVE-2020-6477: Inappropriate implementation in installer. Reported by RACK911 Labs on 2019-03-26
  * CVE-2020-6478: Inappropriate implementation in full screen. Reported by Khalil Zhani on 2019-12-24
  * CVE-2020-6479: Inappropriate implementation in sharing. Reported by Zhong Zhaochen of andsecurity.cn on 2020-01-14
  * CVE-2020-6480: Insufficient policy enforcement in enterprise. Reported by Marvin Witt on 2020-02-21
  * CVE-2020-6481: Insufficient policy enforcement in URL formatting. Reported by Rayyan Bijoora on 2020-04-07
  * CVE-2020-6482: Insufficient policy enforcement in developer tools. Reported by Abdulrahman Alqabandi (@qab) on 2017-12-17
  * CVE-2020-6483: Insufficient policy enforcement in payments. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on 2019-05-23
  * CVE-2020-6484: Insufficient data validation in ChromeDriver. Reported by Artem Zinenko on 2020-01-26
  * CVE-2020-6485: Insufficient data validation in media router. Reported by Sergei Glazunov of Google Project Zero on 2020-01-30
  * CVE-2020-6486: Insufficient policy enforcement in navigations. Reported by David Erceg on 2020-02-24
  * CVE-2020-6487: Insufficient policy enforcement in downloads. Reported by Jun Kokatsu (@shhnjk) on 2015-10-06
  * CVE-2020-6488: Insufficient policy enforcement in downloads. Reported by David Erceg on 2020-01-21
  * CVE-2020-6489: Inappropriate implementation in developer tools. Reported by @lovasoa (Ophir LOJKINE) on 2020-02-10
  * CVE-2020-6490: Insufficient data validation in loader. Reported by Twitter on 2019-12-19
  * CVE-2020-6491: Incorrect security UI in site information. Reported by Sultan Haikal M.A on 2020-02-07
- Rebase patch:
  * chromium-vaapi.patch
- Remove merged patches:
  * icu-v67.patch
  * chromium-80-gcc-blink.patch
  * chromium-80.0.3987.106-missing-cstddef-header.patch
  * chromium-80.0.3987.87-missing-cstdint-header.patch
  * chromium-80.0.3987.87-missing-string-header.patch
  * chromium-81-gcc-constexpr.patch
  * chromium-81-gcc-noexcept.patch
  * chromium-old-glibc-noexcept.patch
  * fix-vaapi-with-glx.patch
- Add new patches:
  * chromium-82-gcc-constexpr.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-82-gcc-template.patch
  * chromium-83-gcc-10.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589976001">- Update _constraints to avoid very slow builds seen on obs-arm-4
  (probably due to swap)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590148800">- Add patch to fix building with new re2:
  * chromium-81-re2-0.2020.05.01.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
</package>
<package pkgid="0603c32a16a2333f76203fdde6db1e8dd8fd096449cecbcf47b687416c73567e" name="chromium" arch="src">
  <version epoch="0" ver="84.0.4147.105" rel="lp151.2.112.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
</package>
<package pkgid="51a833b56bee769109d6328ca40ef318103ca31664b54b1f29453bda78c6d2bc" name="chromium" arch="x86_64">
  <version epoch="0" ver="84.0.4147.105" rel="lp151.2.112.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
</package>
<package pkgid="4ca8126c5209d4e7199c94991becd67de938caa77bf7e4c749efcbbac9af6546" name="chromium" arch="src">
  <version epoch="0" ver="84.0.4147.125" rel="lp151.2.115.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="bc2a98bf2d48bb13e55808ab5d9759c27724baf2c9dedb6912d68e056185f5bc" name="chromium" arch="x86_64">
  <version epoch="0" ver="84.0.4147.125" rel="lp151.2.115.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="082ff4b6e9c5e5a8272457622408b516bf6f8b3129e640285548d4a6533b0d88" name="chromium" arch="src">
  <version epoch="0" ver="84.0.4147.135" rel="lp151.2.120.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597838400">- Use new _constraint memoryperjob.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
</package>
<package pkgid="0cf998de78adef57b65d313d60d1ad633287908f18eeb41b69e1e37ad7731de0" name="chromium" arch="x86_64">
  <version epoch="0" ver="84.0.4147.135" rel="lp151.2.120.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597838400">- Use new _constraint memoryperjob.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
</package>
<package pkgid="b16256b974af9efbfb5ec694b8eed78d76947dfd71fbe214785231a8a5b977be" name="chromium" arch="src">
  <version epoch="0" ver="84.0.4147.89" rel="lp151.2.109.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667200">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
</package>
<package pkgid="49bcdc60fce7434afa45a14e89841ed6ecb4c4d381cebcc4009efd94684d8a01" name="chromium" arch="x86_64">
  <version epoch="0" ver="84.0.4147.89" rel="lp151.2.109.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667200">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
</package>
<package pkgid="67d96296d19fcec870f913b3565b045e56efd6834dfd05a19b7db119cbcfab88" name="chromium" arch="src">
  <version epoch="0" ver="85.0.4183.102" rel="lp151.2.133.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
</package>
<package pkgid="6f0a42dfaea56f1f96436cd0123bb1275a9b6550d6efb0bf19803729181f639a" name="chromium" arch="x86_64">
  <version epoch="0" ver="85.0.4183.102" rel="lp151.2.133.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
</package>
<package pkgid="d04e9f5ae52ba7be86fe340c7ae891d5f42500e7394749158a69cd0bce6eea8c" name="chromium" arch="src">
  <version epoch="0" ver="85.0.4183.121" rel="lp151.2.136.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
</package>
<package pkgid="e25a18c2a24a6664e2f6443f4cd5276edbf2c491eb4b1ac520fe9a681c6e9758" name="chromium" arch="x86_64">
  <version epoch="0" ver="85.0.4183.121" rel="lp151.2.136.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
</package>
<package pkgid="1e27bbca5987baa1bada6853644b80121787e480d409b998be916e77de01a776" name="chromium" arch="src">
  <version epoch="0" ver="85.0.4183.69" rel="lp151.2.123.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
</package>
<package pkgid="02864aa565979cf75ebeab28cb5e60d1950ec0d22762ff9115e9fdde44042a0c" name="chromium" arch="x86_64">
  <version epoch="0" ver="85.0.4183.69" rel="lp151.2.123.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
</package>
<package pkgid="6a13516c0d550e1720df896ee95d25ad944b2563405714b7dee907c393e0dcaa" name="chromium" arch="src">
  <version epoch="0" ver="86.0.4240.111" rel="lp151.2.147.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060800">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
</package>
<package pkgid="7e89cc982db824a1cbbc56840b2e3d72dc2fd3f3dd0b56c2593547119a9acdd3" name="chromium" arch="x86_64">
  <version epoch="0" ver="86.0.4240.111" rel="lp151.2.147.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060800">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
</package>
<package pkgid="d019d7e1d09d9cb2f672dcc2a581640b0cd332b8ccb19032c88f18053d945337" name="chromium" arch="src">
  <version epoch="0" ver="86.0.4240.183" rel="lp151.2.150.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
</package>
<package pkgid="1c840239bae6e8dfe7da837b3623efeb513b4ca2b59043b2af6503cd795e3ffa" name="chromium" arch="x86_64">
  <version epoch="0" ver="86.0.4240.183" rel="lp151.2.150.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
</package>
<package pkgid="6ed8bd006de58665c74644a5f56559f0dc30bdf327b48331efa88a5be8b700ae" name="chromium" arch="src">
  <version epoch="0" ver="86.0.4240.198" rel="lp151.2.153.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
</package>
<package pkgid="5ac742cca18b7b15fbce8b0ff20998a83c58cc18e46bc3fe610cff522b5c7385" name="chromium" arch="x86_64">
  <version epoch="0" ver="86.0.4240.198" rel="lp151.2.153.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
</package>
<package pkgid="383e6ebac88e0c03605fd5ab59dc947af5b4506f4097ebdf2ad85317a888f819" name="chromium" arch="src">
  <version epoch="0" ver="86.0.4240.75" rel="lp151.2.144.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
</package>
<package pkgid="f229b3631fa6e99e5af357a0bccf623063a084cb614437914d6be1b2dd58d29d" name="chromium" arch="x86_64">
  <version epoch="0" ver="86.0.4240.75" rel="lp151.2.144.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
</package>
<package pkgid="631522d31fcffb686893621a2ecf7632be5200c50d91925ad683fef9ab87cfd9" name="chromium" arch="src">
  <version epoch="0" ver="87.0.4280.66" rel="lp151.2.156.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
</package>
<package pkgid="ee3eef7433d343550aa1ebe055e9a3ac543bd9cb388a6fdcfac9e3780dedf8ce" name="chromium" arch="x86_64">
  <version epoch="0" ver="87.0.4280.66" rel="lp151.2.156.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
</package>
<package pkgid="0958867f75afe1413d1de46c64ea66979dd496665a3262d35c752f682a67b548" name="chromium" arch="src">
  <version epoch="0" ver="87.0.4280.66" rel="lp151.2.159.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
</package>
<package pkgid="7f0933b40a1b2d6425b2810f650f24e52323d0bcca0eac7ddf03aeb7b5618fd5" name="chromium" arch="x86_64">
  <version epoch="0" ver="87.0.4280.66" rel="lp151.2.159.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
</package>
<package pkgid="3c8a6532035ff447698ca528bd1bf0cb0225f392c465c202644b12232e5b64c1" name="chromium" arch="src">
  <version epoch="0" ver="87.0.4280.88" rel="lp151.2.162.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
</package>
<package pkgid="e6711bd35be0f5c871a1f6caea7f40273ff4cbf89ff639b5198f95ac5a5c7a25" name="chromium" arch="x86_64">
  <version epoch="0" ver="87.0.4280.88" rel="lp151.2.162.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
</package>
<package pkgid="7c0ae97b32d698fab8079d100979756f31e35bc776e476ca1e9f288fc9ab04db" name="chrony" arch="i586">
  <version epoch="0" ver="3.2" rel="lp151.9.12.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="5600e05f63328bfcc455ae9b3a108112bb3d2c17266654f0f444f16ed77e265d" name="chrony" arch="src">
  <version epoch="0" ver="3.2" rel="lp151.9.12.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="fc7dc56e6e7bdcf595962bb6a85c8850da7a25de715f10ef9f374a2bfea7a9ef" name="chrony" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp151.9.12.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="1a1c7372aea50e4eb111a2620176c708fb2beff607d7a1b9662774001f0599e5" name="chrony" arch="i586">
  <version epoch="0" ver="3.2" rel="lp151.9.3.1"/>
  <changelog author="mpluskal@suse.com" date="1460116800">- Undo reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun as it would lead to error.
- Change conditions for libseccom, we can use any version on SLE-12
  x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1460116801">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
</package>
<package pkgid="5c29463e3d7675e8b0f489f1d1799f130e2f00514aef101220150d37446d092d" name="chrony" arch="src">
  <version epoch="0" ver="3.2" rel="lp151.9.3.1"/>
  <changelog author="mpluskal@suse.com" date="1460116800">- Undo reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun as it would lead to error.
- Change conditions for libseccom, we can use any version on SLE-12
  x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1460116801">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
</package>
<package pkgid="a0bd5a91834cd16149eada1550e256a7e2e719157db2c4e12fecfe52529871be" name="chrony" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp151.9.3.1"/>
  <changelog author="mpluskal@suse.com" date="1460116800">- Undo reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun as it would lead to error.
- Change conditions for libseccom, we can use any version on SLE-12
  x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1460116801">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
</package>
<package pkgid="e02f3b8359eeb5bfd2ada61c870b4afcc8d0f0975fe30fd5d42194057c5b5f5a" name="chrony" arch="i586">
  <version epoch="0" ver="3.2" rel="lp151.9.6.1"/>
  <changelog author="mpluskal@suse.com" date="1460116800">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
</package>
<package pkgid="c24af12c0a7aeb19214add8e19dbdba87aa476ecc615e0ca5efe805251f0ed4e" name="chrony" arch="src">
  <version epoch="0" ver="3.2" rel="lp151.9.6.1"/>
  <changelog author="mpluskal@suse.com" date="1460116800">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
</package>
<package pkgid="33f446d88943793c06138b680e30c55acf9a38e6b21c4356db9997f93e5e88ca" name="chrony" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp151.9.6.1"/>
  <changelog author="mpluskal@suse.com" date="1460116800">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
</package>
<package pkgid="d7db3aed2460147263550df78826bbf6e167c8018a5776199ce1eec360a47a64" name="chrony" arch="i586">
  <version epoch="0" ver="3.2" rel="lp151.9.9.1"/>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
</package>
<package pkgid="22c0137e0b8a8e2704fea9e3d3ae4e61523c853d1eaca275934eaecd25f84d43" name="chrony" arch="src">
  <version epoch="0" ver="3.2" rel="lp151.9.9.1"/>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
</package>
<package pkgid="82b118fb7957765e704b65fb5b182cbb56986d73092dbaf6aa4e5db3704954da" name="chrony" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp151.9.9.1"/>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
</package>
<package pkgid="82cc6e94cc7d6731dbf6755d797c218afbc67ac9e139a38991fc6c84c31995eb" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp151.9.12.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="c7f5bc9339738703fdc7f222a95de2199141240a443943e9cf7094f7d8a0846f" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp151.9.6.1"/>
  <changelog author="mpluskal@suse.com" date="1460116800">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
</package>
<package pkgid="59849c87938054d976718922998aede496cbcb4f681996e09db9dd73e14690aa" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp151.9.9.1"/>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
</package>
<package pkgid="76eefeb6ade0d114db32c04c4fb5d11faae338932e624c14a7b0a54a3e5299fe" name="chrony-pool-openSUSE" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp151.9.12.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="6483397f3f9df1ccaca652375fe7358fe68b6a627fc03101742a920ecc676ab2" name="chrony-pool-openSUSE" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp151.9.6.1"/>
  <changelog author="mpluskal@suse.com" date="1460116800">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
</package>
<package pkgid="5c170c58758404e2f90a4a0654abb99c442f30bfff6f8c6aa72da51a874739c6" name="chrony-pool-openSUSE" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp151.9.9.1"/>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
</package>
<package pkgid="ae1f0f6bf1b83cdb9202f2ee42efcfd11f3b470ab54c42101895361c971757d5" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp151.9.12.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="24b187ad3be61556e605a238d2fb31a5168252c741528a18c3e6b30aaaf0ca9b" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp151.9.6.1"/>
  <changelog author="mpluskal@suse.com" date="1460116800">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
</package>
<package pkgid="8e3e52fd32cb3887bc6e52fc73f6fec202b0c236cd3e82f74aa5036199fa728c" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp151.9.9.1"/>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
</package>
<package pkgid="b128fde6274f91374fd728756fa85cdf9f22f3a2876270ce478ca60f70495f10" name="cifs-utils" arch="i586">
  <version epoch="0" ver="6.9" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1413201600">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
</package>
<package pkgid="78c04d51b9f79b650c2a5ee799a0773e4f226b7fae42e4508928da0c5755ae96" name="cifs-utils" arch="src">
  <version epoch="0" ver="6.9" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1413201600">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
</package>
<package pkgid="c2f8e82dcbff535d3f120738776e6127c4d385b241f24c6fc6106b416479a322" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="6.9" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1413201600">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
</package>
<package pkgid="9f887e92390a24304b9c4f30bad064b802b6b374dfd897d7d5fdff0fc960fef9" name="cifs-utils" arch="i586">
  <version epoch="0" ver="6.9" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1413201600">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
</package>
<package pkgid="c015729f71abb2389c9204bbf7fdc8523ea7ca41931fbb5b107b7f51c727aee6" name="cifs-utils" arch="src">
  <version epoch="0" ver="6.9" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1413201600">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
</package>
<package pkgid="b203e9f9885f9a574346755ce097362a219242fd0826c5dbe1ee85350c82fa28" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="6.9" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1413201600">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
</package>
<package pkgid="8fdd95068a923e8c8cf1363d89e34a716b730fbc98ff2cdea17acc883d4b23fa" name="cifs-utils" arch="i586">
  <version epoch="0" ver="6.9" rel="lp151.4.7.1"/>
  <changelog author="lmuelle@suse.com" date="1414497600">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
</package>
<package pkgid="f0996a18da71cdfc64dae9765066809d98a65c56b59d2bc5f45505f67daee8cb" name="cifs-utils" arch="src">
  <version epoch="0" ver="6.9" rel="lp151.4.7.1"/>
  <changelog author="lmuelle@suse.com" date="1414497600">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
</package>
<package pkgid="43cb34676d84fd66000ab43f364078a5694714309d8a100f895350c55b39460c" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="6.9" rel="lp151.4.7.1"/>
  <changelog author="lmuelle@suse.com" date="1414497600">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
</package>
<package pkgid="4ab4c9adb4e2e5868f15134e8e6b0784219c3d2472429065e60554b0ab3a52f5" name="cifs-utils-devel" arch="i586">
  <version epoch="0" ver="6.9" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1413201600">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
</package>
<package pkgid="6adfe2e290f97019d4f7d01b33471e74ebcf31d66bdb2811936d13c9d19a7263" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.9" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1413201600">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
</package>
<package pkgid="3f39722964733d5a4a3e873a87eca8adaa9f3bfb0c0de45daa4fd49cdbc5b682" name="cifs-utils-devel" arch="i586">
  <version epoch="0" ver="6.9" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1413201600">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
</package>
<package pkgid="35431154fe88873e7d978979d378750ce99a405fdf7e4a669dd7d88248d775a6" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.9" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1413201600">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
</package>
<package pkgid="743b9b4bbced8609a0ea1d196daa3331aef28bd46c79a62524f3389ecf0409d5" name="cifs-utils-devel" arch="i586">
  <version epoch="0" ver="6.9" rel="lp151.4.7.1"/>
  <changelog author="lmuelle@suse.com" date="1414497600">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
</package>
<package pkgid="d33d4647cabf05bbabbe1cd22bce2c77c067505e080f34a8803ea24f2d3e4dbd" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.9" rel="lp151.4.7.1"/>
  <changelog author="lmuelle@suse.com" date="1414497600">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
</package>
<package pkgid="d42c3fe4d24aad37ec0a10a83cd5fabc59766daadf63947a0efd57c4508dbd04" name="cjose" arch="src">
  <version epoch="0" ver="0.6.1" rel="lp151.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1478088000">- Initial version</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- update to version 0.5.1</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 0.6.1
- packaged as a dependency for apache2-mod_auth_openidc which was
  requested in fate#323817</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572436800">- add cjose-0.6.1-concatkdf.patch to fix concatkdf failures on big
  endian architectures [bsc#1149887]</changelog>
</package>
<package pkgid="c91bc4e2e2c5b4c3297b302c9db394bb6ce100d1ebd6313b7a247fccbc5464eb" name="clamav" arch="src">
  <version epoch="0" ver="0.100.3" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
</package>
<package pkgid="f71fd772568548e759a52a36da64f5e01073ef1b8f6db15586d0d7e3c1a640a7" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.3" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
</package>
<package pkgid="821abb7f7efef1b30c61f19613abc792be95bf4275028d74874c342a51a83ebf" name="clamav" arch="src">
  <version epoch="0" ver="0.100.3" rel="lp151.2.6.1"/>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574942400">- CVE-2019-15961, bsc#1157763, clamav-CVE-2019-15961.patch:
  A Denial-of-Service (DoS) vulnerability may occur when scanning a
  specially crafted email file as a result of excessively long scan
  times.</changelog>
</package>
<package pkgid="773c3410622581a499079c29c27c5588fe991ff4b84c8573ddbb49bc0e148f72" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.3" rel="lp151.2.6.1"/>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574942400">- CVE-2019-15961, bsc#1157763, clamav-CVE-2019-15961.patch:
  A Denial-of-Service (DoS) vulnerability may occur when scanning a
  specially crafted email file as a result of excessively long scan
  times.</changelog>
</package>
<package pkgid="52940d24eb610d117129c932655801c5b73551ed14ec07861c4c12ad30409635" name="clamav" arch="src">
  <version epoch="0" ver="0.100.3" rel="lp151.2.9.1"/>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574942400">- CVE-2019-15961, bsc#1157763, clamav-CVE-2019-15961.patch:
  A Denial-of-Service (DoS) vulnerability may occur when scanning a
  specially crafted email file as a result of excessively long scan
  times.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1586347200">- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.</changelog>
</package>
<package pkgid="2b50b58d12221ffd96198902dc010e71820edf5ac482b259f6c6e787206bd81f" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.3" rel="lp151.2.9.1"/>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574942400">- CVE-2019-15961, bsc#1157763, clamav-CVE-2019-15961.patch:
  A Denial-of-Service (DoS) vulnerability may occur when scanning a
  specially crafted email file as a result of excessively long scan
  times.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1586347200">- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.</changelog>
</package>
<package pkgid="c961dc9469fb32d1f6efdc3f8ea187e60a800084107a1e45c0de6f307581652d" name="clamav" arch="src">
  <version epoch="0" ver="0.103.0" rel="lp151.2.12.1"/>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
</package>
<package pkgid="0b828cc11dbdefaa11af557bb5d6c320c46f02945e863115b22ef35a09234924" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.103.0" rel="lp151.2.12.1"/>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
</package>
<package pkgid="b88756fdd1b1e171fc09e7d8f42a299b485562c0237d9c40e11e9bdee479e7cb" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.100.3" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
</package>
<package pkgid="e373f9a69c33f93779b281df857e0047ef229620a1b1e312eefa159a75f7132d" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.100.3" rel="lp151.2.6.1"/>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574942400">- CVE-2019-15961, bsc#1157763, clamav-CVE-2019-15961.patch:
  A Denial-of-Service (DoS) vulnerability may occur when scanning a
  specially crafted email file as a result of excessively long scan
  times.</changelog>
</package>
<package pkgid="87ddc2673aa1ba03b92a00e602dbbfb20a7eb2aa081bff7ac2b36cf5fa79147c" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.100.3" rel="lp151.2.9.1"/>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574942400">- CVE-2019-15961, bsc#1157763, clamav-CVE-2019-15961.patch:
  A Denial-of-Service (DoS) vulnerability may occur when scanning a
  specially crafted email file as a result of excessively long scan
  times.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1586347200">- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.</changelog>
</package>
<package pkgid="3ebb54a1b3f1bcb22ea2c490207b0767b2f5fdac016a4fc7759ea4ebf77f5dd5" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.103.0" rel="lp151.2.12.1"/>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
</package>
<package pkgid="a8863304f48911707fae25d913147107c54489a04c054562392ddbf1bc9cd4d2" name="clang7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="efbd024663cb2570846a5a40b876bbf91b9d86569958a5cde370894b8d7a1c5a" name="clang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="32c0b335ee7d0141be6fef061c64a5aed1d2ff0dd09b3e174b167e093f15316d" name="clang7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="4d8c06827bdf8c4d59062b134085e5b01cbf93abc40ceada4e24a6e432ad5a89" name="clang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="5dfe7f262e1fb9d8dde613ad973b1301b905e031a508308217915387028a5bdf" name="clang7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="acd31407e45a0c5eb8a1d78aae2d76e76921d08f8361ee63a5dd21ed2fff3972" name="clang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="f94863497cd347e616d7377030ca218b00050e7b4509bab5f33013ea5cf61b38" name="clang7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.9.1"/>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
</package>
<package pkgid="20f35165a5b8d49cf8902a12b8d4ebaf376f37187098998417bf8b01f01b8816" name="clang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.9.1"/>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
</package>
<package pkgid="3467bd7b69a9b0fb9428ef3712f247dfb6707020c4483c50d4119154e0d0354a" name="clang7-checker" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="12722fe4bd9e8ca34d04f02bee938e154017156bf454b2f4c394a2ad9b7b9b1a" name="clang7-checker" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="a6084ee0d6c0e129796b5f7433f31bd4cc5fe49c5b031a2c463c090e28921528" name="clang7-checker" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="e1e540addb29ec8bd822fe7b5b6419423f6bc8f47b9d338d91c1d08f435ff0f5" name="clang7-checker" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="842697232f5d223c3b683953b9937f609b9adb3342bcef02ceb00816614a0967" name="clang7-checker" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="b0e00424b7a81e13ebe2f48c675ad9c9398c36a43184517c17e84f74447155da" name="clang7-checker" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="97ad5b7956a87d4568a8747d0159b70d9a89fb777e91251362954b9ae0949440" name="clang7-checker" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.9.1"/>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
</package>
<package pkgid="afd40603ef58abc01299f6f998f76982ec58c06c27f3928de3bd099e7b5e0e14" name="clang7-checker" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.9.1"/>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
</package>
<package pkgid="a8eae5d66a2b6400a9a963d78790cdc54d71f021ddd16389bd7fa10fe51d3f0a" name="clang7-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="2faf401b41c174b063a5ec2c81bf95a44628cbe61a00ea9235424e424dd8f26c" name="clang7-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="090fd9741b5ac3ba625dcf5124164e7e28dfbcee8aa46b5caff9040bdb5707c4" name="clang7-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="2eee3753e96acb5bea969addb31ba6edd147e253dd11b871392ece815a76c87b" name="clang7-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.9.1"/>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
</package>
<package pkgid="db112ff2228c6cf8328512a9b3e69c17f1c1a50f6a05710141e87391e66604d9" name="clang7-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="a68456b6bf70366e08f6b628a5a02eb72144de59fa4aafddf2f8040b3d72dd9b" name="clang7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="e67ae10a52f3fdf4e9acc8cc8780400af4fea561355e733a3c8c2fb9e626bd79" name="clang7-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="00015420c6c7997ed24cc98ccb3ed2d315af2f0b4ee9b6f898e4377b9ff0a978" name="clang7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="58d8065153f5f1f58aaee4fec0050261a22025eb992b581b4f97d530ec6849f5" name="clang7-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="08ea885f9c06b6acc6b7f28808fa47a0982db104df325e4993f1ae384675acf4" name="clang7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="ea5239deef6b88bbcbc1acfffdb52d0c7b923a8cd9459626107aa552f8ef3958" name="clang7-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.9.1"/>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
</package>
<package pkgid="be486921363645f770bf65c850607b609e3040908ae90d0c58df87ae839a92f6" name="clang7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.9.1"/>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
</package>
<package pkgid="649ea5f1512c1af2552ac6624b80a4c4b6f0124e5834ba5f3e296403ae2d0d91" name="claws-mail" arch="src">
  <version epoch="0" ver="3.17.3" rel="lp151.2.3.1"/>
  <changelog author="kieltux@gmail.com" date="1470657600">- Update to version 3.14.0:
  + Passwords can now be secured with a Master Passphrase.
  + Passwords: The password storage method has changed. All
    passwords are now stored in a separate file,
    (~/.claws-mail/passwordstorerc),
    and use a stronger encryption than previously. Existing
    passwords are moved to the new file automatically, in the old
    format. The new format will be used whenever old passwords are
    changed or when a Master Passphrase is used. All new passwords
    are saved using the new format, irrespective of whether a
    Master Passphrase is used or not. Further information can be
    found here:
    http://www.claws-mail.org/doc/password_encryption.txt
  + Compose window: Removed the outer scrollbar from header area.
  + Message view: The HTML to plain text converter now indicates
    list items with a hyphen (-), adds a line break after ,
    and indents text within blockquotes.
  + Main window: Changed default /View/Show or hide/Menubar
    shortcut to Ctrl+F12.
  + SSL certificates list: Added automatic scrollbar.
  + Address book: Double-clicking datasources now opens the edit
    dialogue.
  + Forwarding: The external editor is now automatically used when
    forwarding as attachment, if the preference is set.
  + Preferences: Automatic mail checking can now be configured in
    hours, minutes and seconds.
  + Preferences: The 'next_on_delete' hidden preference now
    applies to trashing or moving, in addition to deleting, a
    message.
  + Command line: Added -geometry to set geometry for main window.
  + IMAP: Added SASL 'PLAIN' and 'LOGIN' authentication methods
    for accounts. Renamed the old plaintext 'LOGIN' to
    'plaintext'.
  + IMAP: The acccount preference, 'Move deleted mails to trash
    and expunge immediately' has been removed.
  + Notification plugin: Added 'Get mail from account...' to the
    SysTray module's menu.
  + Notification plugin: Focus the widget between
    iconify/deiconify events.
  + Tools: Added tools/cm-reparent.pl, which can be used to fix
    thread parenting for two or more messages.
  + Documentation: Updated man page and manual.
  + Updated translations.
  + Bug fixes:
    claws#2518, claws#2781, claws#3028, claws#3213,
    claws#3573, claws#3581, claws#3603, claws#3610,
    claws#3616, claws#3623, claws#3629, claws#3652,
    claws#3653, claws#3658</changelog>
  <changelog author="mrueckert@suse.de" date="1479297600">- Update to version 3.14.1:
  * 'hide_timezone', a new hidden preference that sets the timezone
    of date fields sent over the network to the unknown timezone
    value as specified in RFC 5322 3.3.  Default value is false
    (i.e., send available timezone information).
  * 'rewrite_first_from', a new hidden preference which  works
    around a limitation of some servers with 'overly-liberal
    parsers'. When this is turned on and the
    Content-Transfer-Encoding is set to 8bit or 7bit, in a message
    body starting with 'From ' the 'From ' will become '=46rom '
    (i,e, encoded form of 'F') and the Content- Transfer-Encoding
    will be changed to Quoted-Printable. When it is turned off no
    such modification will be made but it is very likely that an
    MTA will convert the 'From ' to '&gt;From '. See RFC 4155 for
    further details. Default value is '1', turned on.
  * Templates: it is now possible to attach a file, using
    '|attach_output{sub_expr}' or '|A{sub_expr}', 'sub_expr' is
    evaluated as a command-line to get the filename name from,
    using an absolute /path/to/filename.
  * IMAP mailboxes which show subscribed folders only are now
    indicated by a green folder icon.
  * The Icon Legend has had the missing folder icons added and
    also has an improved layout.
  * Drafted messages: Do not add Message-ID for draft, unless the
    message already has one. A Message-ID header is now only added
    when queuing a message, and any existing Message-ID and
    References headers in drafts, if there are any, are kept.
  * Disable hiding threads and messages in draft folders.
  * The /View/Go to/... actions now respect the 'Open message when
    selected' option.
  * In the UI 'POP' is used instead of 'POP3', 'IMAP' instead of
    'IMAP4', 'SSL/TLS' instead of 'SSL'.
  * GnuTLS: Enforce "strong enough" Diffie-Hellman prime even when
    using older versions of GnuTLS library.
    Since GnuTLS 3.1.7, this minimum size is dictated by the
    priority string, and currently (GnuTLS 3.3.0) the "safe-enough"
    value is 1008 bits. We set this minimum size explicitly for
    older GnuTLS versions.
    Users who are affected by this (their servers use DH prime
    smaller than 1008 bits) can override this by using a priority
    string starting with the keyword "LEGACY". However, this
    keyword only works with GnuTLS 3.3.0 or newer.
  * RSSyl plugin: Enable keeping old items by default.
  * vCalendar plugin: The ics file name is now used for the WebCal
    subscription folder name.
  * vCalendar plugin: Use hours/minutes for vcalendar alert time.
  * Notification plugin: Add support for unity/messaging menu.
  * PDF Viewer plugin: The icons are now themeable.
  * Updated manual in English and Spanish.
  * Updated translations: Brazilian Portuguese, Catalan, Czech,
    Danish, Dutch, Finnish, French, Hebrew, Indonesian, Italian,
    Norwegian Bokmål, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, and Turkish.
  * Bug fixes:
  - bug 2918, 'Notification Popup icon is hardcoded'
  - bug 3207, 'Claws segfaults when closing LDAP-enabled address
    book'
  - bug 3515, 'Ctrl-Shift-X opens multiple external editors'
  - bug 3638, 'GData Plugin fails after initial Google handshake'
  - bug 3665, 'Fix config script for macOS'
  - bug 3666, 'Typos in Turkish translation'
  - bug 3667, 'segfault in imap_session_authenticate'
  - bug 3675, 'RSSyl crash when opening Atom feed'
  - bug 3676, 'RSSyl crash when opening Atom feed with XML depth
    &gt;= 3'
  - bug 3678, 'Segfault when trying to add new account'
  - bug 3684, 'Socket error with POP3 using TLS client
    certificate'
  - bug 3697, 'Export to mbox' causes crash'
  - bug 3705, 'active account Mail Address corrupted when address
    in Message-ID is used'
  - bug 3711, 'Usage of (s)'
  - bug 3712, 'Name of the example domain in the translation'
  - fix non-resizeable Icon Legend dialogue
  - Fix a potential bug in vcalendar's libical
  - Fix potential crash in vcalendar's icalcomponent_vanew() on
    64-bit archs.
  - Fix regression: show simple text/calendar with plugin.
  - Fix crash in vcalendar passwords handling on prefs save.
  - Few miscellaneous fixes for RSSyl.
  - several memory leaks.
  - Don't check for encrypt() on FreeBSD.
  - Add OpenBSD CA cert path.
  - Do not process folder marks when just refreshing summaryview</changelog>
  <changelog author="olaf@aepfle.de" date="1487246400">- Use xdg-open (instead of gedit) as default mime_open_command
  use-xdg-open-as-default-mime_open_command.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Compface support requires the devel pkg, not just the main pkg</changelog>
  <changelog author="mrueckert@suse.de" date="1492776000">- update to 3.15.0
  * More granular options on when to open a selected message have
    been added. There are now several checkboxes on the
    Display/Summaries page of the Preferences which allow a greater
    flexibility.
  * Compose window: Show the total size of attachments on the
    Attachments tab.
  * Compose window: Bcc has been added to the headers drop-down
    list.
  * Folder list: Top-level folders can now be copied.  They are
    created as regular folders in the target mailbox.
  * Folder selection dialogue: Left/right keys collapse/expand
    rows.  Further keypress will move the cursor to parent or first
    child, respectively.
  * Menu items: 'Mark all unread [recursively]' has been added to
    the folder context menu, message list menu, and the main window
    menu and toolbar.
  * Toolbar actions: Mark, Unmark, Lock, Unlock, Mark [all] read,
    Mark [all] unread, Ignore Thread, Watch Thread, and Delete
    Duplicate Messages have been added to the main window toolbar's
    Actions list.
  * Account compose signature: The value of the signature file now
    takes a path relative to the user's home directory in addition
    to a full path.
  * Icon Themes: Support for SVG themes with icon scaling
    capabilities has been added. This requires libRSVG 2.40.5 or
    newer.
  * Hidden preferences: colours for specifying Tags, QuickSearch,
    and auto-filled header values have been added, both foreground
    and background. Respectively, tags_color, tags_bgcolor,
    qs_active_color, qs_active_bgcolor, qs_error_color,
    qs_error_bgcolor, default_header_color, and
    default_header_bgcolor.
  * Hidden preferences: warn_sending_many_recipients_num, if
    greater than zero, a warning dialogue is shown when the number
    of recipients exceeds the number given.
  * GData plugin: This plugin now requires libgdata version 0.17.2
    or newer.
  * TNEF parser plugin: This plugin now uses an external libytnef.
  * vCalendar plugin: This plugin now uses an external libical,
    version 2.0.0 or newer is required.
  * Mail Archiver plugin: - updated to support some of the
    compression formats up to libarchive 3.2.2
  * Several minor UI improvements.
  * Updated manual in English and Spanish.
  * Updated man page.
  * Updated translations: Brazilian Portuguese, Catalan, Danish,
    Dutch, French, German, Hungarian, Italian, Norwegian Bokmål,
    Russian, Spanish, Swedish, Traditional Chinese, and Turkish.
  * Bug fixes:
    o bug 3251, 'A translated In-Reply-To header is sent
    translated'
    o bug 3571, 'recipient list lost and truncated'
    o bug 3574, 'Template addressing'
    o bug 3582, 'Select folder dialogue does not tell what is
    selecting for'
    o bug 3673, 'Be more friendly instead of "configure: error:
    'encrypt'-function not found."'
    o bug 3734, 'undefined symbol error with flex-2.6.2'
    o bug 3740, 'Templates information dialog can't be closed
    with WM button'
    0 bug 3741, 'Deleting an account doesn't delete imapcache'
    o bug 3742, 'Attaching file with plus sign in filename via
    drag and drop doesn't work'
    o bug 3762, 'redirect fails'
    o bug 3764, 'Use external libical instead of the internal
    copy'
    o bug 3775, 'Error in string at src/mainwindow.c:4726?'
    o bug 3777, 'Weird news dates for some RSS feeds'
    o Debian bug 846170, 'incorrect IMAP UID handling'
    o Allow sending empty messages in Session (just \r\n).
    o fix some main window menu sensitivity issues
    o make up/down key navigation obey 'always_show_msg'
    o fix text selection when double-clicking quoted text and
    'collapse quoted text on double click' is turned off
    o fix 'Go to' moving off current, unopened msg, and dialogue
    to go to next folder
    o obey 'always_show_msg' on "no more [...] msgs. go to next
    folder?"
    o make Go to/[Next|Prev] sort order aware
    o don't ignore auto-account selection when forwarding on IMAP
    and NNTP accounts
    o on first run, use --alternate-config-dir (if set) on prefs
    migration. prevents useless creation of ~/.claws-mail
    directory
    o fix colouring of auto-filled headers
    o don't remove the To when changing account
    o Honour autosave_encrypted preference when using external
    editor.
    o Fix 'search folder' not working in some cases
    o Fix build on OSX.
    o fix memory leaks
    o when renaming folder, only update summaryview folder name
    if the current folder is being renamed
    o sensitise trayicon's 'get mail' and 'exit'
    o Handle timezones correctly in vCalendar.
    o Do not hardcode resolv.conf location
    o fix building with --disable-deprecated
- added BR to enable more features:
  - libical-devel (vcalendar plugin)
  - libgdata-devel (google data plugin)
  - librsvg-devel (scalabable icons support)
  - libcanberra-gtk{,3}-devel enhanced notifications support
- disable the tnef_parse as we are lacking the required library
- drop use-xdg-open-as-default-mime_open_command.patch:
  included upstream
- added claws-mail-3.15.0_libcanberra-gtk3.patch:
  allow finding the gtk3 version of the library if we build with
  gtk3</changelog>
  <changelog author="mrueckert@suse.de" date="1492776001">- add conditional handling for vcalendar plugins to only build on
  distros which still support it
- also prepared conditional build support for tnef</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of descriptions.
  Trim instructions and redundant mentions of license.</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- CVE-2020-15917: Fixed an improper handling of suffix data after
  STARTTLS is mishandled (boo#1174457).
  Added CVE-2020-15917.patch</changelog>
</package>
<package pkgid="0f123cadc005b68ef5e222673ccf1fa15108d26da19f5dbfabad91d8c2568008" name="claws-mail" arch="x86_64">
  <version epoch="0" ver="3.17.3" rel="lp151.2.3.1"/>
  <changelog author="kieltux@gmail.com" date="1470657600">- Update to version 3.14.0:
  + Passwords can now be secured with a Master Passphrase.
  + Passwords: The password storage method has changed. All
    passwords are now stored in a separate file,
    (~/.claws-mail/passwordstorerc),
    and use a stronger encryption than previously. Existing
    passwords are moved to the new file automatically, in the old
    format. The new format will be used whenever old passwords are
    changed or when a Master Passphrase is used. All new passwords
    are saved using the new format, irrespective of whether a
    Master Passphrase is used or not. Further information can be
    found here:
    http://www.claws-mail.org/doc/password_encryption.txt
  + Compose window: Removed the outer scrollbar from header area.
  + Message view: The HTML to plain text converter now indicates
    list items with a hyphen (-), adds a line break after ,
    and indents text within blockquotes.
  + Main window: Changed default /View/Show or hide/Menubar
    shortcut to Ctrl+F12.
  + SSL certificates list: Added automatic scrollbar.
  + Address book: Double-clicking datasources now opens the edit
    dialogue.
  + Forwarding: The external editor is now automatically used when
    forwarding as attachment, if the preference is set.
  + Preferences: Automatic mail checking can now be configured in
    hours, minutes and seconds.
  + Preferences: The 'next_on_delete' hidden preference now
    applies to trashing or moving, in addition to deleting, a
    message.
  + Command line: Added -geometry to set geometry for main window.
  + IMAP: Added SASL 'PLAIN' and 'LOGIN' authentication methods
    for accounts. Renamed the old plaintext 'LOGIN' to
    'plaintext'.
  + IMAP: The acccount preference, 'Move deleted mails to trash
    and expunge immediately' has been removed.
  + Notification plugin: Added 'Get mail from account...' to the
    SysTray module's menu.
  + Notification plugin: Focus the widget between
    iconify/deiconify events.
  + Tools: Added tools/cm-reparent.pl, which can be used to fix
    thread parenting for two or more messages.
  + Documentation: Updated man page and manual.
  + Updated translations.
  + Bug fixes:
    claws#2518, claws#2781, claws#3028, claws#3213,
    claws#3573, claws#3581, claws#3603, claws#3610,
    claws#3616, claws#3623, claws#3629, claws#3652,
    claws#3653, claws#3658</changelog>
  <changelog author="mrueckert@suse.de" date="1479297600">- Update to version 3.14.1:
  * 'hide_timezone', a new hidden preference that sets the timezone
    of date fields sent over the network to the unknown timezone
    value as specified in RFC 5322 3.3.  Default value is false
    (i.e., send available timezone information).
  * 'rewrite_first_from', a new hidden preference which  works
    around a limitation of some servers with 'overly-liberal
    parsers'. When this is turned on and the
    Content-Transfer-Encoding is set to 8bit or 7bit, in a message
    body starting with 'From ' the 'From ' will become '=46rom '
    (i,e, encoded form of 'F') and the Content- Transfer-Encoding
    will be changed to Quoted-Printable. When it is turned off no
    such modification will be made but it is very likely that an
    MTA will convert the 'From ' to '&gt;From '. See RFC 4155 for
    further details. Default value is '1', turned on.
  * Templates: it is now possible to attach a file, using
    '|attach_output{sub_expr}' or '|A{sub_expr}', 'sub_expr' is
    evaluated as a command-line to get the filename name from,
    using an absolute /path/to/filename.
  * IMAP mailboxes which show subscribed folders only are now
    indicated by a green folder icon.
  * The Icon Legend has had the missing folder icons added and
    also has an improved layout.
  * Drafted messages: Do not add Message-ID for draft, unless the
    message already has one. A Message-ID header is now only added
    when queuing a message, and any existing Message-ID and
    References headers in drafts, if there are any, are kept.
  * Disable hiding threads and messages in draft folders.
  * The /View/Go to/... actions now respect the 'Open message when
    selected' option.
  * In the UI 'POP' is used instead of 'POP3', 'IMAP' instead of
    'IMAP4', 'SSL/TLS' instead of 'SSL'.
  * GnuTLS: Enforce "strong enough" Diffie-Hellman prime even when
    using older versions of GnuTLS library.
    Since GnuTLS 3.1.7, this minimum size is dictated by the
    priority string, and currently (GnuTLS 3.3.0) the "safe-enough"
    value is 1008 bits. We set this minimum size explicitly for
    older GnuTLS versions.
    Users who are affected by this (their servers use DH prime
    smaller than 1008 bits) can override this by using a priority
    string starting with the keyword "LEGACY". However, this
    keyword only works with GnuTLS 3.3.0 or newer.
  * RSSyl plugin: Enable keeping old items by default.
  * vCalendar plugin: The ics file name is now used for the WebCal
    subscription folder name.
  * vCalendar plugin: Use hours/minutes for vcalendar alert time.
  * Notification plugin: Add support for unity/messaging menu.
  * PDF Viewer plugin: The icons are now themeable.
  * Updated manual in English and Spanish.
  * Updated translations: Brazilian Portuguese, Catalan, Czech,
    Danish, Dutch, Finnish, French, Hebrew, Indonesian, Italian,
    Norwegian Bokmål, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, and Turkish.
  * Bug fixes:
  - bug 2918, 'Notification Popup icon is hardcoded'
  - bug 3207, 'Claws segfaults when closing LDAP-enabled address
    book'
  - bug 3515, 'Ctrl-Shift-X opens multiple external editors'
  - bug 3638, 'GData Plugin fails after initial Google handshake'
  - bug 3665, 'Fix config script for macOS'
  - bug 3666, 'Typos in Turkish translation'
  - bug 3667, 'segfault in imap_session_authenticate'
  - bug 3675, 'RSSyl crash when opening Atom feed'
  - bug 3676, 'RSSyl crash when opening Atom feed with XML depth
    &gt;= 3'
  - bug 3678, 'Segfault when trying to add new account'
  - bug 3684, 'Socket error with POP3 using TLS client
    certificate'
  - bug 3697, 'Export to mbox' causes crash'
  - bug 3705, 'active account Mail Address corrupted when address
    in Message-ID is used'
  - bug 3711, 'Usage of (s)'
  - bug 3712, 'Name of the example domain in the translation'
  - fix non-resizeable Icon Legend dialogue
  - Fix a potential bug in vcalendar's libical
  - Fix potential crash in vcalendar's icalcomponent_vanew() on
    64-bit archs.
  - Fix regression: show simple text/calendar with plugin.
  - Fix crash in vcalendar passwords handling on prefs save.
  - Few miscellaneous fixes for RSSyl.
  - several memory leaks.
  - Don't check for encrypt() on FreeBSD.
  - Add OpenBSD CA cert path.
  - Do not process folder marks when just refreshing summaryview</changelog>
  <changelog author="olaf@aepfle.de" date="1487246400">- Use xdg-open (instead of gedit) as default mime_open_command
  use-xdg-open-as-default-mime_open_command.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Compface support requires the devel pkg, not just the main pkg</changelog>
  <changelog author="mrueckert@suse.de" date="1492776000">- update to 3.15.0
  * More granular options on when to open a selected message have
    been added. There are now several checkboxes on the
    Display/Summaries page of the Preferences which allow a greater
    flexibility.
  * Compose window: Show the total size of attachments on the
    Attachments tab.
  * Compose window: Bcc has been added to the headers drop-down
    list.
  * Folder list: Top-level folders can now be copied.  They are
    created as regular folders in the target mailbox.
  * Folder selection dialogue: Left/right keys collapse/expand
    rows.  Further keypress will move the cursor to parent or first
    child, respectively.
  * Menu items: 'Mark all unread [recursively]' has been added to
    the folder context menu, message list menu, and the main window
    menu and toolbar.
  * Toolbar actions: Mark, Unmark, Lock, Unlock, Mark [all] read,
    Mark [all] unread, Ignore Thread, Watch Thread, and Delete
    Duplicate Messages have been added to the main window toolbar's
    Actions list.
  * Account compose signature: The value of the signature file now
    takes a path relative to the user's home directory in addition
    to a full path.
  * Icon Themes: Support for SVG themes with icon scaling
    capabilities has been added. This requires libRSVG 2.40.5 or
    newer.
  * Hidden preferences: colours for specifying Tags, QuickSearch,
    and auto-filled header values have been added, both foreground
    and background. Respectively, tags_color, tags_bgcolor,
    qs_active_color, qs_active_bgcolor, qs_error_color,
    qs_error_bgcolor, default_header_color, and
    default_header_bgcolor.
  * Hidden preferences: warn_sending_many_recipients_num, if
    greater than zero, a warning dialogue is shown when the number
    of recipients exceeds the number given.
  * GData plugin: This plugin now requires libgdata version 0.17.2
    or newer.
  * TNEF parser plugin: This plugin now uses an external libytnef.
  * vCalendar plugin: This plugin now uses an external libical,
    version 2.0.0 or newer is required.
  * Mail Archiver plugin: - updated to support some of the
    compression formats up to libarchive 3.2.2
  * Several minor UI improvements.
  * Updated manual in English and Spanish.
  * Updated man page.
  * Updated translations: Brazilian Portuguese, Catalan, Danish,
    Dutch, French, German, Hungarian, Italian, Norwegian Bokmål,
    Russian, Spanish, Swedish, Traditional Chinese, and Turkish.
  * Bug fixes:
    o bug 3251, 'A translated In-Reply-To header is sent
    translated'
    o bug 3571, 'recipient list lost and truncated'
    o bug 3574, 'Template addressing'
    o bug 3582, 'Select folder dialogue does not tell what is
    selecting for'
    o bug 3673, 'Be more friendly instead of "configure: error:
    'encrypt'-function not found."'
    o bug 3734, 'undefined symbol error with flex-2.6.2'
    o bug 3740, 'Templates information dialog can't be closed
    with WM button'
    0 bug 3741, 'Deleting an account doesn't delete imapcache'
    o bug 3742, 'Attaching file with plus sign in filename via
    drag and drop doesn't work'
    o bug 3762, 'redirect fails'
    o bug 3764, 'Use external libical instead of the internal
    copy'
    o bug 3775, 'Error in string at src/mainwindow.c:4726?'
    o bug 3777, 'Weird news dates for some RSS feeds'
    o Debian bug 846170, 'incorrect IMAP UID handling'
    o Allow sending empty messages in Session (just \r\n).
    o fix some main window menu sensitivity issues
    o make up/down key navigation obey 'always_show_msg'
    o fix text selection when double-clicking quoted text and
    'collapse quoted text on double click' is turned off
    o fix 'Go to' moving off current, unopened msg, and dialogue
    to go to next folder
    o obey 'always_show_msg' on "no more [...] msgs. go to next
    folder?"
    o make Go to/[Next|Prev] sort order aware
    o don't ignore auto-account selection when forwarding on IMAP
    and NNTP accounts
    o on first run, use --alternate-config-dir (if set) on prefs
    migration. prevents useless creation of ~/.claws-mail
    directory
    o fix colouring of auto-filled headers
    o don't remove the To when changing account
    o Honour autosave_encrypted preference when using external
    editor.
    o Fix 'search folder' not working in some cases
    o Fix build on OSX.
    o fix memory leaks
    o when renaming folder, only update summaryview folder name
    if the current folder is being renamed
    o sensitise trayicon's 'get mail' and 'exit'
    o Handle timezones correctly in vCalendar.
    o Do not hardcode resolv.conf location
    o fix building with --disable-deprecated
- added BR to enable more features:
  - libical-devel (vcalendar plugin)
  - libgdata-devel (google data plugin)
  - librsvg-devel (scalabable icons support)
  - libcanberra-gtk{,3}-devel enhanced notifications support
- disable the tnef_parse as we are lacking the required library
- drop use-xdg-open-as-default-mime_open_command.patch:
  included upstream
- added claws-mail-3.15.0_libcanberra-gtk3.patch:
  allow finding the gtk3 version of the library if we build with
  gtk3</changelog>
  <changelog author="mrueckert@suse.de" date="1492776001">- add conditional handling for vcalendar plugins to only build on
  distros which still support it
- also prepared conditional build support for tnef</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of descriptions.
  Trim instructions and redundant mentions of license.</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- CVE-2020-15917: Fixed an improper handling of suffix data after
  STARTTLS is mishandled (boo#1174457).
  Added CVE-2020-15917.patch</changelog>
</package>
<package pkgid="ed9d7037ab1a76d483ba501032decd45e607a13a91da1fed19173ed77fa2b110" name="claws-mail" arch="src">
  <version epoch="0" ver="3.17.8" rel="lp151.2.6.1"/>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- CVE-2020-15917: Fixed an improper handling of suffix data after
  STARTTLS is mishandled (boo#1174457).
  Added CVE-2020-15917.patch</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals
- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.
- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.
- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
    rules from parent folder' when creating new folders with the
    move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
    addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
    responsive.
  * A warning dialogue is shown if the selected privacy system is
    'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
    enables the Python plugin (which uses python2) to be built on
    newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
    just before c (check signature)
  * fix non-translation of some Templates strings
- drop CVE-2020-15917.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
</package>
<package pkgid="204092ea5d23a2c538166c7bd81797f7da843e36943b711837ca414a3d8f7844" name="claws-mail" arch="x86_64">
  <version epoch="0" ver="3.17.8" rel="lp151.2.6.1"/>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- CVE-2020-15917: Fixed an improper handling of suffix data after
  STARTTLS is mishandled (boo#1174457).
  Added CVE-2020-15917.patch</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals
- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.
- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.
- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
    rules from parent folder' when creating new folders with the
    move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
    addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
    responsive.
  * A warning dialogue is shown if the selected privacy system is
    'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
    enables the Python plugin (which uses python2) to be built on
    newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
    just before c (check signature)
  * fix non-translation of some Templates strings
- drop CVE-2020-15917.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
</package>
<package pkgid="7b9b66d3104afdba23609e4c096ffc795442792282a298b37a258f5aee3e620c" name="claws-mail-devel" arch="x86_64">
  <version epoch="0" ver="3.17.3" rel="lp151.2.3.1"/>
  <changelog author="kieltux@gmail.com" date="1470657600">- Update to version 3.14.0:
  + Passwords can now be secured with a Master Passphrase.
  + Passwords: The password storage method has changed. All
    passwords are now stored in a separate file,
    (~/.claws-mail/passwordstorerc),
    and use a stronger encryption than previously. Existing
    passwords are moved to the new file automatically, in the old
    format. The new format will be used whenever old passwords are
    changed or when a Master Passphrase is used. All new passwords
    are saved using the new format, irrespective of whether a
    Master Passphrase is used or not. Further information can be
    found here:
    http://www.claws-mail.org/doc/password_encryption.txt
  + Compose window: Removed the outer scrollbar from header area.
  + Message view: The HTML to plain text converter now indicates
    list items with a hyphen (-), adds a line break after ,
    and indents text within blockquotes.
  + Main window: Changed default /View/Show or hide/Menubar
    shortcut to Ctrl+F12.
  + SSL certificates list: Added automatic scrollbar.
  + Address book: Double-clicking datasources now opens the edit
    dialogue.
  + Forwarding: The external editor is now automatically used when
    forwarding as attachment, if the preference is set.
  + Preferences: Automatic mail checking can now be configured in
    hours, minutes and seconds.
  + Preferences: The 'next_on_delete' hidden preference now
    applies to trashing or moving, in addition to deleting, a
    message.
  + Command line: Added -geometry to set geometry for main window.
  + IMAP: Added SASL 'PLAIN' and 'LOGIN' authentication methods
    for accounts. Renamed the old plaintext 'LOGIN' to
    'plaintext'.
  + IMAP: The acccount preference, 'Move deleted mails to trash
    and expunge immediately' has been removed.
  + Notification plugin: Added 'Get mail from account...' to the
    SysTray module's menu.
  + Notification plugin: Focus the widget between
    iconify/deiconify events.
  + Tools: Added tools/cm-reparent.pl, which can be used to fix
    thread parenting for two or more messages.
  + Documentation: Updated man page and manual.
  + Updated translations.
  + Bug fixes:
    claws#2518, claws#2781, claws#3028, claws#3213,
    claws#3573, claws#3581, claws#3603, claws#3610,
    claws#3616, claws#3623, claws#3629, claws#3652,
    claws#3653, claws#3658</changelog>
  <changelog author="mrueckert@suse.de" date="1479297600">- Update to version 3.14.1:
  * 'hide_timezone', a new hidden preference that sets the timezone
    of date fields sent over the network to the unknown timezone
    value as specified in RFC 5322 3.3.  Default value is false
    (i.e., send available timezone information).
  * 'rewrite_first_from', a new hidden preference which  works
    around a limitation of some servers with 'overly-liberal
    parsers'. When this is turned on and the
    Content-Transfer-Encoding is set to 8bit or 7bit, in a message
    body starting with 'From ' the 'From ' will become '=46rom '
    (i,e, encoded form of 'F') and the Content- Transfer-Encoding
    will be changed to Quoted-Printable. When it is turned off no
    such modification will be made but it is very likely that an
    MTA will convert the 'From ' to '&gt;From '. See RFC 4155 for
    further details. Default value is '1', turned on.
  * Templates: it is now possible to attach a file, using
    '|attach_output{sub_expr}' or '|A{sub_expr}', 'sub_expr' is
    evaluated as a command-line to get the filename name from,
    using an absolute /path/to/filename.
  * IMAP mailboxes which show subscribed folders only are now
    indicated by a green folder icon.
  * The Icon Legend has had the missing folder icons added and
    also has an improved layout.
  * Drafted messages: Do not add Message-ID for draft, unless the
    message already has one. A Message-ID header is now only added
    when queuing a message, and any existing Message-ID and
    References headers in drafts, if there are any, are kept.
  * Disable hiding threads and messages in draft folders.
  * The /View/Go to/... actions now respect the 'Open message when
    selected' option.
  * In the UI 'POP' is used instead of 'POP3', 'IMAP' instead of
    'IMAP4', 'SSL/TLS' instead of 'SSL'.
  * GnuTLS: Enforce "strong enough" Diffie-Hellman prime even when
    using older versions of GnuTLS library.
    Since GnuTLS 3.1.7, this minimum size is dictated by the
    priority string, and currently (GnuTLS 3.3.0) the "safe-enough"
    value is 1008 bits. We set this minimum size explicitly for
    older GnuTLS versions.
    Users who are affected by this (their servers use DH prime
    smaller than 1008 bits) can override this by using a priority
    string starting with the keyword "LEGACY". However, this
    keyword only works with GnuTLS 3.3.0 or newer.
  * RSSyl plugin: Enable keeping old items by default.
  * vCalendar plugin: The ics file name is now used for the WebCal
    subscription folder name.
  * vCalendar plugin: Use hours/minutes for vcalendar alert time.
  * Notification plugin: Add support for unity/messaging menu.
  * PDF Viewer plugin: The icons are now themeable.
  * Updated manual in English and Spanish.
  * Updated translations: Brazilian Portuguese, Catalan, Czech,
    Danish, Dutch, Finnish, French, Hebrew, Indonesian, Italian,
    Norwegian Bokmål, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, and Turkish.
  * Bug fixes:
  - bug 2918, 'Notification Popup icon is hardcoded'
  - bug 3207, 'Claws segfaults when closing LDAP-enabled address
    book'
  - bug 3515, 'Ctrl-Shift-X opens multiple external editors'
  - bug 3638, 'GData Plugin fails after initial Google handshake'
  - bug 3665, 'Fix config script for macOS'
  - bug 3666, 'Typos in Turkish translation'
  - bug 3667, 'segfault in imap_session_authenticate'
  - bug 3675, 'RSSyl crash when opening Atom feed'
  - bug 3676, 'RSSyl crash when opening Atom feed with XML depth
    &gt;= 3'
  - bug 3678, 'Segfault when trying to add new account'
  - bug 3684, 'Socket error with POP3 using TLS client
    certificate'
  - bug 3697, 'Export to mbox' causes crash'
  - bug 3705, 'active account Mail Address corrupted when address
    in Message-ID is used'
  - bug 3711, 'Usage of (s)'
  - bug 3712, 'Name of the example domain in the translation'
  - fix non-resizeable Icon Legend dialogue
  - Fix a potential bug in vcalendar's libical
  - Fix potential crash in vcalendar's icalcomponent_vanew() on
    64-bit archs.
  - Fix regression: show simple text/calendar with plugin.
  - Fix crash in vcalendar passwords handling on prefs save.
  - Few miscellaneous fixes for RSSyl.
  - several memory leaks.
  - Don't check for encrypt() on FreeBSD.
  - Add OpenBSD CA cert path.
  - Do not process folder marks when just refreshing summaryview</changelog>
  <changelog author="olaf@aepfle.de" date="1487246400">- Use xdg-open (instead of gedit) as default mime_open_command
  use-xdg-open-as-default-mime_open_command.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Compface support requires the devel pkg, not just the main pkg</changelog>
  <changelog author="mrueckert@suse.de" date="1492776000">- update to 3.15.0
  * More granular options on when to open a selected message have
    been added. There are now several checkboxes on the
    Display/Summaries page of the Preferences which allow a greater
    flexibility.
  * Compose window: Show the total size of attachments on the
    Attachments tab.
  * Compose window: Bcc has been added to the headers drop-down
    list.
  * Folder list: Top-level folders can now be copied.  They are
    created as regular folders in the target mailbox.
  * Folder selection dialogue: Left/right keys collapse/expand
    rows.  Further keypress will move the cursor to parent or first
    child, respectively.
  * Menu items: 'Mark all unread [recursively]' has been added to
    the folder context menu, message list menu, and the main window
    menu and toolbar.
  * Toolbar actions: Mark, Unmark, Lock, Unlock, Mark [all] read,
    Mark [all] unread, Ignore Thread, Watch Thread, and Delete
    Duplicate Messages have been added to the main window toolbar's
    Actions list.
  * Account compose signature: The value of the signature file now
    takes a path relative to the user's home directory in addition
    to a full path.
  * Icon Themes: Support for SVG themes with icon scaling
    capabilities has been added. This requires libRSVG 2.40.5 or
    newer.
  * Hidden preferences: colours for specifying Tags, QuickSearch,
    and auto-filled header values have been added, both foreground
    and background. Respectively, tags_color, tags_bgcolor,
    qs_active_color, qs_active_bgcolor, qs_error_color,
    qs_error_bgcolor, default_header_color, and
    default_header_bgcolor.
  * Hidden preferences: warn_sending_many_recipients_num, if
    greater than zero, a warning dialogue is shown when the number
    of recipients exceeds the number given.
  * GData plugin: This plugin now requires libgdata version 0.17.2
    or newer.
  * TNEF parser plugin: This plugin now uses an external libytnef.
  * vCalendar plugin: This plugin now uses an external libical,
    version 2.0.0 or newer is required.
  * Mail Archiver plugin: - updated to support some of the
    compression formats up to libarchive 3.2.2
  * Several minor UI improvements.
  * Updated manual in English and Spanish.
  * Updated man page.
  * Updated translations: Brazilian Portuguese, Catalan, Danish,
    Dutch, French, German, Hungarian, Italian, Norwegian Bokmål,
    Russian, Spanish, Swedish, Traditional Chinese, and Turkish.
  * Bug fixes:
    o bug 3251, 'A translated In-Reply-To header is sent
    translated'
    o bug 3571, 'recipient list lost and truncated'
    o bug 3574, 'Template addressing'
    o bug 3582, 'Select folder dialogue does not tell what is
    selecting for'
    o bug 3673, 'Be more friendly instead of "configure: error:
    'encrypt'-function not found."'
    o bug 3734, 'undefined symbol error with flex-2.6.2'
    o bug 3740, 'Templates information dialog can't be closed
    with WM button'
    0 bug 3741, 'Deleting an account doesn't delete imapcache'
    o bug 3742, 'Attaching file with plus sign in filename via
    drag and drop doesn't work'
    o bug 3762, 'redirect fails'
    o bug 3764, 'Use external libical instead of the internal
    copy'
    o bug 3775, 'Error in string at src/mainwindow.c:4726?'
    o bug 3777, 'Weird news dates for some RSS feeds'
    o Debian bug 846170, 'incorrect IMAP UID handling'
    o Allow sending empty messages in Session (just \r\n).
    o fix some main window menu sensitivity issues
    o make up/down key navigation obey 'always_show_msg'
    o fix text selection when double-clicking quoted text and
    'collapse quoted text on double click' is turned off
    o fix 'Go to' moving off current, unopened msg, and dialogue
    to go to next folder
    o obey 'always_show_msg' on "no more [...] msgs. go to next
    folder?"
    o make Go to/[Next|Prev] sort order aware
    o don't ignore auto-account selection when forwarding on IMAP
    and NNTP accounts
    o on first run, use --alternate-config-dir (if set) on prefs
    migration. prevents useless creation of ~/.claws-mail
    directory
    o fix colouring of auto-filled headers
    o don't remove the To when changing account
    o Honour autosave_encrypted preference when using external
    editor.
    o Fix 'search folder' not working in some cases
    o Fix build on OSX.
    o fix memory leaks
    o when renaming folder, only update summaryview folder name
    if the current folder is being renamed
    o sensitise trayicon's 'get mail' and 'exit'
    o Handle timezones correctly in vCalendar.
    o Do not hardcode resolv.conf location
    o fix building with --disable-deprecated
- added BR to enable more features:
  - libical-devel (vcalendar plugin)
  - libgdata-devel (google data plugin)
  - librsvg-devel (scalabable icons support)
  - libcanberra-gtk{,3}-devel enhanced notifications support
- disable the tnef_parse as we are lacking the required library
- drop use-xdg-open-as-default-mime_open_command.patch:
  included upstream
- added claws-mail-3.15.0_libcanberra-gtk3.patch:
  allow finding the gtk3 version of the library if we build with
  gtk3</changelog>
  <changelog author="mrueckert@suse.de" date="1492776001">- add conditional handling for vcalendar plugins to only build on
  distros which still support it
- also prepared conditional build support for tnef</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of descriptions.
  Trim instructions and redundant mentions of license.</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- CVE-2020-15917: Fixed an improper handling of suffix data after
  STARTTLS is mishandled (boo#1174457).
  Added CVE-2020-15917.patch</changelog>
</package>
<package pkgid="1fb597afc84a84c1becba8ef567b1491f414b1a7630483d9235c36516669d763" name="claws-mail-devel" arch="x86_64">
  <version epoch="0" ver="3.17.8" rel="lp151.2.6.1"/>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- CVE-2020-15917: Fixed an improper handling of suffix data after
  STARTTLS is mishandled (boo#1174457).
  Added CVE-2020-15917.patch</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals
- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.
- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.
- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
    rules from parent folder' when creating new folders with the
    move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
    addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
    responsive.
  * A warning dialogue is shown if the selected privacy system is
    'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
    enables the Python plugin (which uses python2) to be built on
    newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
    just before c (check signature)
  * fix non-translation of some Templates strings
- drop CVE-2020-15917.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
</package>
<package pkgid="9da8593030e959eb8496b2b74c0fb4c0cf1f6205be67a31744f915b687e4cf63" name="claws-mail-lang" arch="noarch">
  <version epoch="0" ver="3.17.3" rel="lp151.2.3.1"/>
  <changelog author="kieltux@gmail.com" date="1470657600">- Update to version 3.14.0:
  + Passwords can now be secured with a Master Passphrase.
  + Passwords: The password storage method has changed. All
    passwords are now stored in a separate file,
    (~/.claws-mail/passwordstorerc),
    and use a stronger encryption than previously. Existing
    passwords are moved to the new file automatically, in the old
    format. The new format will be used whenever old passwords are
    changed or when a Master Passphrase is used. All new passwords
    are saved using the new format, irrespective of whether a
    Master Passphrase is used or not. Further information can be
    found here:
    http://www.claws-mail.org/doc/password_encryption.txt
  + Compose window: Removed the outer scrollbar from header area.
  + Message view: The HTML to plain text converter now indicates
    list items with a hyphen (-), adds a line break after ,
    and indents text within blockquotes.
  + Main window: Changed default /View/Show or hide/Menubar
    shortcut to Ctrl+F12.
  + SSL certificates list: Added automatic scrollbar.
  + Address book: Double-clicking datasources now opens the edit
    dialogue.
  + Forwarding: The external editor is now automatically used when
    forwarding as attachment, if the preference is set.
  + Preferences: Automatic mail checking can now be configured in
    hours, minutes and seconds.
  + Preferences: The 'next_on_delete' hidden preference now
    applies to trashing or moving, in addition to deleting, a
    message.
  + Command line: Added -geometry to set geometry for main window.
  + IMAP: Added SASL 'PLAIN' and 'LOGIN' authentication methods
    for accounts. Renamed the old plaintext 'LOGIN' to
    'plaintext'.
  + IMAP: The acccount preference, 'Move deleted mails to trash
    and expunge immediately' has been removed.
  + Notification plugin: Added 'Get mail from account...' to the
    SysTray module's menu.
  + Notification plugin: Focus the widget between
    iconify/deiconify events.
  + Tools: Added tools/cm-reparent.pl, which can be used to fix
    thread parenting for two or more messages.
  + Documentation: Updated man page and manual.
  + Updated translations.
  + Bug fixes:
    claws#2518, claws#2781, claws#3028, claws#3213,
    claws#3573, claws#3581, claws#3603, claws#3610,
    claws#3616, claws#3623, claws#3629, claws#3652,
    claws#3653, claws#3658</changelog>
  <changelog author="mrueckert@suse.de" date="1479297600">- Update to version 3.14.1:
  * 'hide_timezone', a new hidden preference that sets the timezone
    of date fields sent over the network to the unknown timezone
    value as specified in RFC 5322 3.3.  Default value is false
    (i.e., send available timezone information).
  * 'rewrite_first_from', a new hidden preference which  works
    around a limitation of some servers with 'overly-liberal
    parsers'. When this is turned on and the
    Content-Transfer-Encoding is set to 8bit or 7bit, in a message
    body starting with 'From ' the 'From ' will become '=46rom '
    (i,e, encoded form of 'F') and the Content- Transfer-Encoding
    will be changed to Quoted-Printable. When it is turned off no
    such modification will be made but it is very likely that an
    MTA will convert the 'From ' to '&gt;From '. See RFC 4155 for
    further details. Default value is '1', turned on.
  * Templates: it is now possible to attach a file, using
    '|attach_output{sub_expr}' or '|A{sub_expr}', 'sub_expr' is
    evaluated as a command-line to get the filename name from,
    using an absolute /path/to/filename.
  * IMAP mailboxes which show subscribed folders only are now
    indicated by a green folder icon.
  * The Icon Legend has had the missing folder icons added and
    also has an improved layout.
  * Drafted messages: Do not add Message-ID for draft, unless the
    message already has one. A Message-ID header is now only added
    when queuing a message, and any existing Message-ID and
    References headers in drafts, if there are any, are kept.
  * Disable hiding threads and messages in draft folders.
  * The /View/Go to/... actions now respect the 'Open message when
    selected' option.
  * In the UI 'POP' is used instead of 'POP3', 'IMAP' instead of
    'IMAP4', 'SSL/TLS' instead of 'SSL'.
  * GnuTLS: Enforce "strong enough" Diffie-Hellman prime even when
    using older versions of GnuTLS library.
    Since GnuTLS 3.1.7, this minimum size is dictated by the
    priority string, and currently (GnuTLS 3.3.0) the "safe-enough"
    value is 1008 bits. We set this minimum size explicitly for
    older GnuTLS versions.
    Users who are affected by this (their servers use DH prime
    smaller than 1008 bits) can override this by using a priority
    string starting with the keyword "LEGACY". However, this
    keyword only works with GnuTLS 3.3.0 or newer.
  * RSSyl plugin: Enable keeping old items by default.
  * vCalendar plugin: The ics file name is now used for the WebCal
    subscription folder name.
  * vCalendar plugin: Use hours/minutes for vcalendar alert time.
  * Notification plugin: Add support for unity/messaging menu.
  * PDF Viewer plugin: The icons are now themeable.
  * Updated manual in English and Spanish.
  * Updated translations: Brazilian Portuguese, Catalan, Czech,
    Danish, Dutch, Finnish, French, Hebrew, Indonesian, Italian,
    Norwegian Bokmål, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, and Turkish.
  * Bug fixes:
  - bug 2918, 'Notification Popup icon is hardcoded'
  - bug 3207, 'Claws segfaults when closing LDAP-enabled address
    book'
  - bug 3515, 'Ctrl-Shift-X opens multiple external editors'
  - bug 3638, 'GData Plugin fails after initial Google handshake'
  - bug 3665, 'Fix config script for macOS'
  - bug 3666, 'Typos in Turkish translation'
  - bug 3667, 'segfault in imap_session_authenticate'
  - bug 3675, 'RSSyl crash when opening Atom feed'
  - bug 3676, 'RSSyl crash when opening Atom feed with XML depth
    &gt;= 3'
  - bug 3678, 'Segfault when trying to add new account'
  - bug 3684, 'Socket error with POP3 using TLS client
    certificate'
  - bug 3697, 'Export to mbox' causes crash'
  - bug 3705, 'active account Mail Address corrupted when address
    in Message-ID is used'
  - bug 3711, 'Usage of (s)'
  - bug 3712, 'Name of the example domain in the translation'
  - fix non-resizeable Icon Legend dialogue
  - Fix a potential bug in vcalendar's libical
  - Fix potential crash in vcalendar's icalcomponent_vanew() on
    64-bit archs.
  - Fix regression: show simple text/calendar with plugin.
  - Fix crash in vcalendar passwords handling on prefs save.
  - Few miscellaneous fixes for RSSyl.
  - several memory leaks.
  - Don't check for encrypt() on FreeBSD.
  - Add OpenBSD CA cert path.
  - Do not process folder marks when just refreshing summaryview</changelog>
  <changelog author="olaf@aepfle.de" date="1487246400">- Use xdg-open (instead of gedit) as default mime_open_command
  use-xdg-open-as-default-mime_open_command.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Compface support requires the devel pkg, not just the main pkg</changelog>
  <changelog author="mrueckert@suse.de" date="1492776000">- update to 3.15.0
  * More granular options on when to open a selected message have
    been added. There are now several checkboxes on the
    Display/Summaries page of the Preferences which allow a greater
    flexibility.
  * Compose window: Show the total size of attachments on the
    Attachments tab.
  * Compose window: Bcc has been added to the headers drop-down
    list.
  * Folder list: Top-level folders can now be copied.  They are
    created as regular folders in the target mailbox.
  * Folder selection dialogue: Left/right keys collapse/expand
    rows.  Further keypress will move the cursor to parent or first
    child, respectively.
  * Menu items: 'Mark all unread [recursively]' has been added to
    the folder context menu, message list menu, and the main window
    menu and toolbar.
  * Toolbar actions: Mark, Unmark, Lock, Unlock, Mark [all] read,
    Mark [all] unread, Ignore Thread, Watch Thread, and Delete
    Duplicate Messages have been added to the main window toolbar's
    Actions list.
  * Account compose signature: The value of the signature file now
    takes a path relative to the user's home directory in addition
    to a full path.
  * Icon Themes: Support for SVG themes with icon scaling
    capabilities has been added. This requires libRSVG 2.40.5 or
    newer.
  * Hidden preferences: colours for specifying Tags, QuickSearch,
    and auto-filled header values have been added, both foreground
    and background. Respectively, tags_color, tags_bgcolor,
    qs_active_color, qs_active_bgcolor, qs_error_color,
    qs_error_bgcolor, default_header_color, and
    default_header_bgcolor.
  * Hidden preferences: warn_sending_many_recipients_num, if
    greater than zero, a warning dialogue is shown when the number
    of recipients exceeds the number given.
  * GData plugin: This plugin now requires libgdata version 0.17.2
    or newer.
  * TNEF parser plugin: This plugin now uses an external libytnef.
  * vCalendar plugin: This plugin now uses an external libical,
    version 2.0.0 or newer is required.
  * Mail Archiver plugin: - updated to support some of the
    compression formats up to libarchive 3.2.2
  * Several minor UI improvements.
  * Updated manual in English and Spanish.
  * Updated man page.
  * Updated translations: Brazilian Portuguese, Catalan, Danish,
    Dutch, French, German, Hungarian, Italian, Norwegian Bokmål,
    Russian, Spanish, Swedish, Traditional Chinese, and Turkish.
  * Bug fixes:
    o bug 3251, 'A translated In-Reply-To header is sent
    translated'
    o bug 3571, 'recipient list lost and truncated'
    o bug 3574, 'Template addressing'
    o bug 3582, 'Select folder dialogue does not tell what is
    selecting for'
    o bug 3673, 'Be more friendly instead of "configure: error:
    'encrypt'-function not found."'
    o bug 3734, 'undefined symbol error with flex-2.6.2'
    o bug 3740, 'Templates information dialog can't be closed
    with WM button'
    0 bug 3741, 'Deleting an account doesn't delete imapcache'
    o bug 3742, 'Attaching file with plus sign in filename via
    drag and drop doesn't work'
    o bug 3762, 'redirect fails'
    o bug 3764, 'Use external libical instead of the internal
    copy'
    o bug 3775, 'Error in string at src/mainwindow.c:4726?'
    o bug 3777, 'Weird news dates for some RSS feeds'
    o Debian bug 846170, 'incorrect IMAP UID handling'
    o Allow sending empty messages in Session (just \r\n).
    o fix some main window menu sensitivity issues
    o make up/down key navigation obey 'always_show_msg'
    o fix text selection when double-clicking quoted text and
    'collapse quoted text on double click' is turned off
    o fix 'Go to' moving off current, unopened msg, and dialogue
    to go to next folder
    o obey 'always_show_msg' on "no more [...] msgs. go to next
    folder?"
    o make Go to/[Next|Prev] sort order aware
    o don't ignore auto-account selection when forwarding on IMAP
    and NNTP accounts
    o on first run, use --alternate-config-dir (if set) on prefs
    migration. prevents useless creation of ~/.claws-mail
    directory
    o fix colouring of auto-filled headers
    o don't remove the To when changing account
    o Honour autosave_encrypted preference when using external
    editor.
    o Fix 'search folder' not working in some cases
    o Fix build on OSX.
    o fix memory leaks
    o when renaming folder, only update summaryview folder name
    if the current folder is being renamed
    o sensitise trayicon's 'get mail' and 'exit'
    o Handle timezones correctly in vCalendar.
    o Do not hardcode resolv.conf location
    o fix building with --disable-deprecated
- added BR to enable more features:
  - libical-devel (vcalendar plugin)
  - libgdata-devel (google data plugin)
  - librsvg-devel (scalabable icons support)
  - libcanberra-gtk{,3}-devel enhanced notifications support
- disable the tnef_parse as we are lacking the required library
- drop use-xdg-open-as-default-mime_open_command.patch:
  included upstream
- added claws-mail-3.15.0_libcanberra-gtk3.patch:
  allow finding the gtk3 version of the library if we build with
  gtk3</changelog>
  <changelog author="mrueckert@suse.de" date="1492776001">- add conditional handling for vcalendar plugins to only build on
  distros which still support it
- also prepared conditional build support for tnef</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of descriptions.
  Trim instructions and redundant mentions of license.</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- CVE-2020-15917: Fixed an improper handling of suffix data after
  STARTTLS is mishandled (boo#1174457).
  Added CVE-2020-15917.patch</changelog>
</package>
<package pkgid="f3b6f166f6e971dd5092f260944313c87dade6de604a51bb4e04163d086ac352" name="claws-mail-lang" arch="noarch">
  <version epoch="0" ver="3.17.8" rel="lp151.2.6.1"/>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- CVE-2020-15917: Fixed an improper handling of suffix data after
  STARTTLS is mishandled (boo#1174457).
  Added CVE-2020-15917.patch</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals
- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.
- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.
- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
    rules from parent folder' when creating new folders with the
    move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
    addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
    responsive.
  * A warning dialogue is shown if the selected privacy system is
    'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
    enables the Python plugin (which uses python2) to be built on
    newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
    just before c (check signature)
  * fix non-translation of some Templates strings
- drop CVE-2020-15917.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
</package>
<package pkgid="fb0bc0233ca37f5bb3a6acb8ced151649cfc4700ba3148a5ec66d0c4dc68ad60" name="clementine" arch="src">
  <version epoch="0" ver="1.3.1" rel="lp151.3.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1382011200">- Update to 1.2.0:
  * Add support for indexing and playing music from Box, Dropbox, Skydrive,
    and Ubuntu One.
  * Add support for Subsonic.
  * Remote control support for Android.
  * Add a Playlist tab to the sidebar.  Starred playlists are saved in here
    when their tabs are closed.
  * Add configurable blur &amp; opacity to album art when used as a playlist
    background.
  * Support Opus where available.
  * Support .mka and .oga file extensions.
  * Parsing support for WPL playlists.
  * Sort providers by user preference.
  * Add year and bitrate to MPRIS2 messages.
  * Add "not equals" operator to fields in the smart playlist wizard.
  * Add an option to write ratings, play count and scores to files.
  * Add options to show the rating and score on the OSD.
  * Add support for POPM tags.
  * Add support for FMPS tags in Ogg, FLAC, MP4 and ASF files.
  * Compile the bundled Taglib with ASF, MP4 and Opus support.
  * Make it possible to cancel cover searches.
  * Add an option to resume playback on startup.
  * Add support for Performer and Grouping tags.
  * Add Radio GFM.
  * Add an Apply button to the settings dialog.
  * Make it possible to mark all episodes of a podcast as new/listened.
  * Add an option for fading in/out on pause/unpause.
  * Add stereo balance slider to the equalizer.
  * Add a --restart-or-previous commandline flag.
  * Allow files to be transcoded directly from the playlist.
  * Export downloaded album covers
  * Removed iDevice support - it doesn't work well with modern devices and
    libgpod isn't being updated to support them.
  * Many bugfixes
- Drop sites.js and ultimate_providers.xml: fixed upstream.
- Drop clementine-nowerror.patch: fixes upstream.
- Drop Add-a-setting-for-disabling-moodbar-generation.patch: fixed upstream.
- Drop clementine-libimobiledevice-fix.patch: iDevice support dropped upstream</changelog>
  <changelog author="fisiu@opensuse.org" date="1385640000">- Update to 1.2.1:
  * Fix library download in the network remote.
  * Fix removing songs from playlist in the network remote.
  * Fix login failures with box.com.
  * Fix a typo that would prevent the Spotify downloader button from
    ever being shown.</changelog>
  <changelog author="tchvatal@suse.com" date="1395921600">- Version bump to 1.2.2:
  * upstream moved homepage
  * android remote support
  * Rename SkyDrive to OneDrive.
  * Don't include the user's IP address in the log (from the network remote
    settings dialog).
  * (Debian) Fix a bug with HTTPS logins to all cloud storage providers.
  * (Mac OS X) Fix a bug in the workaround for a weird font issue on 10.9.
  * (Mac OS X) Fix rendering of source icons on retina displays.
  * (Android Remote) Don't advertise songs that aren't available.
  * (Android Remote) Fix playing songs with special characters in filenames.
- Cleanup with spec-cleaner
- Remove support for &lt; 12.3 codepaths
- Remove unused patches:
  * clementine-1.1.1-fixboostparseerror.patch
  * clementine-desktop-fix.patch
- Add patches for build from upstream:
  * clementine-1.2.2-add-missing-header.patch
  * clementine-1.2.2-add-missing-include.patch
- Disable building with Werror, it is always bad idea to do so.
- Add dependency over udisks as it is used by build
- Use system projectM again as it seems to build fine.
- Bug workaround: disable DBUS interface as it fails to build for
  some non-aparent reason.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396008000">- Added clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch,
  fixes build with newer/stricter CMake
- As per patch, re-enable DBus
- Drop udisks BuildRequires, not needed</changelog>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
</package>
<package pkgid="d792489900d14ef1c8dfce3842dfcbb1be822a67200e1f21ee33f81be8d9ce93" name="clementine" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="lp151.3.3.1"/>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
</package>
<package pkgid="bc2c282b382bf14db2944e008755c1c6011d71579eb6538baa738053ed74e7c5" name="clementine" arch="src">
  <version epoch="0" ver="1.3.1" rel="lp151.3.6.1"/>
  <changelog author="fisiu@opensuse.org" date="1385640000">- Update to 1.2.1:
  * Fix library download in the network remote.
  * Fix removing songs from playlist in the network remote.
  * Fix login failures with box.com.
  * Fix a typo that would prevent the Spotify downloader button from
    ever being shown.</changelog>
  <changelog author="tchvatal@suse.com" date="1395921600">- Version bump to 1.2.2:
  * upstream moved homepage
  * android remote support
  * Rename SkyDrive to OneDrive.
  * Don't include the user's IP address in the log (from the network remote
    settings dialog).
  * (Debian) Fix a bug with HTTPS logins to all cloud storage providers.
  * (Mac OS X) Fix a bug in the workaround for a weird font issue on 10.9.
  * (Mac OS X) Fix rendering of source icons on retina displays.
  * (Android Remote) Don't advertise songs that aren't available.
  * (Android Remote) Fix playing songs with special characters in filenames.
- Cleanup with spec-cleaner
- Remove support for &lt; 12.3 codepaths
- Remove unused patches:
  * clementine-1.1.1-fixboostparseerror.patch
  * clementine-desktop-fix.patch
- Add patches for build from upstream:
  * clementine-1.2.2-add-missing-header.patch
  * clementine-1.2.2-add-missing-include.patch
- Disable building with Werror, it is always bad idea to do so.
- Add dependency over udisks as it is used by build
- Use system projectM again as it seems to build fine.
- Bug workaround: disable DBUS interface as it fails to build for
  some non-aparent reason.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396008000">- Added clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch,
  fixes build with newer/stricter CMake
- As per patch, re-enable DBus
- Drop udisks BuildRequires, not needed</changelog>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563969600">- Fix boo#1138261 with upstream patch:
  0001-Fix-crash-in-messagereply-6372.patch.
- Fix many memory leaks (see boo#1141444) with:
  delete_the_allocated_memory_in_respective_destructors.patch.</changelog>
</package>
<package pkgid="7b72a0aa2a304c0c989711f1f359531d2828cd8422560ccbb84bf075548c2f24" name="clementine" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="lp151.3.6.1"/>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563969600">- Fix boo#1138261 with upstream patch:
  0001-Fix-crash-in-messagereply-6372.patch.
- Fix many memory leaks (see boo#1141444) with:
  delete_the_allocated_memory_in_respective_destructors.patch.</changelog>
</package>
<package pkgid="2196105e230b4017d3685f1b5654c0883ed6c45956669a7f7e4bfeb077b173f4" name="clippy" arch="i586">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="8b30ee2009513cf41a43d31b06779106494db94e6d54e381a64e888ef6f0cd2d" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="acbd2b7c7333083db920afb5ceb353005d5fed9f69a756224f623298a1c0971e" name="clippy" arch="i586">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="f1bdcb817fa3cc54ca61187ab8aaf93df7a22dae6781c9d38268c0c331aa3b80" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="4f03252da78ba334fac6d1cec844a5e1f33703bfd9d34959cbd86a8351439b83" name="clippy" arch="i586">
  <version epoch="0" ver="1.36.0" rel="lp151.5.8.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="b2f28f96db82f849e074b3ab647f3e64549fd42351fe8b757ac6eb275efda9ee" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp151.5.8.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="5271403b31f6bec2d62f9717496f1964202481e787ac2503b8ec3b680ab24a44" name="clippy" arch="i586">
  <version epoch="0" ver="1.43.1" rel="lp151.5.13.1"/>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-61206-assume-tarball-llvm-is-fresh.patch - Upstream fix to make
  LLVM not be rebuilt during the installation phase.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="d7333d008d2f61df3c4d3cfd4786c6ca629302a5d6c631974089b15ffd54d0d6" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.43.1" rel="lp151.5.13.1"/>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-61206-assume-tarball-llvm-is-fresh.patch - Upstream fix to make
  LLVM not be rebuilt during the installation phase.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="d329803ab5ce578013ae5baa64e08416d329a0fb45e7cc3ad9c9c17c7dac6202" name="cloud-init" arch="src">
  <version epoch="0" ver="19.1" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
</package>
<package pkgid="80cdd9c0f86a8dbe1cf8292296afa2dd2d53ff88ea4a2e56e20d20c68ef762f2" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
</package>
<package pkgid="6a0fa7b689b7ab729e66bc9ec4dbf69951ad4e0aeb43656c4d5f6e90cca8c447" name="cloud-init" arch="src">
  <version epoch="0" ver="19.1" rel="lp151.2.6.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
</package>
<package pkgid="6dfd283a64c3db078b3442033f175cee861d83d82aaf86d1b72a5d7c06d32a60" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.6.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
</package>
<package pkgid="e007de88b51bdab72566d1ccfc09c2be42a5616516eb86e6010334a5b8ac6428" name="cloud-init" arch="src">
  <version epoch="0" ver="19.2" rel="lp151.2.9.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
</package>
<package pkgid="645ed453c9536c36e78b38d98895e748cb1895c135eb65cb9d0a7afb65348a28" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.2" rel="lp151.2.9.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
</package>
<package pkgid="438c70613787169c1037988e2f4d2c133728eaf4b4eceaca44def71963bc7386" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="lp151.2.12.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
</package>
<package pkgid="9710573d9efb00dbcf160fe0eca255e36b42593cd320c044e0911977f1fcfa82" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp151.2.12.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
</package>
<package pkgid="3dbe5f9047028dd9ecff597aad96766fd5f45cb8ab7eab89dc7150a4258dab47" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="lp151.2.15.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
</package>
<package pkgid="f91659054d31a4593dabfbe48bfc3293d69ef3183dd073718fd3abc1a60ada57" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp151.2.15.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
</package>
<package pkgid="d2885f474d8edcbcf00d303de836447618c3dd2a639d46adc2703111a5476872" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="lp151.2.18.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
</package>
<package pkgid="241394bb59b126713406c53ef73328a323eb7f605154de533bf86e037ce00fcd" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp151.2.18.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
</package>
<package pkgid="ccfe4c6de16e094d3b037251ff366c3588c57caa5ca0508c08b252ccf0be2150" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="lp151.2.21.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
</package>
<package pkgid="5642cd8f3970a1b567efd11ea85c2860d3261aa5cd4affa56fca2fe6841c6fbe" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp151.2.21.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
</package>
<package pkgid="cc1f29d43dbf771f05c6e15dd754acad4ecd866accccb92e9a5d275b6edde484" name="cloud-init" arch="src">
  <version epoch="0" ver="20.2" rel="lp151.2.24.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="625c7af2c5ea5a1343214c780b59b70f9ea68aa9398672f86e2d5b81a8ec9351" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp151.2.24.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="1a5585cc1f2acd607f31618366887af48208552e5595ffb23d0b1c6d9f7f44b1" name="cloud-init" arch="src">
  <version epoch="0" ver="20.2" rel="lp151.2.27.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
</package>
<package pkgid="3818bb9bb9d8b69b6673c78b9f01002c50ed116002029ed8e39315ada34427b6" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp151.2.27.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
</package>
<package pkgid="42a4b97595729d8a3bf26db914550b49f5cea71a32c78efa5618015fdca5409e" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
</package>
<package pkgid="db847c79f4d96072eac8cec10097870373f62eb3609503304840be007359c84c" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.6.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
</package>
<package pkgid="d61bd20bcd2fb4902b60f2a894dde00c9d5190a245cab9dda5ae817806383b4e" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.2" rel="lp151.2.9.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
</package>
<package pkgid="00478615d52aecf0554df0fe0b5839667f639a35c8316811c746282a617ae15a" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp151.2.12.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
</package>
<package pkgid="606f1acfddec96a746a3aaddf943c6740483fe81fb1479b06ebf8b7c5648d5b8" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp151.2.15.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
</package>
<package pkgid="51d86feaabf2241b8906200846576270785000f65cede01fbbec30e048ea2746" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp151.2.18.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
</package>
<package pkgid="e3b5f05415e61789952d3362428e314b5a309cadef0effecb34b8b2a663dea9a" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp151.2.21.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
</package>
<package pkgid="2ac259a5bd482934e71c1b135dedd68a5e7932dc01a777bae21ffbe7e2d7e1a6" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp151.2.24.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="7e20a80ea7f92013d35b59df894433a7ea9902996b3f839978287b69d172ee68" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp151.2.27.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
</package>
<package pkgid="93442ec88ca9544dff4bcdb1261269a1941866663f54ba71b8f67331340740e4" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
</package>
<package pkgid="a9f41d079d00799f40929bcfc6de5c66193b42636583cbbbbe3c9d137df5cdcb" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.6.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
</package>
<package pkgid="80837a0a7de59a2c6592d9525da548af970cfe55fcc1c0b9f0805babb85b274d" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.2" rel="lp151.2.9.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
</package>
<package pkgid="6190c6f40484150512fe1d65851e1c666ce310d854b953283c2e379e1cd4ff7c" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp151.2.12.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
</package>
<package pkgid="f4849c6bd6c15d3bad003f27b0078a16ccd3852d6da03f6688b60bb7bffc4151" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp151.2.15.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
</package>
<package pkgid="250da171044ecf1db6fe73f379067db2a5fee801cbbe55381a5d6cbd22bb2903" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp151.2.18.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
</package>
<package pkgid="1f6014a087413ca58639e3c90f10321e09537675e228fc1fda73a4d86f43ffc7" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp151.2.21.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
</package>
<package pkgid="2accbd253d5b9d7531f398c2802469014929ac7ed64c89573aab780d0133d29a" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp151.2.24.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="0a16f2c3224d1586ee81bc63da5b4bfe01fbcf444975738ff0bd06849b036ad7" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp151.2.27.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
</package>
<package pkgid="a782a045acb13f18838eb96ecf44b15f6bc2d58089c85d09c19fce1390f2186a" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.0" rel="lp151.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="eac61276902f19814a3e58609223b99f569d3dad4d4a30ff07c69b90c03b987e" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.0" rel="lp151.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="64795f0eb4cab976cd9ee8f8789b0ebf2533283c685b87de70dd86833eefd13d" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.3" rel="lp151.2.6.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
</package>
<package pkgid="9d5a0ea184559221c36ee7b9a095be1d59af0a841e462ca5cf8509e8d9b93206" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.3" rel="lp151.2.6.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
</package>
<package pkgid="f524b65d6fdc7686cf419c01f7a76381d9c3fc9694e0066849c19f3842e35ae7" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp151.2.9.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
</package>
<package pkgid="bf85385cca06f78142d8355b184143a8b557283f027ea422c5e1e5011dfb8e1e" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.4" rel="lp151.2.9.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
</package>
<package pkgid="078167e5a5b1ffcb1d7f4f503412a6eafa71dbe3b917e75a182e2f40f1611a55" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.5" rel="lp151.2.12.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
</package>
<package pkgid="9f01c38897489bb94daea37f6a18b8543867248ac63112ba43f277a6f0d47319" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.5" rel="lp151.2.12.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
</package>
<package pkgid="1864164f690773a89c17a264ffacd8b754d7e18b549acaee6400e17991010a93" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.0" rel="lp151.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="42c85594e7bd9781b7b23ca1635d896b0789db4e264bdaf9ea236cd0ce2b9838" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.0" rel="lp151.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="906f520efaf4df4f17b4b2d646f2c08b7049bac3cc334964f03509464b4bc653" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.3" rel="lp151.2.6.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
</package>
<package pkgid="c1b9a5824a06f2e22a9c7cfa322fce4f3ebe509d5966c971805882fbdae2ec94" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.3" rel="lp151.2.6.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
</package>
<package pkgid="b01ea8db13a33fad7059edfce5d2a52fd5d9368dd073e6c81ace79a4bc331025" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp151.2.9.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
</package>
<package pkgid="96d3571701e121830212eb049f2c11bd93f9544cac7de4de9c80ddab0ae464d8" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.4" rel="lp151.2.9.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
</package>
<package pkgid="a32a975f2855b6e9f9161e596173355747f6995a20faa058993ac26517953ac1" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.5" rel="lp151.2.12.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
</package>
<package pkgid="64d78c2b832b6368f3e8e2cf97a82447405ce424822cd5f49c96af002cafe5e1" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.5" rel="lp151.2.12.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
</package>
<package pkgid="5d173e0f517af9406038e123ec7cbdf4477e1af4b63ffdd7f7f3f8e1b0483fbf" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.5" rel="lp151.2.12.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
</package>
<package pkgid="5b44bc5dc23747d67f349f5f4feec31ecb190f0360ec750ad69c2c9ad80458e7" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.5" rel="lp151.2.12.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
</package>
<package pkgid="8b22f3e80ed123b1e78c734e7ee3b25839b52773004a28eade06ead2b7e4718f" name="clustduct" arch="src">
  <version epoch="0" ver="0.0.4" rel="lp151.2.3.1"/>
  <changelog author="cgoll@suse.com" date="1533211200">- First commit, which installs clustduct.sh to /usr/sbin
  (FATE#326456).</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- Updated to version 0.0.1_alpha with following features
  * lua based
  * BSD-3 license
  * autobuild based</changelog>
  <changelog author="cgoll@suse.com" date="1540468800">- Updated to 0.0.1_alpha2 which now has as kiwi example file</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541419200">- Fix some orthography points in the description.
- Wrap entire %post in ifarch x86_64.</changelog>
  <changelog author="cgoll@suse.com" date="1541592000">- Updated to 0.0.1_alpha3 with a script for preparing the
  tftp directories
  * removed post sections which prepared the tftp directory</changelog>
  <changelog author="cgoll@suse.com" date="1543492800">- Updated to 0.0.1_alpha4 which does not install files to /srv any
  more and do not require specific lua and syslinux for build</changelog>
  <changelog author="cgoll@suse.com" date="1543924800">- added COPYING as license and simplified spec file</changelog>
  <changelog author="cgoll@suse.com" date="1549627200">- Updated to alpha5 which fixes linebreak in perpare_tftp.sh
  (BSC#1124812)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1554120000">- Updated to v0.0.1_alpha7 which adds close to every lua file
  operation (BSC#1131151)
  * added SLES kiwi descriptions for SLES builds</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1556798400">- adds the valid SLE15SP1 descriptions (bsc#1131150)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1556884800">- updated to v0.0.2 to use the right product (bsc#1131150)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1562328000">- updated to vers v0.0.4 which includes several fixes
  * description
  * option handeling
  * renamed kiwi description
  Bugs are listed in (bsc#1138326) and (bsc#1138296)</changelog>
</package>
<package pkgid="dc36e02592d3c94396e704206fd0c0a463a5f85375165943813dc01a3eba63e5" name="clustduct" arch="x86_64">
  <version epoch="0" ver="0.0.4" rel="lp151.2.3.1"/>
  <changelog author="cgoll@suse.com" date="1533211200">- First commit, which installs clustduct.sh to /usr/sbin
  (FATE#326456).</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- Updated to version 0.0.1_alpha with following features
  * lua based
  * BSD-3 license
  * autobuild based</changelog>
  <changelog author="cgoll@suse.com" date="1540468800">- Updated to 0.0.1_alpha2 which now has as kiwi example file</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541419200">- Fix some orthography points in the description.
- Wrap entire %post in ifarch x86_64.</changelog>
  <changelog author="cgoll@suse.com" date="1541592000">- Updated to 0.0.1_alpha3 with a script for preparing the
  tftp directories
  * removed post sections which prepared the tftp directory</changelog>
  <changelog author="cgoll@suse.com" date="1543492800">- Updated to 0.0.1_alpha4 which does not install files to /srv any
  more and do not require specific lua and syslinux for build</changelog>
  <changelog author="cgoll@suse.com" date="1543924800">- added COPYING as license and simplified spec file</changelog>
  <changelog author="cgoll@suse.com" date="1549627200">- Updated to alpha5 which fixes linebreak in perpare_tftp.sh
  (BSC#1124812)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1554120000">- Updated to v0.0.1_alpha7 which adds close to every lua file
  operation (BSC#1131151)
  * added SLES kiwi descriptions for SLES builds</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1556798400">- adds the valid SLE15SP1 descriptions (bsc#1131150)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1556884800">- updated to v0.0.2 to use the right product (bsc#1131150)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1562328000">- updated to vers v0.0.4 which includes several fixes
  * description
  * option handeling
  * renamed kiwi description
  Bugs are listed in (bsc#1138326) and (bsc#1138296)</changelog>
</package>
<package pkgid="23f88970004f9eb33b660179f49c12177dd747572e86f36a905b2f674ad24ea6" name="cluster-glue" arch="i586">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="ec63291be34f5083a2ec10f815e17ac61c582c23b68fe46ff65da7f712a880e4" name="cluster-glue" arch="src">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="5a03b3e4d0324d8726cfc7ca846dafc292b3d546a65a5c31ce894216470122dd" name="cluster-glue" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="dca161ed8247c658f12962f55f562aedde6f8caa5e95e853d538a1d452a7f0d0" name="cluster-glue" arch="i586">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
</package>
<package pkgid="b7f96f3cc1704d33345d43b6bade453360cf1ddc939a6fc78c3dd514598f4c03" name="cluster-glue" arch="src">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
</package>
<package pkgid="b600df6d7ba1790d537ae09ab296722a01b1e319ab927e8c15ff12e5df00ef1b" name="cluster-glue" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
</package>
<package pkgid="de3d5d3a46b9af56b44d6af0f860d804af3ee71e551aaa01d0ec21910dad636c" name="cmis-client" arch="src">
  <version epoch="0" ver="0.5.2" rel="lp151.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1359115200">- Fix libcmis-c-devel dependency over itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1359633600">- Version bup to 0.3.1
  * 0.3.1
  * Added support for proxy configuration
  * Fixed man page generation
  * Misc code cleanup / fixes</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370865600">- Build with large file support in 32 bit archs, no good
  will come mixing LFS-aware executables and non-LFS libraries.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1375876800">- Update to version 0.4.1
  + 0.4.0
    + Support for Google Drive protocol as a binding
    + Support for Alfresco in the cloud
    + Added OAuth2 authentication support
    + Added API to configure HTTP proxy
    + Handle invalid SSL certificate problems
    + Added API for renditions
    + Moved the CMIS Atom binding unit tests to use libcurl mockup
    + Added repository capabilities support (still missing
    capabilityCreatablePropertyTypes and capabilityNewTypeSettableAttributes)
  + 0.4.1
    + Don't install the libcmis-mockup library: only for testing purpose</changelog>
  <changelog author="jengelh@inai.de" date="1384257600">- Set RPM groups of shlib packages to what we normally use
- Make a note in the description about what "CMIS" is
- Require boost-1.42 (first one to have the mandatory uuid.hpp)</changelog>
  <changelog author="tchvatal@suse.com" date="1388404800">- Whitespace cleanup here&amp;there.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1393934400">- 433fad3-Fix-int-bool-confusion-on-big-endian-architectures.patch
  Fix problem with big endian architectures. bnc#866716</changelog>
  <changelog author="fstrba@suse.com" date="1404302400">- 0001-Remove-C-11-only-std-to_string.patch
  Fix some C++11-isms.</changelog>
  <changelog author="p.drouand@gmail.com" date="1419681600">- Update to version 0.5.0
  + Completely removed the dependency on InMemory server for unit tests
  + Minimized the number of HTTP requests sent by
    SessionFactory::createSession
  + Added Session::getBaseTypes()
- Remove merged patches;
  + 433fad3-Fix-int-bool-confusion-on-big-endian-architectures.patch
  + 0001-Remove-C-11-only-std-to_string.patch
- Bump soname to 0_5-5
- Bump incname to 0.5</changelog>
  <changelog author="coolo@suse.com" date="1430913600">- use upstream source url</changelog>
  <changelog author="coolo@suse.com" date="1430913601">- fix-boost-with-gcc5.patch: upsream patch to support gcc5</changelog>
  <changelog author="fstrba@suse.com" date="1430913602">- Added patches:
  * 0001-fix-boost-configuration-with-gcc-5.patch
  - Upstream fix for boost detection with gcc5
  * 0002-avoid-use-after-delete.patch
  - Upstream fix for test-ws failure
- Removed patch:
  * fix-boost-with-gcc5.patch
  - Superseded by the two previous patches</changelog>
  <changelog author="idonmez@suse.com" date="1447761600">- Add 0005-Remove-invalid-comments-from-test-JSON-file.patch to fix
  test-onedrive failure with boost 1.59
  (http://sourceforge.net/p/libcmis/tickets/13/)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1448020800">- for ppc64le bypass boo#955832: disable stop on make check error</changelog>
  <changelog author="tchvatal@suse.com" date="1457092800">- Version update to 0.5.1:
  * Few small bugfixes, see NEWS file for details
- Remove upstreamed patches
  * 0001-fix-boost-configuration-with-gcc-5.patch
  * 0002-avoid-use-after-delete.patch
  * 0005-Remove-invalid-comments-from-test-JSON-file.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1462708800">- Simplify autoreconf call and add patch to mark Makefile as foreign:
  * declare-automake-foreign.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Description updates
- Rename %soname to %sover to better reflect its use</changelog>
  <changelog author="adam.majer@suse.de" date="1534507200">- use %license to install licenses
- spec file cleanup
- boost_168.patch: fix build with Boost 1.68 where the compatibility
  header for Uuid's sha1 header was removed. (boo#1105173)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562587200">- Update to 0.5.2:
  * Fixed Google Drive login, broken by Google's new 2-page login sequence
  * Added support for Google Drive two-factor authentication
  * Fixed access to SharePoint root folder (tdf#101385)
  * Limited the maximal number of redirections to 20 (rhbz#1410197)
  * Switched library implementation to C++11 (the API remains C++98-compatible)
  * Fixed build with boost &gt;= 1.68.0 (#19)
  * Fixed encoding of OAuth2 credentials
  * Dropped cppcheck run from "make check". A new "make cppcheck" target was created for it
  * Added proper API symbol exporting
  * Speeded up building of tests a bit
  * Fixed a few issues found by coverity and cppcheck
- Remove merged patches:
  * boost_168.patch
  * declare-automake-foreign.patch</changelog>
</package>
<package pkgid="1d350513522f0516c25a67c13b52fa88cdc997cf46f57a749d605d1a26346835" name="cmis-client" arch="x86_64">
  <version epoch="0" ver="0.5.2" rel="lp151.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1419681600">- Update to version 0.5.0
  + Completely removed the dependency on InMemory server for unit tests
  + Minimized the number of HTTP requests sent by
    SessionFactory::createSession
  + Added Session::getBaseTypes()
- Remove merged patches;
  + 433fad3-Fix-int-bool-confusion-on-big-endian-architectures.patch
  + 0001-Remove-C-11-only-std-to_string.patch
- Bump soname to 0_5-5
- Bump incname to 0.5</changelog>
  <changelog author="coolo@suse.com" date="1430913600">- use upstream source url</changelog>
  <changelog author="coolo@suse.com" date="1430913601">- fix-boost-with-gcc5.patch: upsream patch to support gcc5</changelog>
  <changelog author="fstrba@suse.com" date="1430913602">- Added patches:
  * 0001-fix-boost-configuration-with-gcc-5.patch
  - Upstream fix for boost detection with gcc5
  * 0002-avoid-use-after-delete.patch
  - Upstream fix for test-ws failure
- Removed patch:
  * fix-boost-with-gcc5.patch
  - Superseded by the two previous patches</changelog>
  <changelog author="idonmez@suse.com" date="1447761600">- Add 0005-Remove-invalid-comments-from-test-JSON-file.patch to fix
  test-onedrive failure with boost 1.59
  (http://sourceforge.net/p/libcmis/tickets/13/)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1448020800">- for ppc64le bypass boo#955832: disable stop on make check error</changelog>
  <changelog author="tchvatal@suse.com" date="1457092800">- Version update to 0.5.1:
  * Few small bugfixes, see NEWS file for details
- Remove upstreamed patches
  * 0001-fix-boost-configuration-with-gcc-5.patch
  * 0002-avoid-use-after-delete.patch
  * 0005-Remove-invalid-comments-from-test-JSON-file.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1462708800">- Simplify autoreconf call and add patch to mark Makefile as foreign:
  * declare-automake-foreign.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Description updates
- Rename %soname to %sover to better reflect its use</changelog>
  <changelog author="adam.majer@suse.de" date="1534507200">- use %license to install licenses
- spec file cleanup
- boost_168.patch: fix build with Boost 1.68 where the compatibility
  header for Uuid's sha1 header was removed. (boo#1105173)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562587200">- Update to 0.5.2:
  * Fixed Google Drive login, broken by Google's new 2-page login sequence
  * Added support for Google Drive two-factor authentication
  * Fixed access to SharePoint root folder (tdf#101385)
  * Limited the maximal number of redirections to 20 (rhbz#1410197)
  * Switched library implementation to C++11 (the API remains C++98-compatible)
  * Fixed build with boost &gt;= 1.68.0 (#19)
  * Fixed encoding of OAuth2 credentials
  * Dropped cppcheck run from "make check". A new "make cppcheck" target was created for it
  * Added proper API symbol exporting
  * Speeded up building of tests a bit
  * Fixed a few issues found by coverity and cppcheck
- Remove merged patches:
  * boost_168.patch
  * declare-automake-foreign.patch</changelog>
</package>
<package pkgid="8588b8effc60f1e729b1ab5d7e5179d977a455416b1a59214dc5bbece0e03ff7" name="cni" arch="src">
  <version epoch="0" ver="0.7.1" rel="lp151.2.3.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
</package>
<package pkgid="03be4698212c038d445afea6f1fa941cd2cafce0659e9bf3156c62d13a40cd85" name="cni" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="lp151.2.3.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
</package>
<package pkgid="bdbcf23252dac01329caf0465378ea05e80f8170bfe948544102ed47c04ede80" name="cni-plugins" arch="src">
  <version epoch="0" ver="0.8.4" rel="lp151.2.3.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
</package>
<package pkgid="a3b33a3f6467e12c5f128dec5e2c430be7742a9d28088cc290ed8622fe9581a2" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="lp151.2.3.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
</package>
<package pkgid="b1edd0ac5b3ff5c663721f28a8fbd94d66d827bda7b20a6fe47ea4a3da8caab6" name="cni-plugins" arch="src">
  <version epoch="0" ver="0.8.6" rel="lp151.2.6.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
</package>
<package pkgid="a90b634d47410b44900fe39bc6cdff083a4d8ef77de7ce4790de3bcc9b50d400" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="lp151.2.6.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
</package>
<package pkgid="df6904c2c00fae72a87a524041d8363ce3d367a49c8a1f9e723f64cbd0d744fe" name="command-not-found" arch="noarch">
  <version epoch="0" ver="0.2.2+20190613.e6c2668" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1443182400">- Update to version 0.1.0+20150925:
  + Update translations based on https://svn.opensuse.org/svn/opensuse-i18n/trunk/lcn/ - REV 92845
    (boo#906691).
- Change to source service (disabled), checking out from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1445601600">- Update to version 0.1.0+20151023:
  + adapt to Dataiterator changes in libsolv-0.6.0 (boo#951977)
  + Updated translations.</changelog>
  <changelog author="tchvatal@suse.com" date="1464609600">- Cleanup a bit to have the spec readable and point to proper url</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1464609601">- Update to version 0.1.0+20160523.472154b:
  * Translated using Weblate (German)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Norwegian Nynorsk)
  * Translated using Weblate (German)
  * Translated using Weblate (Arabic)
  * Translated using Weblate (French)
  * Translated using Weblate (Korean)
  * Translated using Weblate (Swedish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1498737600">- Update to version 0.1.1+20170629.b80f023:
  * update translations using Weblate (Swedish, Chinese, French, Greek, Polish,
    Indonesian, Persian, Italian, Bulgarian, Lithuanian, Danish, Spanish)
  * zsh: avoid cnf being triggered on every false result
  * zsh: improve handler hooking
  * zsh: expect command to be quoted
  * zsh: define function with two names
  * detect if we have no repos configured (bsc#1037101)
  * call zypper refresh when solv file missing (bsc#1037101)
  * Version 0.1.1</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1498824000">- Update to version 0.1.1+20170630.f55550e:
  * drop outdated DBs</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1514980800">- Update to version 0.1.1+20180103.0595254:
  * allow for multiple repos to be in one .repo file
  * Parse repo files for repo name (boo#980393)
  * Updated translations (Spanish, Norwegian Nynorsk)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1534161600">- Initial Python3 support (bsc#1077238)
- Update to version 0.2.1+20180813.59519f8:
  * scout-cmd: convert dict keys into a list
  * scout-cmd: __iter__ is part of a string
  * scout-cmd: KeyboardInterrupt lives out of a module
  * scout: migrate bin to Python3
  * Do not interpolate SQL strings
  * Use system Python 3 interpreter
  * scount-cmd: Initial support for Python 3
  * data-gen: Initial support to Python 3
  * tests: Initial support for Python 3
  * cnf: initial port to Python 3
  * Move setup.py to distutils and fix package_data
  * Add setup.py
  * Replace multiple unclear "zypper refresh" error messages with a helpful warning
  * Fix lookup of solv-file path for repos with '/' in name (bsc#1037101)
  * Translated using Weblate (Hindi)
  * Translated using Weblate (Hindi)
  * Translated using Weblate (Hindi)
  * Translated using Weblate (Galician)
  * Translated using Weblate (Galician)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Arabic)
  * Translated using Weblate (Arabic)
  * Translated using Weblate (Korean)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1537358400">- Update to version 0.2.1+20180914.017a078:
  * Avoid running command-not-found with python2 (boo#1108565)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1538654400">- Update to version 0.2.1+20181004.20a0aae:
  * Unicode versions of gettext are not for Python 3
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Chinese (China))
  * Translated using Weblate (Chinese (China))
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Japanese)
  * Clean empty strings in untranslated po files.
  * Update po files.
  * Mark translatable strings
  * Delete temporary files
  * Get the make_trans script to work</changelog>
  <changelog author="bwiedemann@suse.com" date="1560427200">- Update to version 0.2.2+20190613.e6c2668:
  * Bump version to 0.2.2
  * Fix bug where sbin packages would print as bytes strings (boo#1135598)
  * Newly generated po files (new line numbers).
  * The make_trans script did not work, because strings were not marked because of eval
  * Fix bash i18n support. The translations are expanded during definition of the function, when LANG is not yet set. Use eval to postpone it.
  * Fix i18n support.
  * Updated translations</changelog>
</package>
<package pkgid="2dc2bdb6ade242cae790c63b9d90fc633d5a4cfcd94cf44a920a0b05aa280627" name="conmon" arch="src">
  <version epoch="0" ver="2.0.10" rel="lp151.2.1"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565611200">- Initial release v2.0.0</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565956800">- Use `%make_build` macro instead of `%{__make}`
- Use `%make_install` macro instead of `%{__make} install`
- Use `%{_bindir}` macro instead of `%{_usr}/bin`
- Change `PREFIX` to not contain `%{buildroot}` and use the
  `$DESTDIR` variable</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Upstream has an actual description, use it instead of just
  duplicating the summary again.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568635200">- Set masterfd_stdout before registering ctrl_cb</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1572350400">- Add CONN_SOCK_BUF_SIZE to config
- Fix bug to close the sync pipe before exit command</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573732800">- Add log level trace
- Separate handling of log reopen events and terminal resize events</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1575892800">- Fix tight loop on OOM</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576065600">- Add --persist-dir to allow callers to specify a directory that
  conmon should mirror certain important files that should persist
  reboots (right now, just the container exit file)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576152000">- Kill the process group on timeout</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576238400">- Add --persist-dir flag to allow important container files to be
  written to a persistent directory
- Check OOM counter on cgroups v1 before writing OOM file
- Use splice(2) to copy from stdin</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Persist oom files on cgroup v2
- Revert the check for  the OOM counter on cgroups v1 before
  writing OOM file</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578398400">- Add TimedOutMessage to config to share with go code
- Fix format string to limit the size of the string to 10
  characters</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1582286400">- Update to v2.0.10 (bsc#1160460, bsc#1164390, jsc#ECO-1048,
  jsc#SLE-11485, jsc#SLE-11331):
  - journal logging: write to /dev/null instead of -1</changelog>
</package>
<package pkgid="a461fcd3f18d5bb031d4bba9a3e02a965689e47ece2116df5311faf6c9a0ea74" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.0.10" rel="lp151.2.1"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565611200">- Initial release v2.0.0</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565956800">- Use `%make_build` macro instead of `%{__make}`
- Use `%make_install` macro instead of `%{__make} install`
- Use `%{_bindir}` macro instead of `%{_usr}/bin`
- Change `PREFIX` to not contain `%{buildroot}` and use the
  `$DESTDIR` variable</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Upstream has an actual description, use it instead of just
  duplicating the summary again.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568635200">- Set masterfd_stdout before registering ctrl_cb</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1572350400">- Add CONN_SOCK_BUF_SIZE to config
- Fix bug to close the sync pipe before exit command</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573732800">- Add log level trace
- Separate handling of log reopen events and terminal resize events</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1575892800">- Fix tight loop on OOM</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576065600">- Add --persist-dir to allow callers to specify a directory that
  conmon should mirror certain important files that should persist
  reboots (right now, just the container exit file)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576152000">- Kill the process group on timeout</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576238400">- Add --persist-dir flag to allow important container files to be
  written to a persistent directory
- Check OOM counter on cgroups v1 before writing OOM file
- Use splice(2) to copy from stdin</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Persist oom files on cgroup v2
- Revert the check for  the OOM counter on cgroups v1 before
  writing OOM file</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578398400">- Add TimedOutMessage to config to share with go code
- Fix format string to limit the size of the string to 10
  characters</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1582286400">- Update to v2.0.10 (bsc#1160460, bsc#1164390, jsc#ECO-1048,
  jsc#SLE-11485, jsc#SLE-11331):
  - journal logging: write to /dev/null instead of -1</changelog>
</package>
<package pkgid="58b743356b06ded78972596d012e6ba3adb537d8c550c5ea44d4d9bc5944668d" name="conmon" arch="src">
  <version epoch="0" ver="2.0.20" rel="lp151.5.1"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565956800">- Use `%make_build` macro instead of `%{__make}`
- Use `%make_install` macro instead of `%{__make} install`
- Use `%{_bindir}` macro instead of `%{_usr}/bin`
- Change `PREFIX` to not contain `%{buildroot}` and use the
  `$DESTDIR` variable</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Upstream has an actual description, use it instead of just
  duplicating the summary again.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568635200">- Set masterfd_stdout before registering ctrl_cb</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1572350400">- Add CONN_SOCK_BUF_SIZE to config
- Fix bug to close the sync pipe before exit command</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573732800">- Add log level trace
- Separate handling of log reopen events and terminal resize events</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1575892800">- Fix tight loop on OOM</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576065600">- Add --persist-dir to allow callers to specify a directory that
  conmon should mirror certain important files that should persist
  reboots (right now, just the container exit file)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576152000">- Kill the process group on timeout</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576238400">- Add --persist-dir flag to allow important container files to be
  written to a persistent directory
- Check OOM counter on cgroups v1 before writing OOM file
- Use splice(2) to copy from stdin</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Persist oom files on cgroup v2
- Revert the check for  the OOM counter on cgroups v1 before
  writing OOM file</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578398400">- Add TimedOutMessage to config to share with go code
- Fix format string to limit the size of the string to 10
  characters</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1582286400">- Update to v2.0.10 (bsc#1160460, bsc#1164390, jsc#ECO-1048,
  jsc#SLE-11485, jsc#SLE-11331):
  - journal logging: write to /dev/null instead of -1</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
</package>
<package pkgid="b2501fabc95a791f1460180f5dca8d7e59eeb5e89384c3041f3329819a6cbf2c" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="lp151.5.1"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565956800">- Use `%make_build` macro instead of `%{__make}`
- Use `%make_install` macro instead of `%{__make} install`
- Use `%{_bindir}` macro instead of `%{_usr}/bin`
- Change `PREFIX` to not contain `%{buildroot}` and use the
  `$DESTDIR` variable</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Upstream has an actual description, use it instead of just
  duplicating the summary again.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568635200">- Set masterfd_stdout before registering ctrl_cb</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1572350400">- Add CONN_SOCK_BUF_SIZE to config
- Fix bug to close the sync pipe before exit command</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573732800">- Add log level trace
- Separate handling of log reopen events and terminal resize events</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1575892800">- Fix tight loop on OOM</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576065600">- Add --persist-dir to allow callers to specify a directory that
  conmon should mirror certain important files that should persist
  reboots (right now, just the container exit file)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576152000">- Kill the process group on timeout</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576238400">- Add --persist-dir flag to allow important container files to be
  written to a persistent directory
- Check OOM counter on cgroups v1 before writing OOM file
- Use splice(2) to copy from stdin</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Persist oom files on cgroup v2
- Revert the check for  the OOM counter on cgroups v1 before
  writing OOM file</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578398400">- Add TimedOutMessage to config to share with go code
- Fix format string to limit the size of the string to 10
  characters</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1582286400">- Update to v2.0.10 (bsc#1160460, bsc#1164390, jsc#ECO-1048,
  jsc#SLE-11485, jsc#SLE-11331):
  - journal logging: write to /dev/null instead of -1</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
</package>
<package pkgid="f09a0cb4db5e085ae4ced9bda99b57015787620624e53ddbb8bf39f749443979" name="container-diff" arch="src">
  <version epoch="0" ver="0.15.0" rel="lp151.3.3.1"/>
  <changelog author="vrothberg@suse.com" date="1517313600">- Add container-diff v0.6.2: container-diff is a tool to analyze and diff
  container images.</changelog>
  <changelog author="vrothberg@suse.com" date="1519300800">- Cleanup spec file with spec-cleaner.
- Use golang-package macro to strip binaries.
- Update container-diff to v0.7.0:
  * Download remote:// images in RPMAnalyzer
  * Add support for custom formatting strings
  * Refactors to the cache and image unpacking code
  * Add Label to ConfigObject
  * Add MutableSource for basic image modifications</changelog>
  <changelog author="vrothberg@suse.com" date="1521547200">- Update container-diff to v0.8.0:
  * Fixed issue where remote:// prefix was not being stripped correctly
  * Allow updating env vars on MutableSource image
  * Save temp layers in cache directory instead of /tmp
  * Allow accessing and modifying MutableSource config
  * Fixed appending latest tag to images with no tag provided
  * Created default ImageSource if none is provided to prepper</changelog>
  <changelog author="vrothberg@suse.com" date="1523448000">- Update container-diff to v0.9.0:
  * Add metadata diffing
  * Sanitize filepaths before joining to prevent filepath traversal
  * Fix appending of latest tag to tar files
  * Correctly clean up image filesystems
  * Set/unset write bit when unpacking directories out of permission scope
  * Add all docker config fields to image config
  * Sort maps before diffing to prevent flaky results
  * Correctly handle case where no image source is parsed
  * Cleanup image source directory</changelog>
  <changelog author="vrothberg@suse.com" date="1523448001">- Build container-diff as PIC (via `-buildmode=pie`).
- Exclude ppc64le from tests.</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Cleanup spec file with spec-cleaner
- Install license
- Remove redundant comments
- Drop not needed requirement for fdupes</changelog>
  <changelog author="dcassany@suse.com" date="1530187200">- Update container-diff to v0.11.0
  * Don't overwrite loaded tarball image
  * Use local RPM binary (when possible) in RPM differ
  * Switch to github.com/google/go-containerregistry
  * Fix entrypoint in RPM differ
  * Various metadata diffing fixes
  * Remove Bazel
  * Switch docker Requires to Recommends
  * Update github project name in spec, now called GoogleContainerTools</changelog>
  <changelog author="David Cassany &lt;dcassany@suse.com&gt;" date="1539172800">- Update container-diff to v0.12.0
  * Add script to list all pull requests for each release #258
  * Fix deps #260
  * Backfill changelog #257
  * Add maintainers file and new issue template #259
  * Add size analyzer #256
  * Fix destination path for clone in contrib guidance. #255
  * Add rpmlayer differ #252
  * Handle error gracefully when we can't retrieve an image #251
  * Layered analysis for single version packages #248
  * Reuse cached filesystems for layers #247</changelog>
  <changelog author="David Cassany &lt;dcassany@suse.com&gt;" date="1540987200">- Update container-diff to v0.13.1
  * Fix docker library dependency overrides #269
  * Update go-containerregistry to pick up docker API client negotiation #267
  * Fix unintended variable shadowing #263
  * Change the default analysis type from apt to size #266</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1566302400">- Update container-diff to v0.15.0
  * Fix result switch while viewing with type history
  * Use PKG-INFO and METADATA to infer package names in pip analysis
  * Use top_level.txt when analyzing pip modules
  * Strip colons from file path before creating cache dir
  * Enhancement - save to file
  * Fixed concurrent map write in image diffing
  * Split lines prior to diffing
  * Move all image processing logic into utils, and expose publicly</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Use noun phrase in summary field.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1571227200">- Add container-diff to SLE12 and 15 (bsc#1148768, jsc#ECO-338)</changelog>
</package>
<package pkgid="6832670b96afe928ff4a2551135668a4b27afcd43c5d1761ee740718c5e9507d" name="container-diff" arch="x86_64">
  <version epoch="0" ver="0.15.0" rel="lp151.3.3.1"/>
  <changelog author="vrothberg@suse.com" date="1517313600">- Add container-diff v0.6.2: container-diff is a tool to analyze and diff
  container images.</changelog>
  <changelog author="vrothberg@suse.com" date="1519300800">- Cleanup spec file with spec-cleaner.
- Use golang-package macro to strip binaries.
- Update container-diff to v0.7.0:
  * Download remote:// images in RPMAnalyzer
  * Add support for custom formatting strings
  * Refactors to the cache and image unpacking code
  * Add Label to ConfigObject
  * Add MutableSource for basic image modifications</changelog>
  <changelog author="vrothberg@suse.com" date="1521547200">- Update container-diff to v0.8.0:
  * Fixed issue where remote:// prefix was not being stripped correctly
  * Allow updating env vars on MutableSource image
  * Save temp layers in cache directory instead of /tmp
  * Allow accessing and modifying MutableSource config
  * Fixed appending latest tag to images with no tag provided
  * Created default ImageSource if none is provided to prepper</changelog>
  <changelog author="vrothberg@suse.com" date="1523448000">- Update container-diff to v0.9.0:
  * Add metadata diffing
  * Sanitize filepaths before joining to prevent filepath traversal
  * Fix appending of latest tag to tar files
  * Correctly clean up image filesystems
  * Set/unset write bit when unpacking directories out of permission scope
  * Add all docker config fields to image config
  * Sort maps before diffing to prevent flaky results
  * Correctly handle case where no image source is parsed
  * Cleanup image source directory</changelog>
  <changelog author="vrothberg@suse.com" date="1523448001">- Build container-diff as PIC (via `-buildmode=pie`).
- Exclude ppc64le from tests.</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Cleanup spec file with spec-cleaner
- Install license
- Remove redundant comments
- Drop not needed requirement for fdupes</changelog>
  <changelog author="dcassany@suse.com" date="1530187200">- Update container-diff to v0.11.0
  * Don't overwrite loaded tarball image
  * Use local RPM binary (when possible) in RPM differ
  * Switch to github.com/google/go-containerregistry
  * Fix entrypoint in RPM differ
  * Various metadata diffing fixes
  * Remove Bazel
  * Switch docker Requires to Recommends
  * Update github project name in spec, now called GoogleContainerTools</changelog>
  <changelog author="David Cassany &lt;dcassany@suse.com&gt;" date="1539172800">- Update container-diff to v0.12.0
  * Add script to list all pull requests for each release #258
  * Fix deps #260
  * Backfill changelog #257
  * Add maintainers file and new issue template #259
  * Add size analyzer #256
  * Fix destination path for clone in contrib guidance. #255
  * Add rpmlayer differ #252
  * Handle error gracefully when we can't retrieve an image #251
  * Layered analysis for single version packages #248
  * Reuse cached filesystems for layers #247</changelog>
  <changelog author="David Cassany &lt;dcassany@suse.com&gt;" date="1540987200">- Update container-diff to v0.13.1
  * Fix docker library dependency overrides #269
  * Update go-containerregistry to pick up docker API client negotiation #267
  * Fix unintended variable shadowing #263
  * Change the default analysis type from apt to size #266</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1566302400">- Update container-diff to v0.15.0
  * Fix result switch while viewing with type history
  * Use PKG-INFO and METADATA to infer package names in pip analysis
  * Use top_level.txt when analyzing pip modules
  * Strip colons from file path before creating cache dir
  * Enhancement - save to file
  * Fixed concurrent map write in image diffing
  * Split lines prior to diffing
  * Move all image processing logic into utils, and expose publicly</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Use noun phrase in summary field.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1571227200">- Add container-diff to SLE12 and 15 (bsc#1148768, jsc#ECO-338)</changelog>
</package>
<package pkgid="d466d03fa8526428e655b150d28415f16e28d69d36283219c11423ed2a6766a0" name="containerd" arch="src">
  <version epoch="0" ver="1.2.10" rel="lp151.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
</package>
<package pkgid="ae642c35b7b4f2b8428a8044ba01ff96ee9c65af413d3eb66b84fbe60cd62287" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.10" rel="lp151.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
</package>
<package pkgid="4bb0b35ff90b69b1a4706aa39f7304d898321af09648ef221582e82773b06811" name="containerd" arch="src">
  <version epoch="0" ver="1.2.13" rel="lp151.2.12.1"/>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
</package>
<package pkgid="2a2d5fa80b652f016117614ce0ba7c0886302012b1a586659bde52378f1f4f11" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="lp151.2.12.1"/>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
</package>
<package pkgid="97cffc7783791e2f86fcc3d739fac10fa95c77f27156e140b597a8cd98b65213" name="containerd" arch="src">
  <version epoch="0" ver="1.2.5" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="cf97629c6b772422027b3b588477290b597059182cb4c5b888e3928d02c265dc" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.5" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="d2e8ff960cf55d163acb0cd656ab8033969482524c138590e796310ae3b0f4b6" name="containerd" arch="src">
  <version epoch="0" ver="1.2.6" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="2928d11a0cc778238d049bce7b996f4247652a35bda36c5a4ae8a5135bad28aa" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="9d49c0cf416f7da574dcf4c4f5ebd5efcf7717be5b3a960ad963a427aaed15f3" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.2.10" rel="lp151.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
</package>
<package pkgid="efd45c80dda3e6f6f6a85e0435494cd133b2bc4ef8de33f567e423ccd6ef15d5" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="lp151.2.12.1"/>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
</package>
<package pkgid="69ee8199e5749873d25a80eb6dd4e993b9b370d000a568cd2cb8984f48cf2235" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.2.5" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="799d59079891cfd5912137f9c8ae47fe4691c0efeb1c184a8bc461673e12cccd" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="c328c70eccbcce4f605270030366b7c1ef48b9008c1ed2a341076d98fcfc7408" name="containerd-test" arch="noarch">
  <version epoch="0" ver="1.2.5" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="a02b8283001d13c24d657d570fd8ad88207d01cb8a8a6bc4d408697fc30a3e79" name="corosync" arch="i586">
  <version epoch="0" ver="2.4.4" rel="lp151.5.3.1"/>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
</package>
<package pkgid="b3d705db1fdc40df2a80fc824452d0eb9b73752fcb9056b153b639810cb8ce1c" name="corosync" arch="src">
  <version epoch="0" ver="2.4.4" rel="lp151.5.3.1"/>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
</package>
<package pkgid="0605505d525ff8d24b7c1fdc4abaf18551fd24fbfed96c74e7053a4b04c7265c" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="lp151.5.3.1"/>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
</package>
<package pkgid="7ee108874f1d69718a128330f15c7986fb84c74450c01e3a54292d72ef6d3b67" name="corosync" arch="i586">
  <version epoch="0" ver="2.4.4" rel="lp151.5.6.1"/>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="61a10ea79f748f125c1b5ac8ea26a3e21c33b3b4dc84113b5a5628c8f49a64de" name="corosync" arch="src">
  <version epoch="0" ver="2.4.4" rel="lp151.5.6.1"/>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="723a2cdc1c051b32293d86fb608d18aed2d4f10c98c311283ed964df323e538e" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="lp151.5.6.1"/>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="b1ebf1846302937189e287a96fbd33a7a15e3d8c57c6e10435ed0521d5b54caf" name="corosync" arch="src">
  <version epoch="0" ver="2.4.5" rel="lp151.5.9.5"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Pablo Bravo &lt;pablo.bravo@suse.com&gt;" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="5ffb1e0d2d2150a32fbdad084d2086dae5eddebbcdf20220adef78ead4e06346" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.5.9.5"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Pablo Bravo &lt;pablo.bravo@suse.com&gt;" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="0f1dc7e0dcdab2f773682d9c434a58973a0dbd30c30657e13a09525c40660505" name="corosync-qdevice" arch="i586">
  <version epoch="0" ver="2.4.4" rel="lp151.5.3.1"/>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
</package>
<package pkgid="78a75dfe16fd0f7490922418dad8ffd5179f951fee6b22f0830739c610d86c84" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="lp151.5.3.1"/>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
</package>
<package pkgid="047cba15d73b5a1930e7b9bad121fe127bb7758f6ea9d42f7b70e30673f29aec" name="corosync-qdevice" arch="i586">
  <version epoch="0" ver="2.4.4" rel="lp151.5.6.1"/>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="cd731df7b3c4ff7571f0dca7dc797396969beebafa4d2e51f5a28b0a332d642e" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="lp151.5.6.1"/>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="e8817cb68dec51de706b1d3029f8e19a0e2fe6040b91f224a4227dd28f567721" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.5.9.5"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Pablo Bravo &lt;pablo.bravo@suse.com&gt;" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="883b832327d295c37675931c8b45642b2f4297ac7ae3ac1009988c48fbf0d5a6" name="corosync-qnetd" arch="i586">
  <version epoch="0" ver="2.4.4" rel="lp151.5.3.1"/>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
</package>
<package pkgid="1f6aa070c7179a1a4fb25c1c352252d1f7007ab579f5339af503733b3f1ed2b0" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="lp151.5.3.1"/>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
</package>
<package pkgid="d03c4307e6c037f0e75598190862e76b5465305163b68f4d6485a1a99bffe903" name="corosync-qnetd" arch="i586">
  <version epoch="0" ver="2.4.4" rel="lp151.5.6.1"/>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="3525d7fb63834229b77b7d108c4c61d3dd316a47998c37486ca33079dd93d1c9" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="lp151.5.6.1"/>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="9f35b673a537f3641249058dff26be29906e9ccf0b8911ded4b5886e020d887c" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.5.9.5"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Pablo Bravo &lt;pablo.bravo@suse.com&gt;" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="bc8466887d0bcdf569418737aef6ca35e2fc20bfe627cc453c4df5b8deffc43e" name="corosync-testagents" arch="i586">
  <version epoch="0" ver="2.4.4" rel="lp151.5.3.1"/>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
</package>
<package pkgid="8fcd97c2821293592dec42be51515a5b983ceaa48f27181b56d70a66667dc5ea" name="corosync-testagents" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="lp151.5.3.1"/>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
</package>
<package pkgid="6f83f5802c3b07b59b4edddb0ef1e1b1582ba06ba64f1b8c2bf479203be67625" name="corosync-testagents" arch="i586">
  <version epoch="0" ver="2.4.4" rel="lp151.5.6.1"/>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="27fe1ef89042473e9463eb400018221dc894385ca2b37f17d741c4d377168779" name="corosync-testagents" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="lp151.5.6.1"/>
  <changelog author="bliu@suse.com" date="1508760000">- Upgrade corosync-2.4.2 to corosync-2.4.3(fate#321385)
    doc: document watchdog_device parameter
    Main: Call mlockall after fork
    Totempg: remove duplicate memcpy in mcast_msg func
    Qdevice: fix spell errors in qdevice
    logconfig: Do not overwrite logger_subsys priority
    totemconfig: Prefer nodelist over bindnetaddr
    cpghum: Fix printf of size_t variable
    Qnetd lms: Use UTILS_PRI_RING_ID printf format str
    wd: Report error when close of wd fails
    votequorum: Don't update expected_votes display if value is too high
    votequorum: simplify reconfigure message handling
    quorumtool: Add option to show all node addresses
    main: Don't ask libqb to handle segv, it doesn't work
    man: Document -a option to corosync-quorumtool
    main: use syslog &amp; printf directly for early log messages
    votequorum: make atb consistent on nodelist reload
    Fix typo: Destorying -&gt; Destroying
    init: Add doc URIs to the systemd service files
    wd: fix typo
    corosync.conf.5: Fix watchdog documentation
    corosync.conf.5: add warning about slow watchdogs
    wd: remove extra capitalization typo
    corosync.conf.5: watchdog support is conditional
    notifyd: Add the community name to an SNMP trap
    Logsys: Change logsys syslog_priority priority
    totemrrp: Fix situation when all rings are faulty
    main: Display reason why cluster cannot be formed
    totem: Propagate totem initialization failure
    totemcrypto: Refactor symmetric key importing
    totemcrypto: Use different method to import key
    main: Add option to set priority
    main: Add support for libcgroup
    totemcrypto: Fix compiler warning
    cmap: Remove noop highest config version check
    qdevice: Add support for heuristics
    Spec: drop unneeded dependency
    Spec: make internal dependencies arch-qualified
    cmap: don't shutdown highest config_version node
    totemudp: Remove memb_join discarding
    Spec: fix arch-qualified dependencies
    Include fcntl.h for F_* and O_* defines
    totemudp: Retry if bind fails
    Remove deprecated doxygen flags
    man: Fix typos in man page
    man: Modify man-page according to command usage
    Remove redundant header file inclusion
    upstart: Add softdog module loading example
    Added:
    corosync-2.4.3.tar.gz
    Removed:
    corosync-2.4.2.tar.gz
    bsc#1047860-add-version.patch
    0001-Logsys-Change-logsys-syslog_priority-priority.patch
    0001-logconfig.c-make-logging.syslog_priority-and-logging.patch
    0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
    0002-Main-call-mlock-after-fork.patch
    0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch
    0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0007-Make-corosync-work-when-FIPS-mode-is-enabled.patch
    0008-main.c-add-option-to-set-priority.patch
    0009-totem-Propagate-totem-initialization-failure.patch
    Modified:
    bsc#1047860-add-version.patch: change version to 2.4.3
    corosync.changes: add changelogs
    corosync.spec: remove unnecessary patches
    Renamed:
    0006-coroapi-Use-size_t-for-private_data_size.patch -&gt; 0001-coroapi-Use-size_t-for-private_data_size.patch
    0010-fix-ifdown-udp.patch -&gt; 0002-fix-ifdown-udp.patch
    0011-fix-tmpfiles-create.patch -&gt; 0003-fix-tmpfiles-create.patch
    0012-mark-corosync-as-a-static-service.patch -&gt; 0004-mark-corosync-as-a-static-service.patch</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0005-do-not-convert-empty-uid-gid-to-0.patch
    Modified: 0005-do-not-convert-empty-uid-gid-to-0.patch,
    check whether the uid, gid is empty before calling strtol</changelog>
  <changelog author="bliu@suse.com" date="1510228800">- gcc: snprintf gives warning: ?%s? directive output may be truncated writing
    8 bytes into a region of size between 1 and 255(bsc#1066090)
    Added: 0006-Fix-compile-warnings-with-GCC-7.2.1.patch</changelog>
  <changelog author="bliu@suse.com" date="1510920000">- corosync race condition when node leaves immediately after joining(bsc#1067958)
    Added: 0007-sync-Call-sync_init-of-all-services-at-once.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="a4a18a17f5553fb390a2afc71d272a160ebb4c6ecfaee36e18f222030bdfc073" name="corosync-testagents" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.5.9.5"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Pablo Bravo &lt;pablo.bravo@suse.com&gt;" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="37e95925e77f400d3c93b2b9c49f962d67ef71fdd678b489a28d7838d95e09bd" name="cpio" arch="i586">
  <version epoch="0" ver="2.12" rel="lp151.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
</package>
<package pkgid="60a5d3837da4331ae71b419cca7b342b5b1840b6abedf64f7bc0f777eddcba99" name="cpio" arch="src">
  <version epoch="0" ver="2.12" rel="lp151.3.3.1"/>
  <changelog author="aj@suse.de" date="1342612800">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="vcizek@suse.com" date="1374580800">- add a missing fix from SLE for bnc#830779 (original bug bnc#658031)
  added paxutils-rtapelib_mtget.patch</changelog>
  <changelog author="vcizek@suse.com" date="1405598400">- prevent cpio from extracting over a symlink (bnc#658010)
  * added cpio-check_for_symlinks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1406635200">- fix a truncation check in mt
  * added cpio-fix_truncation_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1408622400">- drop cpio-dir_perm.patch
  * no longer needed since 2.11
  * it was dropped from Fedora too and only caused problems (bnc#889138)</changelog>
  <changelog author="jengelh@inai.de" date="1409313600">- Improve on RPM group classification (cpio does not compress
  on its own per se)
- Remove redundant %clean section</changelog>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
</package>
<package pkgid="8bf1be2ae8984dfcb3cab4b50e17feb9e5b3df63464af26f4954459e66a34742" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp151.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
</package>
<package pkgid="1d0733e5cbcf27691c87c0074ad9e6034433c880e2ec96ce20ba9551c5ec0f10" name="cpio-lang" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp151.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
</package>
<package pkgid="159282a64d2931cf83acc4301127a44c0ffa9eec5c2ae33956d5f78b31e8bf08" name="cpio-mt" arch="i586">
  <version epoch="0" ver="2.12" rel="lp151.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
</package>
<package pkgid="9c95ea4debc61c9607b4e6575b5a62276060e0a66ce5080e7d7607898f077e54" name="cpio-mt" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp151.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
</package>
<package pkgid="7a27313c5a8b5ddb6c97d1ef8f280b901877c6b6ed4866a0de3b705f2234a893" name="cpp10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp151.2.2"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="fb4f544fb0f8573637d0ed3d308827391e54d23d0bca285497ea4f63208a6667" name="cpp7" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="fadf910843985857ab638b446c17e6275e95d6581fbbfcb3b5224f3b57f4dd29" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="18f07043e1ce4952927f241e63732c4789f7f24254ae62f4750ad1fca58c29a0" name="cpp7" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="ca8c493798540f9caf4a293a90a46e3f8601e1d8493751ee3b3d16c3ef524c1a" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="98e133ba25cf51f31c664191ad496072270e3f5c9336fcc2951b573c412a5d26" name="cpp7" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp151.2.12.1"/>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
</package>
<package pkgid="a5493b8e39a0f3b2c7220775a30f8c10abc76ec2f8710b4ef797377059744394" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp151.2.12.1"/>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
</package>
<package pkgid="84b7139030f2116d6142df96bd41633e92ef6c4840eb2c11fc50678d62324a26" name="cpp7" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp151.2.9.1"/>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
</package>
<package pkgid="e1a9248e351d76a71eac4b885fce672e45e503ebaa6346515367a069d994fafd" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp151.2.9.1"/>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
</package>
<package pkgid="e2251773c65faed3e9504900e111a0f419a065f60fa3adc3977667f5a31e9dfa" name="cpp9" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp151.2.2"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="cf0f48fbd4ae9ebf3eecaa8ddb1963304ea83ce9a4bfd0e653a87414bd944743" name="cpupower" arch="src">
  <version epoch="0" ver="4.19" rel="lp151.2.3.1"/>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1575288000">-  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
  Backporting mainline commits:
  A    cpupower-Move-needs_root-variable-into-a-sub-struct.patch
  A    cpupower-mperf_monitor-Introduce-per_cpu_schedule-flag.patch
  A    cpupower-mperf_monitor-Update-cpupower-to-use-the-RDPRU-instruction.patch</changelog>
  <changelog author="trenn@suse.de" date="1580990400">- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  bsc#1141729
  M rapl_monitor.patch</changelog>
</package>
<package pkgid="6ad1d08c6af185d33f831db5cde3ac68cd16a87d5399e6c12bb69dc02294334c" name="cpupower" arch="x86_64">
  <version epoch="0" ver="4.19" rel="lp151.2.3.1"/>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1575288000">-  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
  Backporting mainline commits:
  A    cpupower-Move-needs_root-variable-into-a-sub-struct.patch
  A    cpupower-mperf_monitor-Introduce-per_cpu_schedule-flag.patch
  A    cpupower-mperf_monitor-Update-cpupower-to-use-the-RDPRU-instruction.patch</changelog>
  <changelog author="trenn@suse.de" date="1580990400">- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  bsc#1141729
  M rapl_monitor.patch</changelog>
</package>
<package pkgid="7baaf24787e2f6cc726c2cb889c1d8752f0c967d10ddc1c47cb22ec3b119c47a" name="cpupower" arch="src">
  <version epoch="0" ver="4.19" rel="lp151.2.6.1"/>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1575288000">-  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
  Backporting mainline commits:
  A    cpupower-Move-needs_root-variable-into-a-sub-struct.patch
  A    cpupower-mperf_monitor-Introduce-per_cpu_schedule-flag.patch
  A    cpupower-mperf_monitor-Update-cpupower-to-use-the-RDPRU-instruction.patch</changelog>
  <changelog author="trenn@suse.de" date="1580990400">- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  bsc#1141729
  M rapl_monitor.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1584705600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch
  Refreshed patches:
  M cpupower-mperf_monitor-Introduce-per_cpu_schedule-flag.patch
  M rapl_monitor.patch</changelog>
</package>
<package pkgid="a6185b2c2a6eb25313151bb642484db40f5c8db05702a4db8a00a14f904f0661" name="cpupower" arch="x86_64">
  <version epoch="0" ver="4.19" rel="lp151.2.6.1"/>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1575288000">-  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
  Backporting mainline commits:
  A    cpupower-Move-needs_root-variable-into-a-sub-struct.patch
  A    cpupower-mperf_monitor-Introduce-per_cpu_schedule-flag.patch
  A    cpupower-mperf_monitor-Update-cpupower-to-use-the-RDPRU-instruction.patch</changelog>
  <changelog author="trenn@suse.de" date="1580990400">- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  bsc#1141729
  M rapl_monitor.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1584705600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch
  Refreshed patches:
  M cpupower-mperf_monitor-Introduce-per_cpu_schedule-flag.patch
  M rapl_monitor.patch</changelog>
</package>
<package pkgid="668af47d34553099049530db2cd5e83e121b497e6e377fb55760dc707d181c77" name="cpupower-bench" arch="x86_64">
  <version epoch="0" ver="4.19" rel="lp151.2.3.1"/>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1575288000">-  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
  Backporting mainline commits:
  A    cpupower-Move-needs_root-variable-into-a-sub-struct.patch
  A    cpupower-mperf_monitor-Introduce-per_cpu_schedule-flag.patch
  A    cpupower-mperf_monitor-Update-cpupower-to-use-the-RDPRU-instruction.patch</changelog>
  <changelog author="trenn@suse.de" date="1580990400">- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  bsc#1141729
  M rapl_monitor.patch</changelog>
</package>
<package pkgid="ce2f98774a5400597ed17f99d8ca81155912e26bf750117e12857becff443525" name="cpupower-bench" arch="x86_64">
  <version epoch="0" ver="4.19" rel="lp151.2.6.1"/>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1575288000">-  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
  Backporting mainline commits:
  A    cpupower-Move-needs_root-variable-into-a-sub-struct.patch
  A    cpupower-mperf_monitor-Introduce-per_cpu_schedule-flag.patch
  A    cpupower-mperf_monitor-Update-cpupower-to-use-the-RDPRU-instruction.patch</changelog>
  <changelog author="trenn@suse.de" date="1580990400">- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  bsc#1141729
  M rapl_monitor.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1584705600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch
  Refreshed patches:
  M cpupower-mperf_monitor-Introduce-per_cpu_schedule-flag.patch
  M rapl_monitor.patch</changelog>
</package>
<package pkgid="34a6fbd04d6a8e5dde1f69d11708247be05ebc8fad583bbdb49c1f4e0176e378" name="cpupower-devel" arch="x86_64">
  <version epoch="0" ver="4.19" rel="lp151.2.3.1"/>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1575288000">-  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
  Backporting mainline commits:
  A    cpupower-Move-needs_root-variable-into-a-sub-struct.patch
  A    cpupower-mperf_monitor-Introduce-per_cpu_schedule-flag.patch
  A    cpupower-mperf_monitor-Update-cpupower-to-use-the-RDPRU-instruction.patch</changelog>
  <changelog author="trenn@suse.de" date="1580990400">- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  bsc#1141729
  M rapl_monitor.patch</changelog>
</package>
<package pkgid="b22a96fcdb4bb46d84dcc28ae87857b1389a631ce82868ddacefc30592727654" name="cpupower-devel" arch="x86_64">
  <version epoch="0" ver="4.19" rel="lp151.2.6.1"/>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1575288000">-  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
  Backporting mainline commits:
  A    cpupower-Move-needs_root-variable-into-a-sub-struct.patch
  A    cpupower-mperf_monitor-Introduce-per_cpu_schedule-flag.patch
  A    cpupower-mperf_monitor-Update-cpupower-to-use-the-RDPRU-instruction.patch</changelog>
  <changelog author="trenn@suse.de" date="1580990400">- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  bsc#1141729
  M rapl_monitor.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1584705600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch
  Refreshed patches:
  M cpupower-mperf_monitor-Introduce-per_cpu_schedule-flag.patch
  M rapl_monitor.patch</changelog>
</package>
<package pkgid="fb80b0b2868a6edd863f6e1b900d92f01b04ebb1661bd7001aafbe09d2c043aa" name="crash" arch="src">
  <version epoch="0" ver="7.2.1" rel="lp151.8.3.1"/>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539000000">- Enabled kmp-rt for SLERT15 SP1</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is a change for SLE15 SP1 only and needs to be updated before merging to
  other codestreams.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573128000">-  Apply initial changes to support kernel address space layout
  randomization (KASLR) for s390X:
    crash-s390-kaslr-minimal-patchset.patch
  Apply fix to allow automated detection of s390x kernels that have
  been configured with CONFIG_RANDOMIZE_BASE=y (KASLR).  Without it
  the "--kaslr=&lt;offset&gt;" command line option is required:
    crash-s390-autodetect-kaslr.patch
  The two patches implement jsc#SLE-9797</changelog>
</package>
<package pkgid="c798ef3219d55ec09feb568d19532eba8dbfc2b8851840dec8d5d9aa9e1a4f18" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp151.8.3.1"/>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539000000">- Enabled kmp-rt for SLERT15 SP1</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is a change for SLE15 SP1 only and needs to be updated before merging to
  other codestreams.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573128000">-  Apply initial changes to support kernel address space layout
  randomization (KASLR) for s390X:
    crash-s390-kaslr-minimal-patchset.patch
  Apply fix to allow automated detection of s390x kernels that have
  been configured with CONFIG_RANDOMIZE_BASE=y (KASLR).  Without it
  the "--kaslr=&lt;offset&gt;" command line option is required:
    crash-s390-autodetect-kaslr.patch
  The two patches implement jsc#SLE-9797</changelog>
</package>
<package pkgid="deb09fc9df260ace57a6228fb1c974a066e2191dc7b85e11480a63885cb31313" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp151.8.3.1"/>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539000000">- Enabled kmp-rt for SLERT15 SP1</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is a change for SLE15 SP1 only and needs to be updated before merging to
  other codestreams.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573128000">-  Apply initial changes to support kernel address space layout
  randomization (KASLR) for s390X:
    crash-s390-kaslr-minimal-patchset.patch
  Apply fix to allow automated detection of s390x kernels that have
  been configured with CONFIG_RANDOMIZE_BASE=y (KASLR).  Without it
  the "--kaslr=&lt;offset&gt;" command line option is required:
    crash-s390-autodetect-kaslr.patch
  The two patches implement jsc#SLE-9797</changelog>
</package>
<package pkgid="89a4b9b408af6ac23465e1ece8fb655406b150757e958becd18488263be12080" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp151.8.3.1"/>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539000000">- Enabled kmp-rt for SLERT15 SP1</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is a change for SLE15 SP1 only and needs to be updated before merging to
  other codestreams.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573128000">-  Apply initial changes to support kernel address space layout
  randomization (KASLR) for s390X:
    crash-s390-kaslr-minimal-patchset.patch
  Apply fix to allow automated detection of s390x kernels that have
  been configured with CONFIG_RANDOMIZE_BASE=y (KASLR).  Without it
  the "--kaslr=&lt;offset&gt;" command line option is required:
    crash-s390-autodetect-kaslr.patch
  The two patches implement jsc#SLE-9797</changelog>
</package>
<package pkgid="d8f2e7a2a3b86c13fada25e89e5fe3829604d635426e873d035d3868a8b91468" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp151.8.3.1"/>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539000000">- Enabled kmp-rt for SLERT15 SP1</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is a change for SLE15 SP1 only and needs to be updated before merging to
  other codestreams.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573128000">-  Apply initial changes to support kernel address space layout
  randomization (KASLR) for s390X:
    crash-s390-kaslr-minimal-patchset.patch
  Apply fix to allow automated detection of s390x kernels that have
  been configured with CONFIG_RANDOMIZE_BASE=y (KASLR).  Without it
  the "--kaslr=&lt;offset&gt;" command line option is required:
    crash-s390-autodetect-kaslr.patch
  The two patches implement jsc#SLE-9797</changelog>
</package>
<package pkgid="27f6e7b1df84d4552f12fff12322c511c883f3aef650f37ec005826ba6ddd8b3" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp151.8.3.1"/>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539000000">- Enabled kmp-rt for SLERT15 SP1</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is a change for SLE15 SP1 only and needs to be updated before merging to
  other codestreams.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573128000">-  Apply initial changes to support kernel address space layout
  randomization (KASLR) for s390X:
    crash-s390-kaslr-minimal-patchset.patch
  Apply fix to allow automated detection of s390x kernels that have
  been configured with CONFIG_RANDOMIZE_BASE=y (KASLR).  Without it
  the "--kaslr=&lt;offset&gt;" command line option is required:
    crash-s390-autodetect-kaslr.patch
  The two patches implement jsc#SLE-9797</changelog>
</package>
<package pkgid="4d2aaf5adfe47bc12f1541d92b6ab13b77dff39d3965cb3757d3db3b9e6afcde" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.1_k4.12.14_lp151.28.36" rel="lp151.8.3.1"/>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539000000">- Enabled kmp-rt for SLERT15 SP1</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is a change for SLE15 SP1 only and needs to be updated before merging to
  other codestreams.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573128000">-  Apply initial changes to support kernel address space layout
  randomization (KASLR) for s390X:
    crash-s390-kaslr-minimal-patchset.patch
  Apply fix to allow automated detection of s390x kernels that have
  been configured with CONFIG_RANDOMIZE_BASE=y (KASLR).  Without it
  the "--kaslr=&lt;offset&gt;" command line option is required:
    crash-s390-autodetect-kaslr.patch
  The two patches implement jsc#SLE-9797</changelog>
</package>
<package pkgid="ff3d44ac516a0c79f9c6764692b13ba34e861896c72c38181d39c2a176f8dfb8" name="crawl" arch="src">
  <version epoch="0" ver="0.24.0" rel="lp151.3.3.2"/>
  <changelog author="bemyak@gmail.com" date="1426507200">- Source URL corrected</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Add a comment to the .desktop file (minimal requirement to show
  up in AppStream based software centers).</changelog>
  <changelog author="bemyak@gmail.com" date="1428753600">- Updated crawl to 0.16.1
- Source archive is now downloaded directly from crawl's website</changelog>
  <changelog author="bemyak@gmail.com" date="1428840000">- Removed _service, source archive is now attached directly</changelog>
  <changelog author="bemyak@gmail.com" date="1440417600">- Updated to 0.16.2 (bugfix release)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1440676800">- for ppc64le architecture disable __ALTIVEC__ to avoid build error
  to avoid contention between SDL vector and gcc defines</changelog>
  <changelog author="bemyak@gmail.com" date="1447070400">- Updated to 0.17.0</changelog>
  <changelog author="bemyak@gmail.com" date="1450094400">- Updated to 0.17.1</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Added fdupes and fixed usage of __DATE__ and __TIME__</changelog>
  <changelog author="opensuse@dstoecker.de" date="1451736000">- do not compile date and time into the binary
  (crawl-0.17.1-datetime.patch)</changelog>
  <changelog author="steevstevep@gmail.com" date="1462795200">- Update to 0.18.1</changelog>
  <changelog author="mailaender@opensuse.org" date="1487419200">- Update to version 0.19.4
- Add desktop.patch for a menu starter
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore
- Add icon.patch for installing a SVG icon</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- On platforms &gt; Leap 42.x/SLE12, require user(games) and
  group(games) instead of creating the user/group in pre.</changelog>
  <changelog author="rpm@fthiessen.de" date="1499342400">- Update to 0.20.1</changelog>
  <changelog author="jon@moozaad.co.uk" date="1531569600">- Update to 0.21.1</changelog>
  <changelog author="jon@moozaad.co.uk" date="1533902400">- Update to 0.22.0
  * Player ghosts now only appear in sealed ghost vaults
  * New spell library interface
  * User interface revamp for Tiles and WebTiles</changelog>
  <changelog author="rpm@fthiessen.de" date="1535198400">- Spec cleanup
  * Dropped defattr as more recent rpms add a default %defattr line
    if none is present in the rpm %files section
- Fixed source (used corret one from upstream)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1563710400">- Update to version 0.23.2
  * Trap system overhaul
  * New Gauntlet portal to replace Labyrinths
  * Nemelex Xobeh rework
  * Nine unrandarts reworked and the new "Rift" unrandart added
  * Support for seeded dungeon play
  * build requires python and python-pyYAML</changelog>
  <changelog author="Jon Brightwell &lt;jon@moozaad.co.uk&gt;" date="1584532800">- Update to version 0.24.0
  * Vampire species simplified
  * Thrown weapons streamlined
  * Fedhas reimagined
  * Sif Muna reworked
- removed crawl-0.17.1-datetime.patch as fixed upstream</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1586865600">- Added CVE-2020-11722.patch to fix CVE-2020-11722, boo#1169381
  * Fixes a remote code evaluation issue with lua loadstring</changelog>
</package>
<package pkgid="3c793c8d5188dff1db1e4d6bc753556934a7c2e1360ffc482207d9187ffe01c1" name="crawl" arch="x86_64">
  <version epoch="0" ver="0.24.0" rel="lp151.3.3.2"/>
  <changelog author="bemyak@gmail.com" date="1426507200">- Source URL corrected</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Add a comment to the .desktop file (minimal requirement to show
  up in AppStream based software centers).</changelog>
  <changelog author="bemyak@gmail.com" date="1428753600">- Updated crawl to 0.16.1
- Source archive is now downloaded directly from crawl's website</changelog>
  <changelog author="bemyak@gmail.com" date="1428840000">- Removed _service, source archive is now attached directly</changelog>
  <changelog author="bemyak@gmail.com" date="1440417600">- Updated to 0.16.2 (bugfix release)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1440676800">- for ppc64le architecture disable __ALTIVEC__ to avoid build error
  to avoid contention between SDL vector and gcc defines</changelog>
  <changelog author="bemyak@gmail.com" date="1447070400">- Updated to 0.17.0</changelog>
  <changelog author="bemyak@gmail.com" date="1450094400">- Updated to 0.17.1</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Added fdupes and fixed usage of __DATE__ and __TIME__</changelog>
  <changelog author="opensuse@dstoecker.de" date="1451736000">- do not compile date and time into the binary
  (crawl-0.17.1-datetime.patch)</changelog>
  <changelog author="steevstevep@gmail.com" date="1462795200">- Update to 0.18.1</changelog>
  <changelog author="mailaender@opensuse.org" date="1487419200">- Update to version 0.19.4
- Add desktop.patch for a menu starter
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore
- Add icon.patch for installing a SVG icon</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- On platforms &gt; Leap 42.x/SLE12, require user(games) and
  group(games) instead of creating the user/group in pre.</changelog>
  <changelog author="rpm@fthiessen.de" date="1499342400">- Update to 0.20.1</changelog>
  <changelog author="jon@moozaad.co.uk" date="1531569600">- Update to 0.21.1</changelog>
  <changelog author="jon@moozaad.co.uk" date="1533902400">- Update to 0.22.0
  * Player ghosts now only appear in sealed ghost vaults
  * New spell library interface
  * User interface revamp for Tiles and WebTiles</changelog>
  <changelog author="rpm@fthiessen.de" date="1535198400">- Spec cleanup
  * Dropped defattr as more recent rpms add a default %defattr line
    if none is present in the rpm %files section
- Fixed source (used corret one from upstream)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1563710400">- Update to version 0.23.2
  * Trap system overhaul
  * New Gauntlet portal to replace Labyrinths
  * Nemelex Xobeh rework
  * Nine unrandarts reworked and the new "Rift" unrandart added
  * Support for seeded dungeon play
  * build requires python and python-pyYAML</changelog>
  <changelog author="Jon Brightwell &lt;jon@moozaad.co.uk&gt;" date="1584532800">- Update to version 0.24.0
  * Vampire species simplified
  * Thrown weapons streamlined
  * Fedhas reimagined
  * Sif Muna reworked
- removed crawl-0.17.1-datetime.patch as fixed upstream</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1586865600">- Added CVE-2020-11722.patch to fix CVE-2020-11722, boo#1169381
  * Fixes a remote code evaluation issue with lua loadstring</changelog>
</package>
<package pkgid="f5b9dc917af459e87543ba244422dd576988ddabde6e05d80de8b58034badb6e" name="crawl-data" arch="noarch">
  <version epoch="0" ver="0.24.0" rel="lp151.3.3.2"/>
  <changelog author="bemyak@gmail.com" date="1426507200">- Source URL corrected</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Add a comment to the .desktop file (minimal requirement to show
  up in AppStream based software centers).</changelog>
  <changelog author="bemyak@gmail.com" date="1428753600">- Updated crawl to 0.16.1
- Source archive is now downloaded directly from crawl's website</changelog>
  <changelog author="bemyak@gmail.com" date="1428840000">- Removed _service, source archive is now attached directly</changelog>
  <changelog author="bemyak@gmail.com" date="1440417600">- Updated to 0.16.2 (bugfix release)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1440676800">- for ppc64le architecture disable __ALTIVEC__ to avoid build error
  to avoid contention between SDL vector and gcc defines</changelog>
  <changelog author="bemyak@gmail.com" date="1447070400">- Updated to 0.17.0</changelog>
  <changelog author="bemyak@gmail.com" date="1450094400">- Updated to 0.17.1</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Added fdupes and fixed usage of __DATE__ and __TIME__</changelog>
  <changelog author="opensuse@dstoecker.de" date="1451736000">- do not compile date and time into the binary
  (crawl-0.17.1-datetime.patch)</changelog>
  <changelog author="steevstevep@gmail.com" date="1462795200">- Update to 0.18.1</changelog>
  <changelog author="mailaender@opensuse.org" date="1487419200">- Update to version 0.19.4
- Add desktop.patch for a menu starter
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore
- Add icon.patch for installing a SVG icon</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- On platforms &gt; Leap 42.x/SLE12, require user(games) and
  group(games) instead of creating the user/group in pre.</changelog>
  <changelog author="rpm@fthiessen.de" date="1499342400">- Update to 0.20.1</changelog>
  <changelog author="jon@moozaad.co.uk" date="1531569600">- Update to 0.21.1</changelog>
  <changelog author="jon@moozaad.co.uk" date="1533902400">- Update to 0.22.0
  * Player ghosts now only appear in sealed ghost vaults
  * New spell library interface
  * User interface revamp for Tiles and WebTiles</changelog>
  <changelog author="rpm@fthiessen.de" date="1535198400">- Spec cleanup
  * Dropped defattr as more recent rpms add a default %defattr line
    if none is present in the rpm %files section
- Fixed source (used corret one from upstream)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1563710400">- Update to version 0.23.2
  * Trap system overhaul
  * New Gauntlet portal to replace Labyrinths
  * Nemelex Xobeh rework
  * Nine unrandarts reworked and the new "Rift" unrandart added
  * Support for seeded dungeon play
  * build requires python and python-pyYAML</changelog>
  <changelog author="Jon Brightwell &lt;jon@moozaad.co.uk&gt;" date="1584532800">- Update to version 0.24.0
  * Vampire species simplified
  * Thrown weapons streamlined
  * Fedhas reimagined
  * Sif Muna reworked
- removed crawl-0.17.1-datetime.patch as fixed upstream</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1586865600">- Added CVE-2020-11722.patch to fix CVE-2020-11722, boo#1169381
  * Fixes a remote code evaluation issue with lua loadstring</changelog>
</package>
<package pkgid="846faf8f3570b73637c2b1a0950611b6fb1f4517e04b0dff9de39f1675541871" name="crawl-sdl" arch="x86_64">
  <version epoch="0" ver="0.24.0" rel="lp151.3.3.2"/>
  <changelog author="bemyak@gmail.com" date="1426507200">- Source URL corrected</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Add a comment to the .desktop file (minimal requirement to show
  up in AppStream based software centers).</changelog>
  <changelog author="bemyak@gmail.com" date="1428753600">- Updated crawl to 0.16.1
- Source archive is now downloaded directly from crawl's website</changelog>
  <changelog author="bemyak@gmail.com" date="1428840000">- Removed _service, source archive is now attached directly</changelog>
  <changelog author="bemyak@gmail.com" date="1440417600">- Updated to 0.16.2 (bugfix release)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1440676800">- for ppc64le architecture disable __ALTIVEC__ to avoid build error
  to avoid contention between SDL vector and gcc defines</changelog>
  <changelog author="bemyak@gmail.com" date="1447070400">- Updated to 0.17.0</changelog>
  <changelog author="bemyak@gmail.com" date="1450094400">- Updated to 0.17.1</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Added fdupes and fixed usage of __DATE__ and __TIME__</changelog>
  <changelog author="opensuse@dstoecker.de" date="1451736000">- do not compile date and time into the binary
  (crawl-0.17.1-datetime.patch)</changelog>
  <changelog author="steevstevep@gmail.com" date="1462795200">- Update to 0.18.1</changelog>
  <changelog author="mailaender@opensuse.org" date="1487419200">- Update to version 0.19.4
- Add desktop.patch for a menu starter
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore
- Add icon.patch for installing a SVG icon</changelog>
  <changelog author="dimstar@opensuse.org" date="1494936000">- On platforms &gt; Leap 42.x/SLE12, require user(games) and
  group(games) instead of creating the user/group in pre.</changelog>
  <changelog author="rpm@fthiessen.de" date="1499342400">- Update to 0.20.1</changelog>
  <changelog author="jon@moozaad.co.uk" date="1531569600">- Update to 0.21.1</changelog>
  <changelog author="jon@moozaad.co.uk" date="1533902400">- Update to 0.22.0
  * Player ghosts now only appear in sealed ghost vaults
  * New spell library interface
  * User interface revamp for Tiles and WebTiles</changelog>
  <changelog author="rpm@fthiessen.de" date="1535198400">- Spec cleanup
  * Dropped defattr as more recent rpms add a default %defattr line
    if none is present in the rpm %files section
- Fixed source (used corret one from upstream)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1563710400">- Update to version 0.23.2
  * Trap system overhaul
  * New Gauntlet portal to replace Labyrinths
  * Nemelex Xobeh rework
  * Nine unrandarts reworked and the new "Rift" unrandart added
  * Support for seeded dungeon play
  * build requires python and python-pyYAML</changelog>
  <changelog author="Jon Brightwell &lt;jon@moozaad.co.uk&gt;" date="1584532800">- Update to version 0.24.0
  * Vampire species simplified
  * Thrown weapons streamlined
  * Fedhas reimagined
  * Sif Muna reworked
- removed crawl-0.17.1-datetime.patch as fixed upstream</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1586865600">- Added CVE-2020-11722.patch to fix CVE-2020-11722, boo#1169381
  * Fixes a remote code evaluation issue with lua loadstring</changelog>
</package>
<package pkgid="89e5058db261b7ca80c461edd82802350ed9db26226b88f1b06a9e8928971e68" name="cri-o" arch="src">
  <version epoch="0" ver="1.17.1" rel="lp151.2.2"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568116800">- Update to v1.15.2:
  * Use HTTP2MatchHeaderFieldSendSettings for incoming gRPC connections
  * Fix 32 bit builds
  * crio-wipe: Fix int compare in lib.bash</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1570449600">- Fix default apparmor profile to match the latest version</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1571918400">- Switch to `systemd` cgroup manager in replacement for `cgroupfs`</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1573473600">- Switch to `systemd` cgroup driver in kubelet config also</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573732800">- Add crio and crio-status shell completions
- Add crio-wipe and crio-shutdown services
- Update kubelet verbosity to `-v=2`
- Update conmon cgroup to `system.slice`
- Update crio.conf to match latest version
- Update to v1.16.0:
  * Major Changes
  * Add support for manifest lists
  * Dual stack IPv6 support
  * HUP reload of SystemRegistries
  * file_locking is no longer a supported option in the
    configuration file
  * Hooks are no longer found implicitally.
  * conmon now lives in a separate repository and must be
    downloaded separately.
  * Minor
  * All OCI mounts are mounted as rw when a pod is privileged
  * CRI-O can now run on a cgroupv2 system (only with the runtime
    crun)
  * Add environment variables to CLI flags
  * Add crio-status client to conveniently query status of crio
    or a container
  * Conmon is now found in $PATH if a path isn't specified or is
    empty
  * Add metrics to configuration file
  * Bandwidth burst can only be 4GB
  * If another container manager shares CRI-O's storage (like
    podman), CRI-O no longer attempts to restore them
  * Increase validation for log_dir and runtime_type in
    configuration
  * Allow usage of short container ID in ContainerStats
  * Make image volumes writeable by the container user
  * Various man page fixes
  * The crio-wipe script is now included in the crio binary (as
    crio wipe), and only removes CRI-O containers and images.
  * Set some previously public packages as internal (client, lib,
    oci, pkg, tools, version)
  * infra container now spawned as not privileged</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573819200">- Use single service macro invocation
- Add shell completions directories to files</changelog>
  <changelog author="David Cassany &lt;dcassany@suse.com&gt;" date="1574164800">- Revert cgroup_manager from systemd to cgroupsfs for SLE15
  k8s default is cgroupfs and in can be modified at runtime by the
  `--kubelet-cgroups` flag. However this flag is deprecated and
  avoinding it is currently preferred over introducing it. In order
  to switch to systemd as the cgroups manager in SLE15 further analysis is
  required to find a suitable configuration strategy.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1574769600">- switch to libcontainers-common requires, as the other two are
  provided by it already (avant-garde#1056)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1574856000">- Update to v1.16.1:
  * Add manifest list support
  * Default to system.slice for conmon cgroup
  * Don't set PodIPs on host network pods</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1576584000">- Make cgroup-driver for kubelet be cgroupfs for SLE to be consistent
  with the cri-o configuration</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1578657600">- Add prevent-local-loopback-teardown-rh1754154.patch to stop local loopback interfaces being torndown before cluster is bootstrapped</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579176000">- Removed the usage of `name_` variables to reduce the error
  proneness
- Fixed systemd unit install locations for crio-wipe.service and
  crio-shutdown.service (bsc#1161056)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579176001">- Include system proxy settings in service if present (bsc#1155323)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579348800">- Fix invalid apparmor profile (bsc#1161179)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581336000">- Remove prevent-local-loopback-teardown-rh1754154.patch which is
  now included in upstream
- Update to v1.17.0:
  * Major Changes
  - Allow CRI-O to manage IPC and UTS namespaces, in addition to
    Network
  - Add support for drop-in configuration files
  - Added image pull and network setup metrics
  - Image decryption support
  - Remove unneeded host_ip configuration value
  * Minor Changes
  - Setup container environment variables before user
  - Move default version file location to a tmpfs
  - Failures to stop the network will now cause a stop sandbox
    request to fail
  - Persist container exit codes across reboot
  - Add conmonmon: a conmon monitoring loop to protect against
    conmon being OOM'd
  - Add namespaces{-_}dir CLI and config option
  - Add disk usage for ListContainerStats
  - Introduce new runtime field to restrict devices in privileged
    mode</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581336001">- Uncomment default apparmor profile to always fallback to the
  default one</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581336002">- Put default configuration in /etc/crio/crio.conf.d/00-default.conf
  in replacement for /etc/crio/crio.conf</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1584360000">- Update to v1.17.1:
  * Drop conmonmon
  * Update docs and completions for crio wipe --force
  * wipe: Add a force flag for skipping version check
  * Restore sandbox selinux labels directly from config.json
  * klog: don't write to /tmp
  * Pass down the integer value of the stop signal
  * exec: Close pipe fds to prevent hangs
  * Unwrap errors from label.Relabel() before checking for ENOTSUP
  * oci: Handle timeouts correctly for probes</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1585310400">- Use new pause:3.2 image</changelog>
</package>
<package pkgid="0f13b094ee345293e07e6be0f8b10ba6ff955eb3f677b1bc93abda799752322a" name="cri-o" arch="x86_64">
  <version epoch="0" ver="1.17.1" rel="lp151.2.2"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568116800">- Update to v1.15.2:
  * Use HTTP2MatchHeaderFieldSendSettings for incoming gRPC connections
  * Fix 32 bit builds
  * crio-wipe: Fix int compare in lib.bash</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1570449600">- Fix default apparmor profile to match the latest version</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1571918400">- Switch to `systemd` cgroup manager in replacement for `cgroupfs`</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1573473600">- Switch to `systemd` cgroup driver in kubelet config also</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573732800">- Add crio and crio-status shell completions
- Add crio-wipe and crio-shutdown services
- Update kubelet verbosity to `-v=2`
- Update conmon cgroup to `system.slice`
- Update crio.conf to match latest version
- Update to v1.16.0:
  * Major Changes
  * Add support for manifest lists
  * Dual stack IPv6 support
  * HUP reload of SystemRegistries
  * file_locking is no longer a supported option in the
    configuration file
  * Hooks are no longer found implicitally.
  * conmon now lives in a separate repository and must be
    downloaded separately.
  * Minor
  * All OCI mounts are mounted as rw when a pod is privileged
  * CRI-O can now run on a cgroupv2 system (only with the runtime
    crun)
  * Add environment variables to CLI flags
  * Add crio-status client to conveniently query status of crio
    or a container
  * Conmon is now found in $PATH if a path isn't specified or is
    empty
  * Add metrics to configuration file
  * Bandwidth burst can only be 4GB
  * If another container manager shares CRI-O's storage (like
    podman), CRI-O no longer attempts to restore them
  * Increase validation for log_dir and runtime_type in
    configuration
  * Allow usage of short container ID in ContainerStats
  * Make image volumes writeable by the container user
  * Various man page fixes
  * The crio-wipe script is now included in the crio binary (as
    crio wipe), and only removes CRI-O containers and images.
  * Set some previously public packages as internal (client, lib,
    oci, pkg, tools, version)
  * infra container now spawned as not privileged</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573819200">- Use single service macro invocation
- Add shell completions directories to files</changelog>
  <changelog author="David Cassany &lt;dcassany@suse.com&gt;" date="1574164800">- Revert cgroup_manager from systemd to cgroupsfs for SLE15
  k8s default is cgroupfs and in can be modified at runtime by the
  `--kubelet-cgroups` flag. However this flag is deprecated and
  avoinding it is currently preferred over introducing it. In order
  to switch to systemd as the cgroups manager in SLE15 further analysis is
  required to find a suitable configuration strategy.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1574769600">- switch to libcontainers-common requires, as the other two are
  provided by it already (avant-garde#1056)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1574856000">- Update to v1.16.1:
  * Add manifest list support
  * Default to system.slice for conmon cgroup
  * Don't set PodIPs on host network pods</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1576584000">- Make cgroup-driver for kubelet be cgroupfs for SLE to be consistent
  with the cri-o configuration</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1578657600">- Add prevent-local-loopback-teardown-rh1754154.patch to stop local loopback interfaces being torndown before cluster is bootstrapped</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579176000">- Removed the usage of `name_` variables to reduce the error
  proneness
- Fixed systemd unit install locations for crio-wipe.service and
  crio-shutdown.service (bsc#1161056)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579176001">- Include system proxy settings in service if present (bsc#1155323)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579348800">- Fix invalid apparmor profile (bsc#1161179)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581336000">- Remove prevent-local-loopback-teardown-rh1754154.patch which is
  now included in upstream
- Update to v1.17.0:
  * Major Changes
  - Allow CRI-O to manage IPC and UTS namespaces, in addition to
    Network
  - Add support for drop-in configuration files
  - Added image pull and network setup metrics
  - Image decryption support
  - Remove unneeded host_ip configuration value
  * Minor Changes
  - Setup container environment variables before user
  - Move default version file location to a tmpfs
  - Failures to stop the network will now cause a stop sandbox
    request to fail
  - Persist container exit codes across reboot
  - Add conmonmon: a conmon monitoring loop to protect against
    conmon being OOM'd
  - Add namespaces{-_}dir CLI and config option
  - Add disk usage for ListContainerStats
  - Introduce new runtime field to restrict devices in privileged
    mode</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581336001">- Uncomment default apparmor profile to always fallback to the
  default one</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581336002">- Put default configuration in /etc/crio/crio.conf.d/00-default.conf
  in replacement for /etc/crio/crio.conf</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1584360000">- Update to v1.17.1:
  * Drop conmonmon
  * Update docs and completions for crio wipe --force
  * wipe: Add a force flag for skipping version check
  * Restore sandbox selinux labels directly from config.json
  * klog: don't write to /tmp
  * Pass down the integer value of the stop signal
  * exec: Close pipe fds to prevent hangs
  * Unwrap errors from label.Relabel() before checking for ENOTSUP
  * oci: Handle timeouts correctly for probes</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1585310400">- Use new pause:3.2 image</changelog>
</package>
<package pkgid="7a72c10093a02d5b36f11138b66e191a64901d91fe6e0618447f26f0a7f4ddce" name="cri-o-kubeadm-criconfig" arch="x86_64">
  <version epoch="0" ver="1.17.1" rel="lp151.2.2"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568116800">- Update to v1.15.2:
  * Use HTTP2MatchHeaderFieldSendSettings for incoming gRPC connections
  * Fix 32 bit builds
  * crio-wipe: Fix int compare in lib.bash</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1570449600">- Fix default apparmor profile to match the latest version</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1571918400">- Switch to `systemd` cgroup manager in replacement for `cgroupfs`</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1573473600">- Switch to `systemd` cgroup driver in kubelet config also</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573732800">- Add crio and crio-status shell completions
- Add crio-wipe and crio-shutdown services
- Update kubelet verbosity to `-v=2`
- Update conmon cgroup to `system.slice`
- Update crio.conf to match latest version
- Update to v1.16.0:
  * Major Changes
  * Add support for manifest lists
  * Dual stack IPv6 support
  * HUP reload of SystemRegistries
  * file_locking is no longer a supported option in the
    configuration file
  * Hooks are no longer found implicitally.
  * conmon now lives in a separate repository and must be
    downloaded separately.
  * Minor
  * All OCI mounts are mounted as rw when a pod is privileged
  * CRI-O can now run on a cgroupv2 system (only with the runtime
    crun)
  * Add environment variables to CLI flags
  * Add crio-status client to conveniently query status of crio
    or a container
  * Conmon is now found in $PATH if a path isn't specified or is
    empty
  * Add metrics to configuration file
  * Bandwidth burst can only be 4GB
  * If another container manager shares CRI-O's storage (like
    podman), CRI-O no longer attempts to restore them
  * Increase validation for log_dir and runtime_type in
    configuration
  * Allow usage of short container ID in ContainerStats
  * Make image volumes writeable by the container user
  * Various man page fixes
  * The crio-wipe script is now included in the crio binary (as
    crio wipe), and only removes CRI-O containers and images.
  * Set some previously public packages as internal (client, lib,
    oci, pkg, tools, version)
  * infra container now spawned as not privileged</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573819200">- Use single service macro invocation
- Add shell completions directories to files</changelog>
  <changelog author="David Cassany &lt;dcassany@suse.com&gt;" date="1574164800">- Revert cgroup_manager from systemd to cgroupsfs for SLE15
  k8s default is cgroupfs and in can be modified at runtime by the
  `--kubelet-cgroups` flag. However this flag is deprecated and
  avoinding it is currently preferred over introducing it. In order
  to switch to systemd as the cgroups manager in SLE15 further analysis is
  required to find a suitable configuration strategy.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1574769600">- switch to libcontainers-common requires, as the other two are
  provided by it already (avant-garde#1056)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1574856000">- Update to v1.16.1:
  * Add manifest list support
  * Default to system.slice for conmon cgroup
  * Don't set PodIPs on host network pods</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1576584000">- Make cgroup-driver for kubelet be cgroupfs for SLE to be consistent
  with the cri-o configuration</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1578657600">- Add prevent-local-loopback-teardown-rh1754154.patch to stop local loopback interfaces being torndown before cluster is bootstrapped</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579176000">- Removed the usage of `name_` variables to reduce the error
  proneness
- Fixed systemd unit install locations for crio-wipe.service and
  crio-shutdown.service (bsc#1161056)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579176001">- Include system proxy settings in service if present (bsc#1155323)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579348800">- Fix invalid apparmor profile (bsc#1161179)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581336000">- Remove prevent-local-loopback-teardown-rh1754154.patch which is
  now included in upstream
- Update to v1.17.0:
  * Major Changes
  - Allow CRI-O to manage IPC and UTS namespaces, in addition to
    Network
  - Add support for drop-in configuration files
  - Added image pull and network setup metrics
  - Image decryption support
  - Remove unneeded host_ip configuration value
  * Minor Changes
  - Setup container environment variables before user
  - Move default version file location to a tmpfs
  - Failures to stop the network will now cause a stop sandbox
    request to fail
  - Persist container exit codes across reboot
  - Add conmonmon: a conmon monitoring loop to protect against
    conmon being OOM'd
  - Add namespaces{-_}dir CLI and config option
  - Add disk usage for ListContainerStats
  - Introduce new runtime field to restrict devices in privileged
    mode</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581336001">- Uncomment default apparmor profile to always fallback to the
  default one</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581336002">- Put default configuration in /etc/crio/crio.conf.d/00-default.conf
  in replacement for /etc/crio/crio.conf</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1584360000">- Update to v1.17.1:
  * Drop conmonmon
  * Update docs and completions for crio wipe --force
  * wipe: Add a force flag for skipping version check
  * Restore sandbox selinux labels directly from config.json
  * klog: don't write to /tmp
  * Pass down the integer value of the stop signal
  * exec: Close pipe fds to prevent hangs
  * Unwrap errors from label.Relabel() before checking for ENOTSUP
  * oci: Handle timeouts correctly for probes</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1585310400">- Use new pause:3.2 image</changelog>
</package>
<package pkgid="0e38d40e2af34245366d5404802ff2365126f10e788feef0573360e22cd91ddf" name="cri-tools" arch="src">
  <version epoch="0" ver="1.18.0" rel="lp151.2.1"/>
  <changelog author="vrothberg@suse.com" date="1518436800">- Add cri-tools packaging for debugging and validating tools for the Kubelet
  CRI, including the tools crictl and critest.</changelog>
  <changelog author="jengelh@inai.de" date="1518609600">- Description shall say what the software does now, not in the
  future.</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Change buildtime requirement of go-md2man: use go-go-md2man to ensure
  package builds on IBS against sle12sp3. This change won't affect openSUSE</changelog>
  <changelog author="vrothberg@suse.com" date="1520251200">- Use cri-tools v1.0.0-alpha.0 to be compatible to cri-o v1.9.x.</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="vrothberg@suse.com" date="1529064000">- Bump cri-tools to v1.0.0-beta.1 (CRI v1.10.x):
  * crictl: allow short option handling
  * crictl-exec: fix argument parsing
  * Update documentation
  * Kubernetes/CRI 1.10.x compatibility
  * Minor bug fixe</changelog>
  <changelog author="vrothberg@suse.com" date="1533211200">- Bump cri-tools to v1.11.1:
  * versioning is now consistent with Kubernetes
  * Fix argument parsing for crictl exec
  * Improved documentation
  * Multi-arch critest tests
  * Filter pods with prefix matching of name and namespace
  * Improve terminal support for exec and attach</changelog>
  <changelog author="vrothberg@suse.com" date="1534161600">- Generate and install bash completion for crictl.
- Provide /etc/crictl.yaml config.
  bsc#1104598</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1538481600">- Bump cri-tools to v1.12.0:
  * Properly returns errors when the output format is not supported
  * Show concise image info for crictl ps
  * Fixes crictl ps and crictl pods
  * Adds podID in output of crictl ps
  * Adds sandbox config to image pull
  * Fixes unmarshal issues in crictl inspecti
  * Fixes timeout for grpc dialer
  * Adds new test to critest for privileged container</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542110400">- crictl/critest: compile version
- Require golang &gt;= 1.10.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1544788800">- Update cri-tools to v1.13.0:
  * CRI CLI (crictl):
  * Adds --auth options for pull command
  * Fixes URL parsing for exec and attach
  * Upgrades Go version to 1.11.1
  * Enables Windows CI on travis
  * Switches Windows default endpoints to npipe
  * Updates version matrix information for the project
  * Adds container name filter to ps command
  * Adds metadata to filters
  * Prints annotations and labels for inspect command
  * CRI validation testing (critest)
  * Add tests for multiple containers in a pod
  * Adds runtime handler support for critest
  * Adds exec sync timeout test cases
  * Fixes readonly filesystem test cases
- Add `crictl.yaml` to install directory
- Fix build for ppc64
- Require golang &gt;= 1.11</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1545048000">- Added `rpmlintrc` to spec file</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553515200">- Update cri-tools to v1.14.0:
  * CRI CLI (crictl)
  * Adds imagefsinfo subcommand for CRI ImageFSInfo() method.
  * Adds support to filter containers by image.
  * Fixes a bug when removing multiple containers.
  * Reduces the default connection timeout value.
  * Fixes the exit code for crictl exec.
  * Updated the instructions fro godep.
  * Adds support of -q for crictl info.
  * Adds support of zsh completion.
  * Upgrades kubernetes version to 1.14.
  * CRI validation testing (critest)
  * Adds a benchmark testcase for measuring the time of creating pod and a
    container.
  * Changes streaming tests to omit newlines on echo
  * Adds support of critest for Windows container runtime.
  * Updates test environment to xenial and fixes docker installation.
  * Updates Go version to 1.12.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1562241600">- Update cri-tools to v1.15.0:
  * Add registry prefix option
  * Revert "Skip test "image status should support all kinds of references" for docker runtime"
  * Upgrade Kuberntes version to v1.15.0
  * Fix typo in parallel
  * Skip test "image status should support all kinds of references" since dockershim doesn't support it
  * Fallback to repo digest name if repoTag is &lt;none&gt;:&lt;none&gt;
  * feature: add display; support live monitoring critool stats
  * Test image status for various references.
  * fix debug in config file
  * Update `rmp` to test for running sandbox
  * Fix logDirectory typo in examples.
  * Search program directory for config as fallback
  * Improve error message for failed to connect
  * Set SelinuxRelabel to true for bind mounts
  * Include gcs bucket release.
  * Use same version as previous example
  * Add `curl` to download example</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1562241601">- Update golang(API) requiremnt to 1.12</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568721600">- Update to v1.16.0:
  * crictl:
  * Add container 'run' subcommand.
  * Pull image on container creation.
  * Treat first crictl stats argument as filter ID.
  * Add -a (remove all) option to rmp.
  * Create directory for config file.
  * Add container rm --force, -f and --all, -a flags.
  * Add images aliases image, img.
  * Add --all, -a flag to image removal (rmi).
  * Update Kubernetes vendors to 1.16.0 and add addiontion IPs for Pods.
  * critest:
  * Add registry prefix option.
  * Add test for MaskedPaths and ReadonlyPaths.
  * Switch to multi-arch nonewprivs image.
  * Use arch specific hostnet-nginx image.
  * Use a dedicated image for all reference test.
  * Use IsAppArmorEnabled of Kubernetes instead of local one.
  * Fix exec test timeout issues.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1569499200">- Update to v1.16.1:
  * crictl:
  * Fix empty fields in crictl inspect(p/i) result.
  * Pass pod config when pulling image during container creation.
  * Fix crictl stats panic.
  * critest
  * Skip hostnetwork portforward test on windows.
  * Add hostname test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Update to v1.17.0:
  * crictl
  * Bump cri-tools version in markdown docs
  * Vendor kubernetes v1.17.0
  * Update golang dependencies
  * Print the previous log of the container(just like kubectl)
  * Add rmi --prune command
  * Update README.md to contain latest version hint
  * Download golangci-lint via wget
  * Fix pod and container name filter for JSON/YAML output
  * Fix e2e tests by pinning CRI-O and conmon
  * Fixed Tim St. Clair's username
  * Add fish shell completion support</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585742400">- Update to v1.18.0:
  * Main Changes
  * Update Kubernetes to v1.18.0
  * Switch to urfave/cli/v2
  * CRI CLI (crictl)
  * Use ContextDialer to fix build
  * Add go-template option for inspect commands
  * Fix invalid log_path in docs
  * CRI validation testing (critest)
  * Make apparmor failure test more flexible
  * Start container before fetching metrics
  * Cleanup container create test to reduce duplication
  * Add container stats test</changelog>
</package>
<package pkgid="c47323a61e1e79bf2b5ae154e49bf3713964eb67ebd3e0dba7da2970cc52f40a" name="cri-tools" arch="x86_64">
  <version epoch="0" ver="1.18.0" rel="lp151.2.1"/>
  <changelog author="vrothberg@suse.com" date="1518436800">- Add cri-tools packaging for debugging and validating tools for the Kubelet
  CRI, including the tools crictl and critest.</changelog>
  <changelog author="jengelh@inai.de" date="1518609600">- Description shall say what the software does now, not in the
  future.</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Change buildtime requirement of go-md2man: use go-go-md2man to ensure
  package builds on IBS against sle12sp3. This change won't affect openSUSE</changelog>
  <changelog author="vrothberg@suse.com" date="1520251200">- Use cri-tools v1.0.0-alpha.0 to be compatible to cri-o v1.9.x.</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="vrothberg@suse.com" date="1529064000">- Bump cri-tools to v1.0.0-beta.1 (CRI v1.10.x):
  * crictl: allow short option handling
  * crictl-exec: fix argument parsing
  * Update documentation
  * Kubernetes/CRI 1.10.x compatibility
  * Minor bug fixe</changelog>
  <changelog author="vrothberg@suse.com" date="1533211200">- Bump cri-tools to v1.11.1:
  * versioning is now consistent with Kubernetes
  * Fix argument parsing for crictl exec
  * Improved documentation
  * Multi-arch critest tests
  * Filter pods with prefix matching of name and namespace
  * Improve terminal support for exec and attach</changelog>
  <changelog author="vrothberg@suse.com" date="1534161600">- Generate and install bash completion for crictl.
- Provide /etc/crictl.yaml config.
  bsc#1104598</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1538481600">- Bump cri-tools to v1.12.0:
  * Properly returns errors when the output format is not supported
  * Show concise image info for crictl ps
  * Fixes crictl ps and crictl pods
  * Adds podID in output of crictl ps
  * Adds sandbox config to image pull
  * Fixes unmarshal issues in crictl inspecti
  * Fixes timeout for grpc dialer
  * Adds new test to critest for privileged container</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542110400">- crictl/critest: compile version
- Require golang &gt;= 1.10.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1544788800">- Update cri-tools to v1.13.0:
  * CRI CLI (crictl):
  * Adds --auth options for pull command
  * Fixes URL parsing for exec and attach
  * Upgrades Go version to 1.11.1
  * Enables Windows CI on travis
  * Switches Windows default endpoints to npipe
  * Updates version matrix information for the project
  * Adds container name filter to ps command
  * Adds metadata to filters
  * Prints annotations and labels for inspect command
  * CRI validation testing (critest)
  * Add tests for multiple containers in a pod
  * Adds runtime handler support for critest
  * Adds exec sync timeout test cases
  * Fixes readonly filesystem test cases
- Add `crictl.yaml` to install directory
- Fix build for ppc64
- Require golang &gt;= 1.11</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1545048000">- Added `rpmlintrc` to spec file</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553515200">- Update cri-tools to v1.14.0:
  * CRI CLI (crictl)
  * Adds imagefsinfo subcommand for CRI ImageFSInfo() method.
  * Adds support to filter containers by image.
  * Fixes a bug when removing multiple containers.
  * Reduces the default connection timeout value.
  * Fixes the exit code for crictl exec.
  * Updated the instructions fro godep.
  * Adds support of -q for crictl info.
  * Adds support of zsh completion.
  * Upgrades kubernetes version to 1.14.
  * CRI validation testing (critest)
  * Adds a benchmark testcase for measuring the time of creating pod and a
    container.
  * Changes streaming tests to omit newlines on echo
  * Adds support of critest for Windows container runtime.
  * Updates test environment to xenial and fixes docker installation.
  * Updates Go version to 1.12.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1562241600">- Update cri-tools to v1.15.0:
  * Add registry prefix option
  * Revert "Skip test "image status should support all kinds of references" for docker runtime"
  * Upgrade Kuberntes version to v1.15.0
  * Fix typo in parallel
  * Skip test "image status should support all kinds of references" since dockershim doesn't support it
  * Fallback to repo digest name if repoTag is &lt;none&gt;:&lt;none&gt;
  * feature: add display; support live monitoring critool stats
  * Test image status for various references.
  * fix debug in config file
  * Update `rmp` to test for running sandbox
  * Fix logDirectory typo in examples.
  * Search program directory for config as fallback
  * Improve error message for failed to connect
  * Set SelinuxRelabel to true for bind mounts
  * Include gcs bucket release.
  * Use same version as previous example
  * Add `curl` to download example</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1562241601">- Update golang(API) requiremnt to 1.12</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568721600">- Update to v1.16.0:
  * crictl:
  * Add container 'run' subcommand.
  * Pull image on container creation.
  * Treat first crictl stats argument as filter ID.
  * Add -a (remove all) option to rmp.
  * Create directory for config file.
  * Add container rm --force, -f and --all, -a flags.
  * Add images aliases image, img.
  * Add --all, -a flag to image removal (rmi).
  * Update Kubernetes vendors to 1.16.0 and add addiontion IPs for Pods.
  * critest:
  * Add registry prefix option.
  * Add test for MaskedPaths and ReadonlyPaths.
  * Switch to multi-arch nonewprivs image.
  * Use arch specific hostnet-nginx image.
  * Use a dedicated image for all reference test.
  * Use IsAppArmorEnabled of Kubernetes instead of local one.
  * Fix exec test timeout issues.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1569499200">- Update to v1.16.1:
  * crictl:
  * Fix empty fields in crictl inspect(p/i) result.
  * Pass pod config when pulling image during container creation.
  * Fix crictl stats panic.
  * critest
  * Skip hostnetwork portforward test on windows.
  * Add hostname test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Update to v1.17.0:
  * crictl
  * Bump cri-tools version in markdown docs
  * Vendor kubernetes v1.17.0
  * Update golang dependencies
  * Print the previous log of the container(just like kubectl)
  * Add rmi --prune command
  * Update README.md to contain latest version hint
  * Download golangci-lint via wget
  * Fix pod and container name filter for JSON/YAML output
  * Fix e2e tests by pinning CRI-O and conmon
  * Fixed Tim St. Clair's username
  * Add fish shell completion support</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585742400">- Update to v1.18.0:
  * Main Changes
  * Update Kubernetes to v1.18.0
  * Switch to urfave/cli/v2
  * CRI CLI (crictl)
  * Use ContextDialer to fix build
  * Add go-template option for inspect commands
  * Fix invalid log_path in docs
  * CRI validation testing (critest)
  * Make apparmor failure test more flexible
  * Start container before fetching metrics
  * Cleanup container create test to reduce duplication
  * Add container stats test</changelog>
</package>
<package pkgid="020fe96f914ea1190e990374a9af279505974d44dfef02778ae0171957c61830" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1553262403.5da14df5" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="ed1effbcdef77d20a1b1b9edb7b7422e12511e42f684ce941628559a10aa0deb" name="crmsh" arch="src">
  <version epoch="0" ver="4.0.0+git.1553262403.5da14df5" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="37a0cacb3c673cfa6e37bffc79e30d5f602bb496fe026625c20e47194512a3e6" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1569593061.35f57072" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="73a0ac4fd9de897edd5618849b9d39e46f07b2633840feaa6055db20778b805f" name="crmsh" arch="src">
  <version epoch="0" ver="4.1.0+git.1569593061.35f57072" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="9f5b17409abb4b855f914356670f164a88dda7f5517a80eb47d9be711102ff49" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1578469492.493d5d62" rel="lp151.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
</package>
<package pkgid="2a60b1453ff0e4a68ba1ff94fcf42ece4a22522063f819dcea0fbbb12dfd78ce" name="crmsh" arch="src">
  <version epoch="0" ver="4.1.0+git.1578469492.493d5d62" rel="lp151.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
</package>
<package pkgid="0158ec6bac10f84d3c57405b18af007984ae6b30bb7bc390503c1951ac674df8" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1581993582.18a6b810" rel="lp151.2.12.1"/>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
</package>
<package pkgid="b676d615f3aefc3ae40b090d831146a086a0958492465c10414fb1fd5a927e1b" name="crmsh" arch="src">
  <version epoch="0" ver="4.1.0+git.1581993582.18a6b810" rel="lp151.2.12.1"/>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
</package>
<package pkgid="f9c7a179726dd69e450931defdcdcef9b8bce81f478c24d3c273182e9753c76d" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1585823743.3acb5567" rel="lp151.2.15.1"/>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
</package>
<package pkgid="6bb57b1a5b782ca3e637ebf62a3fb4c93db9769ad7a1af4d9aa0165a73bcb067" name="crmsh" arch="src">
  <version epoch="0" ver="4.1.0+git.1585823743.3acb5567" rel="lp151.2.15.1"/>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
</package>
<package pkgid="073176732113f93a2e820abf6a5aab0efbebb9b28628c9f5b82178cf2ee4f6cc" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1585823743.3acb5567" rel="lp151.2.18.1"/>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
</package>
<package pkgid="0691b9b058720c49a9e4f95c3ec40971fe670f982edc1b77575ac76f91752447" name="crmsh" arch="src">
  <version epoch="0" ver="4.1.0+git.1585823743.3acb5567" rel="lp151.2.18.1"/>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
</package>
<package pkgid="c03b41e5d66437aaa2ad1fde632dea64bbe99f6798ca6998c639c8016e1ffaf5" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1594697133.dcecb3ec" rel="lp151.2.21.1"/>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
</package>
<package pkgid="aff3b7d4e6e01c212a56bdb683675ee5d638f5c213e8a39838a1dd4004651835" name="crmsh" arch="src">
  <version epoch="0" ver="4.1.0+git.1594697133.dcecb3ec" rel="lp151.2.21.1"/>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
</package>
<package pkgid="9d377bb67c7a99b1ac27bcc5e0801bd3e470f80fa6fec53e52b147efc320b950" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1598258232.7580dd00" rel="lp151.2.24.1"/>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
</package>
<package pkgid="637900722d5c2f7d5c46c7e2f33f7d87b41bece75114719ee31c88602a4f51d4" name="crmsh" arch="src">
  <version epoch="0" ver="4.1.0+git.1598258232.7580dd00" rel="lp151.2.24.1"/>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
</package>
<package pkgid="817dfe0efb3fd1d12e81923e9cb87cb78b97de78949c32b084cb5fae70a82701" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1599639106.b8652332" rel="lp151.2.27.1"/>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
</package>
<package pkgid="2e860c36ccec96d002cc20f8350fdcffd6aa99d0d57203c792de29deabee4785" name="crmsh" arch="src">
  <version epoch="0" ver="4.1.0+git.1599639106.b8652332" rel="lp151.2.27.1"/>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
</package>
<package pkgid="0edbee06b2df25bc4f79c1d64aaacfaebce794d7e5e8b6b4bc07fde44f4ad3a2" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1599810975.2a10dedb" rel="lp151.2.30.1"/>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
</package>
<package pkgid="4a784f0f7d3f4ef97749b3e50f27333e5be619231bb1cd131f252566ac8206b6" name="crmsh" arch="src">
  <version epoch="0" ver="4.1.0+git.1599810975.2a10dedb" rel="lp151.2.30.1"/>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
</package>
<package pkgid="eeef3cbc85f1318cd2dcef15f3f9ccfad15198d92cc17cd48ff27c659e3da53a" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1602227275.3d680577" rel="lp151.2.33.1"/>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
</package>
<package pkgid="acddc4d5a6fd700e9f12cf11923a75a14c2b85be98a56196e378218c217c92fa" name="crmsh" arch="src">
  <version epoch="0" ver="4.1.0+git.1602227275.3d680577" rel="lp151.2.33.1"/>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
</package>
<package pkgid="bdf252dcc890a6b0471bc475bf6ecee9134bef3312070ed00ff504d5d88de748" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1602225426.5f84efb5" rel="lp151.2.36.1"/>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
</package>
<package pkgid="725cfb1c84594a141328a11f133ad22a0e0fa1352aef55e6cc78d543b892017a" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1602225426.5f84efb5" rel="lp151.2.36.1"/>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
</package>
<package pkgid="8de6147f84f3aa472c62cb9a4a0b4e911826fa6765100403f62399d02ebd7741" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1604052559.2a348644" rel="lp151.2.39.1"/>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
</package>
<package pkgid="e2cf8b9e5e5f6d01055bf21765b588e0e9d0e0410855509f030147f05c879bcf" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1604052559.2a348644" rel="lp151.2.39.1"/>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
</package>
<package pkgid="8dc041421ef6c931dd052308bf1942159f20d7336f8e309d412719ac163c6020" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1553262403.5da14df5" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="5f773266f1c481730433b5b40d9f58432e2a61aa85e4e50b7e2fc95d150ba7e9" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1569593061.35f57072" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="cb1686fdc43d8071b8d01a198bb4e945bdf8bc7a47f775956fa6ff4fc8fe98c7" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1578469492.493d5d62" rel="lp151.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
</package>
<package pkgid="4fc05a17329ee7129e30988bd49f9c4c8400ba12babb0330c575787f066e610f" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1581993582.18a6b810" rel="lp151.2.12.1"/>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
</package>
<package pkgid="5bcdd37eff6bd8c415628a79dfb48c61a370a0028b619403c61d7a945ac6d1cd" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1585823743.3acb5567" rel="lp151.2.15.1"/>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
</package>
<package pkgid="c88cafb4ecf4213ecffe59ac2f167a6a63e677f1a8742316d2b0d019a25074c3" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1585823743.3acb5567" rel="lp151.2.18.1"/>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
</package>
<package pkgid="d76bd2710f66704a4420a4ed58c43f3de3aa553db2890ed0b884e8256036809a" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1594697133.dcecb3ec" rel="lp151.2.21.1"/>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
</package>
<package pkgid="7cca84f15019d320e5f2cff3dc63a6c8379889e3cd78fe8f18c35f3e5e23949c" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1598258232.7580dd00" rel="lp151.2.24.1"/>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
</package>
<package pkgid="6d904513489c439f8ded4630371ddf8a1166bf4b55e555a484de25f58899b577" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1599639106.b8652332" rel="lp151.2.27.1"/>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
</package>
<package pkgid="c4462010c2895f9f56bb966a744e8989e51539bbbfa356d19e7b17de43c43737" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1599810975.2a10dedb" rel="lp151.2.30.1"/>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
</package>
<package pkgid="2bb55de759a05853e273286fc790bb1223adf98e97baa6d4cd8518a0b2dc0e90" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1602227275.3d680577" rel="lp151.2.33.1"/>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
</package>
<package pkgid="bbb88f304b1a86e8aed708ea71b23fa50afa2b99a6468d0a117e8ea9d5aad731" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1602225426.5f84efb5" rel="lp151.2.36.1"/>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
</package>
<package pkgid="a3a043a5741ab9dc54efbc63c2506edc5601d56831d531f2cb798574826baaba" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1604052559.2a348644" rel="lp151.2.39.1"/>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
</package>
<package pkgid="a39d4c8b9d8a41459c760f048a59cb8bef5ecc570867342f6653da53710b6222" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1553262403.5da14df5" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="f35bfba6602861fdcc9ed4d7029a39ad16c2a6a3038a7e7f679cf7cb9783f037" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1569593061.35f57072" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="2db11bfa3ec26fb975356f7381b674bd176bfa8b621f47feb76d9a4ddd7402f3" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1578469492.493d5d62" rel="lp151.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
</package>
<package pkgid="c2edf3e402c8d6dc68fe77476b12193c0582ec4e01c7981373faafeb6f4e0613" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1581993582.18a6b810" rel="lp151.2.12.1"/>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
</package>
<package pkgid="56ea71369f83378d4f20e9ba3e38943bc5469e38b61968565acec1d1bd03cefb" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1585823743.3acb5567" rel="lp151.2.15.1"/>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
</package>
<package pkgid="7cfafc052e144e7ce3828a72a885c8ce29aa65f54e33626938c1f3889da3e46d" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1585823743.3acb5567" rel="lp151.2.18.1"/>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
</package>
<package pkgid="82ddfbcaad5ca4966372e658d857864516119417476d86392979960510984c3d" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1594697133.dcecb3ec" rel="lp151.2.21.1"/>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
</package>
<package pkgid="a09277f67a738bf71183970089b09d10f3b756bd52a67b4446f5b3013a59aecc" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1598258232.7580dd00" rel="lp151.2.24.1"/>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
</package>
<package pkgid="e8e58753024067e191c69bbe77e75238785d2da217c83076d19d84632bbcffdc" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1599639106.b8652332" rel="lp151.2.27.1"/>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
</package>
<package pkgid="cf0896fc8f3b296ff912c6a6a57ae4600931505086444b0e89cd242f898388f1" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1599810975.2a10dedb" rel="lp151.2.30.1"/>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
</package>
<package pkgid="7d9d54ab979f4949ac8a30bb78df455d1b3cc6fae83f23ce6c0fbacd1f4c3fc9" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1602227275.3d680577" rel="lp151.2.33.1"/>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
</package>
<package pkgid="a36043021a41dc1db7f3e3649af8509e1d2a8d1528a34d55d7a4b72f172cc1e5" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1602225426.5f84efb5" rel="lp151.2.36.1"/>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
</package>
<package pkgid="6fbfda5b45113413bdd512f5020a1cc57b1ff8027db1f1d319f0c6ac37ab5b67" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1604052559.2a348644" rel="lp151.2.39.1"/>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1575374400">- Update to version 4.1.0+git.1572504697.472361c5:
  * Fix: corosync: reject append ipaddress to config file if already have(bsc#1127095, 1127096)
  * Fix: ui_cluster: refactor function list_cluster_nodes and handle the None situation(bsc#1145520)</changelog>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594814400">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.1.0+git.1599810975.2a10dedb:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
</package>
<package pkgid="bf9d14bacb6d481c438c45bf72c4ae19de04cef8cf6daff7019b60ab4b957478" name="cron" arch="i586">
  <version epoch="0" ver="4.2" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="9982078868e91f0dfc2ece22908b57c31ccfce567c6926df53662860e8b580c8" name="cron" arch="x86_64">
  <version epoch="0" ver="4.2" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="c3441c1584f24dd4e96f33cce2b68b53210934d9961e1509a96490199e60725e" name="cron" arch="i586">
  <version epoch="0" ver="4.2" rel="lp151.4.6.1"/>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
</package>
<package pkgid="c53f8f6da3cde84400853b594c124ebbeae8ddc526e24466f578da878385091e" name="cron" arch="x86_64">
  <version epoch="0" ver="4.2" rel="lp151.4.6.1"/>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
</package>
<package pkgid="d8448b11e07acb6618e6cffc3766f256c6bfe315092b2d1cf07d10680e2012e9" name="cronie" arch="i586">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="2bffb0a795bc44e64a99bdfc3a526daebe603c06815d0f692b38aec24c5adba9" name="cronie" arch="src">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="7185dfa1f4af0f063108eacd3b342a3029858d7ee4b4b8fb2377e39ab4626009" name="cronie" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="dd80be94c923e08f24588a62d4f077074b830d904e3b6514b1652263964d2b9c" name="cronie" arch="i586">
  <version epoch="0" ver="1.5.1" rel="lp151.4.6.1"/>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
</package>
<package pkgid="5032781237684219ff4a3cca0f7bf96ea97f30f1d8abc1beab76315a708ba6fd" name="cronie" arch="src">
  <version epoch="0" ver="1.5.1" rel="lp151.4.6.1"/>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
</package>
<package pkgid="39dac8357d96b4fec785820535483423481fe47f38c8f1c2791c8ec961bb477e" name="cronie" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp151.4.6.1"/>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
</package>
<package pkgid="5cca7527fcbc2f401552912dce6eca3776d9da84d251305791b01c985eb1a17b" name="cronie-anacron" arch="i586">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="fa8b484830d6282a7cc98e15a19c5d9d6b7005fecb36afd1e10197255bde7ddb" name="cronie-anacron" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="34a61074710e1730cdc5df5d3bd5a8d55f556d702d159e12ae45b20568cc2018" name="cronie-anacron" arch="i586">
  <version epoch="0" ver="1.5.1" rel="lp151.4.6.1"/>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
</package>
<package pkgid="29fe0effdea5c1be232affeebb43c6ae9d2198483e1cd122e9b274ce678c0319" name="cronie-anacron" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp151.4.6.1"/>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
</package>
<package pkgid="9c0e62856a834e11f0d53e4039eec957deca2f20c7d8f1306c05eaad21a03754" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="fc7994d766eb99f74ccb332d32f0400fcd501cc07b51d4fbb72acd1df2fc1363" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="318cc97031ee83f05f60ed0daddbdf73c29336844fddaf0974e004ca40ce5ada" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="7e99816b75553c7dc58ea4feb9b03e4c9296e9e0beb3f7c27c855b1794ccee85" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="73f520f01fdfc5e8594be6850ec6006e232a6ea6a96c49a82d8044bc469b2aa3" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="15035388aa5941ee73b7ffe8c403bddb456762bfa00500b3322d84ed77702655" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="d22ca86be729fa6ef6386a08aee3d27cf71ba2d6eb6141cbf0fb6090376bbc9e" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="a31940bd3bfbdc7042857edba48bee9063b71d0b80731cb5115fbc02727de638" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="3dde7433d41c878091b83ee99b8bbf2db735e4e270018bf5d322d12563fb1026" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="a6334f1a911806bacb57141e25704f6933728740c1589d264080a941232166dd" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="75f2d2c65875ab18b310f751b19e2052a22e03c2c07354c4696035c058dc6417" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="5223de5a2da54605b75fea6d12b5ec5d5b8c397332e34b4e8ac5bca2612b49b6" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="d3275a6682357f2126bb483055d1d7e6d5ad40dc6d81013d2231329d074a6fcc" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="0da5ef5ecb376f0944dac618cf330884b5c5e07a86d41ddd08b867415ec3c017" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="b1322f55b372bb9af2072fc35c24205bdb1b4e080bafa3865159f41eca956b9f" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="e155e1c26b1b94be84a589c2621f3040f3e7e06205e9115a6274df3e8266d24e" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="0f32c4def1c03f32ad32aecfb6a3644bd1d19a1ebbc052fa60b4facb528f25f4" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="4685018fbab09085d63caac59baf86f7457d24828921fe3499eebb29a9d41640" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="a35f643a193bea9dc4256f079bb7e061cd45019a114ff7946873670299914d61" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="60740da76696c5244763eff4da8031ccbdb841159662dcee58436f70202c5d11" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="48a53970318b156eb8f48399ba9f1646ccbfecadb00e84d1dcf5bcc8416f7fef" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="3047116061543e705963944d3135f4169e9a8fa033be3c2f8ef4157b12750cee" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="376d48d62da51b89bb7c6bd7d655bb167476861e97294d12a36391050e01b143" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="5c9dfdec4ea31a8d3d5db0a9dadd5f723628fa1c27e0f40b660c1a4703ef8be9" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="f1c6131e344a35384e19469f500cfbca2c76aa343d774586955e892c85d6c0b1" name="cross-epiphany-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="859ef38970b27644d45a17d2eb97ce81f05af9fda71a8dbc2d62ea64d8387deb" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="c93d503ecdb1f26c8a5efe47a476e20eeceb28309323002d3a50f6d30d4b1fd6" name="cross-epiphany-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="5f5a3d09127d88adeb740b7be6f6dc3d06ccec97fe982abba9d24588bfd25a87" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="54f46b07f8d9d6c59c49293796bee46ea03f0a0d748659021f1beb41066bc3ae" name="cross-epiphany-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="5877d44bc79751bfe0177f62224cc6dd82df81999996a7677d0025e4db4f066e" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="3a2358d1a0fd5cff822436de923f4c420fe3ddafe5091ce3425e13d3ec2437d5" name="cross-epiphany-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="0b3d92100599dba828f5e500120e002b19a7388cd63305877480b541b3ca19e1" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="c8a1ff1c6f6dd1026eaab887e8480b27faa8676ee4244eb9936490a975544fe4" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="834f09bda14727e30bd40d0fcc977d0066bff0c0912a800effd9efc547a41a60" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="c953adfe66d909131970c03f8c6cbc74218354ff2e9b10df7588f98832e09f48" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="e09c3073304d50177e2ab561f57230bab6706ab44c8a46d321bc5eb3b2410ac6" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="d1c96a74b2b056f9c101f21e9cec401db56a3a76f5378d97bdbdfcec2cdbcd7f" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="0854b6737a9864e822952fcf123c076b5ed30c09ed2d92048ececeeffdc111de" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="cfd4d008191cbbf858c63829c38902926b45b306aa03409cf29b9482b239f7f0" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="e8fe1f567ef1f8edad7ff92d01b62084c9884b6788b61f3708c0750dfd426019" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="8b333e7963cfbc328c0f9e751ae05ce12c463a8632d7bf1354bccb619a011b4f" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="e905bf916a2ddf7eb20e40163b8ff5ee9071f4563678db11110786540870250c" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="e299696aff8d6b9138072a461aaf8bb3024d01c51843b5fc52e2ad198cd8aa25" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="391a5fa12659bc9886161a0d9749e8ee5dfe5a4dd60577203eda0a2086799bd1" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="311835e42a2af3fe8901181c229302bb4b8a3a2fafda1fce4800092575bd4c27" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="b3b241efce5ba3563ce6a41166699df891056b23d630f242d5450273d5105d4d" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="fc9faf41bfcf0773ab8ff2d16cda556b172f21ddf3f72be7c8a559fef0c4f052" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="453d2f30893a68499548d775d57b5d440b0e885f3354c8f5b67d19faff5ad428" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="76ec1beab11ee4623a9288aaaff8e4d135a38ed8993876409fe52069e982953c" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="4f9314af867cb70be18ffe8e5413400320e8fa3d539a83a0290f85f83c5e2e13" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="d400c96b39fe7bf4a9882c50ad2e49d597a94a25caef0630d5da2e8614dea128" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="565856355eef93479390bee42cab0bd97ecda44c00f4a7f1ee610f7d76f01290" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="6d57aa41114d5f7fb8a25c627b7f8a83e27e52e9cccb9aaf82e8d6688101430c" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="8be188fd8ab2f06bdf8d4b27c5eab6cb5162af392e104f53e01729c49f28ab29" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="143488cbd5d8ab9ac52b27e0488db04b667072df7900f52a450776dfcd7a067b" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="215405a8887f879b773588de4fe1e2c5c79b2206703e89d088ab1e8e7d473d22" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="eb5e1f84bef3ba27a55f821deae90c98f396584de8cae2b25c72ea610f4d402c" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="b3e88c4f8b685a7634019be18a93d4224eb9e5e216c939cce272d877849f024d" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="5b43337066ad49feb725c196dcf5840303a8cd2e3a9b991b2bb398ef17a52f88" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="46d7fa80640f91674a6637c392e3a177cdb52577a2d8f477089de722ad7c9843" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="43359be6ec8e45f1ee9d9d9261bc497bb93e95016df93e1704c984d15071d094" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="45b80d04f0a1c662b66d2e9f8bb107a639c35c067e38b2ef0b54d1620edd4ccb" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="ea59273ee71a8b5afd6f957be6e20e02b1cec4d3dae9f17c88ca82ce2155a930" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="4107c605807531b7bbb49238f328fea72d3d74a5d208c7d87ac1c78719104c88" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="20a09a5ffd948caf07062434bc1671aadafe00e9612f444ba769795176dd765d" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="ea54c93e5096eb4205e414c97c003dfa8eaea524223d7a14218d6d8e38f27002" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="c18367fda699961b2f15bf14a4bf111644667a2cf445a15ff2b2c6530b6630fb" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="656d7b439015ff84558756c516640d94f90fff80abc0d2f66193f3bc2aa6d68b" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="e724e6114568dc00e2bdc678fc198437085d152bff7495584e51a206d5a4bdd8" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="afb95d369dc2cae03093ec5313096399250b1d5e0c15015ea1032d11ec64e63e" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="b18c6a8ec09722b3c21f2ee1d0884a23a4893dde9cc26680c8846df5d741d992" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="1e6ee19c6c2cad8741cded343c4c76fba4bc4262b91beee4895c74dc7c6adc5a" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="61de1c7b09ba08a5b18895a17317f0288806bd8fe42ac8d88a8a8bc69695ed1c" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="b01a04e2ddaf9789351ddd98537b8c031bd61307d26dccda85a9b64815b197bb" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="04a2d89c5aee65ee4a117248ef78457dc10c54f1c8831430a90d2e85d529201a" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="5b869b74a640424ae9d9b4a10b9b8e295a6b5164bf5e7dcfe57179148e7e47ba" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="ef892c4611189a83213799a6c2116ed31c9e21544b96cc44225aa5796a441fe5" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="6b60a956cb2b112adcbf911e223b8d75a07eb8f19a6daef22dcec0a112013d7e" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="4326c15ff6eb0af0589b70f22e198127fde0dc0cef75a6b12005d10bcf78e4e7" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="3752dd32213c017eaf216ea6138f031f834a1b3e5148f979f820c6478e5fc6a1" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="68d4ef3a750eeafd38a83cc46c149cae7ede35b7c5a182b3863dcd55533e9557" name="cross-nvptx-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="lp151.2.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2a4583901a43631e17dbdfb525e7d2b51d0bd98e6e68c2a631b4638ba65f733a" name="cross-nvptx-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp151.2.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="197cb4b57f357ac45fd44b02eb496b6272449d4e022f053db1d7091e9ded0825" name="cross-nvptx-gcc9" arch="src">
  <version epoch="0" ver="9.3.1+git1296" rel="lp151.2.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="696247680118f458a1b1cd8a259c888213da764a206341cd357af2d3a2d44c79" name="cross-nvptx-gcc9" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp151.2.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="75e449e72125c3e7c29fb409852bc61d9f56b68761405f2d18218602d6c04df9" name="cross-nvptx-newlib10-devel" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp151.2.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b78cc2ff1157de62c5bd0b09faccb66e7e554d357d5229f9590d3f9df419ed8d" name="cross-nvptx-newlib9-devel" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp151.2.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="e42f014040d14a79166feec6469b8d78e9f336bd496f20137e5d3392aca04f59" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="5f01d20389f464debf48b044209fdefc1b5b7c39c1a25fe63330d81ab5f04436" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="c6e1a8c08585c7ee71daa875a5441b050c3d55b0d7f04657c8b1a9008e4b5689" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="98ab7a571893c3b51265bb61aabda179ed2882643baa8488648ac61261ce029a" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="a08c0f24e24bfbcc3d210ed80de4dd9f27526419b0ad42e7da3bd9fc3ab8b764" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="602efe2ced1d47b44cd5386e1d6ecc6a663de8eade1b059053b6b616ae397db2" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="3e20170de942b4bb28541d6b8f7ca2575f315ba5621843e4fef65b5fa854ae40" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="09ca70f0b49e0b38dc0cf573f46a01b9f7c62eca10c0fd1766d7d9a19a11c644" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="079c114206bc9f7eb8ff99ceb71ce23da8912440822e8117f97b479cc432020a" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="f342d4e2a92e595d9dbe73b412a8c781f84f17e18a45422597bbbb1eb6a08e6b" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="3ee036a75ef1ec1fb4f0750a320db95d42aaba588e9550781e90f2ca3fea5bf2" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="1af48a9632276d42ca0ceffa7de8f01889c6baef20d662aa03e1ae95c43491ee" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="58ae14e606d8f72b5b779d53983c94bca04cba3ae96977b731ec03534b4734b1" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="c86249bd4afa05492032316581688dd6ae1f4830ed4e7b986af762bbd2f87f0a" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="8e75646666f5ac0c48433596ab8a9543b371a22c2dbc3bcb3deaa9f510ba8392" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="217e27adc3753449d0c69020b7473c9840af6588a382c8c5f241fec043958635" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="1f3ec4c837892d8dd62c0f51eaeb061765f31254efd7c658ea2db98cd7ef35a4" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="bc6e5535ea0aaab9860e59f44b73f4c7a97961bb311356a7fcb16f13155c6344" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="7150cb20071c79df667b2262ab2d77f36c26d5679955c0f3758ee36ed5a3ce48" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="c3fdb2e256fff5bd071815ad8b7a249a8f10f8891531104bde6986d2aa6acda9" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="712e74c8ce4c3c79d3876f92e9c138fdd2292fb2f48ff7763c07dda238bde205" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="84768d70ae700a7987e85c31091eea5734c189529e68516cbce83d21b76b007c" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="990098405c484abb15b98c70e791ad84e93662965fc4ddf695eca6a9bb708ff2" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="255dc6aa55c0b22ecad0b2492e2fa661bb1cae22475c12b60aeb605a43c5bf5f" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="979c08830e5ef0f23253ac80845845f0b136f1702bb540f63bccfef340ef16a8" name="cross-riscv64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="a4b9830ddada6e51cfad005235da4779696f76407e0acb22545f562173bdf22a" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="ff522dc98539574c0e55889adeaa5fce1076c98821df76b8311fa6654fcff853" name="cross-riscv64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="6d2fc9758a6f262958e1cf01e0255787fa4e1fada3ee27cb7ff9cf843943bf66" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="838bfed5b8f85368962c649eb93aef15e2f20872b9fdb6844b15201b5b017cdf" name="cross-riscv64-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="a5f3762d0b171c77aea1a43600664d17cc0d23741c2a66157b580d0f54c3dd8b" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="685f46fddf4c2dcb977a5fd465b0c39a804b095d129498c2977ad0924ab9ad38" name="cross-riscv64-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="723118a8f98c4f9ac2b3a84207b68392885b48f7fc503ab42a5164d1efbb4b29" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="f8843a94d1bdcba2d116b53feb0bf3fba4b2df3bf3a190fd7d8997f9e1b861c9" name="cross-rx-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="ab227f72972e2b7722e7caf1e635a52dfe0d0443bd720113e964fd129b12afec" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="eaa9ceecdf6ac12ffc06554596be54fa9713faae44a4d5ed3d182a9c434de934" name="cross-rx-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="f2bb6b84c9d68ec4e353480347674733221b58f65b8633091003d14efc0321c6" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="b19cb61a5976845c0597c0da38e1d53cff541f6f31169c590726a0d63e2a5c4d" name="cross-rx-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="3334077ac5f6d016c12f26c5a57043800ceb91e8611148df80b9aa8ea03e2168" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="abcf425cf7f7df3bb8fa10b9f2800c5580c0a01c1fde4559fa56fa6e62ccb975" name="cross-rx-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="04bc44145931f9bca7dc7794e262368c6dc13f2884639dc1714d1f80b329a2b9" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="ade52742b791ae2844d8172e02f4be93938b061bd942969f21aba2fbce35ffc6" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="293a685eb9da026681ad1476796fb7a427a7f3194da3200b2e292fbf466deaa8" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="fa2bc89182ed0acb0b08485e930289a364179b6fca2d6fbd746cd8931ff47c19" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="4e1d75ce5f1e8cd9e3b272b1e8e512c3d561bb3ca58f3f142dbd042ffe8e8c44" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="6d49d62d1cd7586a1a05d3fca1992184c821c5956f9cde4746766b603b201a0e" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="28528b15c9897f1c362b3b2fd67f98b4c1e4314bf8ba515c0c53e026b85c7dde" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="69c49c6e8fd3e686c433108a4bfb750a01fdfa7b02524eaa54f6611ff2826d47" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="b825eed7370a2bc8c6515252f22b144b7328e512d9763d7787896507437ce022" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="f7108fd41725b0380641d419878aa1d91142d1fd271b8c528d347623be01ca1b" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="b43dee886f969013d163565c596a500e7495440ef61d199d799f95b51df2b9a2" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="9be275bebb9dc850d2621e2b7185b1d0568f2dcf4a464028326c403773e818df" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="6c6c666f238a29475e5b2604f06564bf91aad65ea18276c6550f220be426772f" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="876095b31fefdb920a4f67ae8c969236bbaf4109b48a305635d0f6b7f7a976d6" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="affdaa1405c1d0552d21b9a55ebae8e08a12bd8f098b1ca176279119e42a4478" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="fab30ad78c7e15c0bbf9aa3d413e92bc18fdeaea19312ab8e9e6c2e1107c8115" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="96b8577f34a85d5895b0df2748191e084727398287d5fede239d71f1a51e371f" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="97f1af5730afe145769a986cd48876efda7fa0d3277c3072ca4422ee4739a7a9" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="31b7c10da5880896820ee5f4dcd2f1f2b68e760d555a87a7b00d69a16a06084b" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="94fea10c8a10913ee675d2412d54b1a035b5f57d8127b03b7199a7b8d57e9f2a" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="89b08874146a569dfed05ba09d1108ff507afafcf3f6b6c8f4a827dbae12a9b4" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="554c8416316b4a0c882a5289e614b11a4384b952d2f298444496639330186f33" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="3d4c11d133fcad7fa0375c6b6cabe31b2347b215f44b140d840a56869199a496" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="c22902046d12f224561521cd03b0584e902f369dd800a1e01e2e08a0e85c1fc1" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="fcd1eb6c8bec1a7c69bf4db3766b43549a6561773e6c68627729e67af055d45d" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="1583981cb02a9ec93e64507a1335aad9761d01fb3b88ce81436c7e0db8751530" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="dd21141fa1f96ca5554b44b7a402a3bd4860f77c2872a54a978ef0866336d0c0" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="aa07a7012b7e0547f744921bc68a5a26a230e4be7de1ca980f6d1ed95cfa19e8" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="cc32d6f5528dc36d1f6793906afcb48966f8931efd25f663c05a547e3b8003a2" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="b05e7f73a313ed0c1a48bd37478d529094659841f1fd8aefdbfeb3270683c1aa" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="b62a1e0ffba5a57d517265fe2e83e6dbabe3549f6e5fa0882a7e401f06602163" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="b0d4fafaa3d75d7f3eefc34aaa18b35f3a0b351749d8ec0244311cfbb22a7fdf" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="9a4517a18ff700b233da28be21191db04d0ba67ee9f7bbf4134ae01417acc4f3" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="018d118c43650829c385d6269eb00ff2f48559427d300393245dc8c90fa51f48" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="7b2f627e2dc8a5764ed162106cadc2f439fe53fe1229d1c79ffab17e77f7a245" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="5254645f9f77d67f35294e04703ee8839599f3c3cc37f2990295a306287f328b" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="6cbab726f019cedeac5365e8b3290551995ebc0ad465ea62c0ebc62878d44b8b" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.6.1"/>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="matz@suse.com" date="1579262400">- Add binutils-add-z15-name.diff to recognize the official name
  of s390 arch13: "z15".  [bsc#1160590, jsc#SLE-7903 aka
  jsc#SLE-7464]</changelog>
</package>
<package pkgid="8037d26f8f6de1170065b4cdc41f0ce84a7a7c5946a63afef6bd50f9411da914" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="709bc74a94c55851b18d702bcfa9087de5f55fb20512ae7c3536b2db02df41a2" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp151.3.9.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="2a5ed6b63f74edf454dfc6a9c3c8f4f71a386725bf1cebc862bd2d8f4e5ec571" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="f2368d4dd8de6fa3762f960005dd12d9a17dca7c4bf0ffb9e8ca6b69cac2e8d1" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp151.3.12.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="2b2508692922708089d77552f9f1b8b5253178c00f29a1e0fb44eb8a67927dba" name="cryptsetup" arch="i586">
  <version epoch="0" ver="2.0.6" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1427976000">- Update to 1.6.7
  * Cryptsetup TCRYPT mode now supports VeraCrypt devices
    (TrueCrypt extension)
  * Support keyfile-offset and keyfile-size options even for plain
    volumes.
  * Support keyfile option for luksAddKey if the master key is
    specified.
  * For historic reasons, hashing in the plain mode is not used if
    keyfile is specified (with exception of --key-file=-). Print
    a warning if these parameters are ignored.
  * Support permanent device decryption for cryptsetup-reencrypt.
    To remove LUKS encryption from a device, you can now use
  - -decrypt option.
  * Allow to use --header option in all LUKS commands. The
  - -header always takes precedence over positional device argument.
  * Allow luksSuspend without need to specify a detached header.
  * Detect if O_DIRECT is usable on a device allocation. There are
    some strange storage stack configurations which wrongly allows
    to open devices with direct-io but fails on all IO operations later.
  * Add low-level performance options tuning for dmcrypt (for
    Linux 4.0 and later).
  * Get rid of libfipscheck library.
    (Note that this option was used only for Red Hat and derived
    distributions.) With recent FIPS changes we do not need to
    link to this FIPS monster anymore. Also drop some no longer
    needed FIPS mode checks.
  * Many fixes and clarifications to man pages.
  * Prevent compiler to optimize-out zeroing of buffers for on-stack
    variables.
  * Fix a crash if non-GNU strerror_r is used.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840000">- regenerate the initrd if cryptsetup tool changes
  (wanted by 90crypt dracut module)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840001">- Enable verbose build log.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441713600">- Update to 1.6.8
  * If the null cipher (no encryption) is used, allow only empty
    password for LUKS. (Previously cryptsetup accepted any password
    in this case.)
    The null cipher can be used only for testing and it is used
    temporarily during offline encrypting not yet encrypted device
    (cryptsetup-reencrypt tool).
    Accepting only empty password prevents situation when someone
    adds another LUKS device using the same UUID (UUID of existing
    LUKS device) with faked header containing null cipher.
    This could force user to use different LUKS device (with no
    encryption) without noticing.
    (IOW it prevents situation when attacker intentionally forces
    user to boot into different system just by LUKS header
    manipulation.)
    Properly configured systems should have an additional integrity
    protection in place here (LUKS here provides only
    confidentiality) but it is better to not allow this situation
    in the first place.
    (For more info see QubesOS Security Bulletin QSB-019-2015.)
  * Properly support stdin "-" handling for luksAddKey for both new
    and old keyfile parameters.
  * If encrypted device is file-backed (it uses underlying loop
    device), cryptsetup resize will try to resize underlying loop
    device as well. (It can be used to grow up file-backed device
    in one step.)
  * Cryptsetup now allows to use empty password through stdin pipe.
    (Intended only for testing in scripts.)</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1452340800">- update to 1.7.0:
  * The cryptsetup 1.7 release changes defaults for LUKS,
    there are no API changes.
  * Default hash function is now SHA256 (used in key derivation
    function and anti-forensic splitter).
  * Default iteration time for PBKDF2 is now 2 seconds.
  * Fix PBKDF2 iteration benchmark for longer key sizes.
  * Remove experimental warning for reencrypt tool.
  * Add optional libpasswdqc support for new LUKS passwords.
  * Update FAQ document.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1472126400">- Update to version 1.7.2:
  * Update LUKS documentation format.
    Clarify fixed sector size and keyslots alignment.
  * Support activation options for error handling modes in
    Linux kernel dm-verity module:
  - -ignore-corruption - dm-verity just logs detected corruption
  - -restart-on-corruption - dm-verity restarts the kernel if
    corruption is detected
    If the options above are not specified, default behavior for
    dm-verity remains. Default is that I/O operation fails with
    I/O error if corrupted block is detected.
  - -ignore-zero-blocks - Instructs dm-verity to not verify
    blocks that are expected to contain zeroes and always
    return zeroes directly instead.
    NOTE that these options could have security or functional
    impacts, do not use them without assessing the risks!
  * Fix help text for cipher benchmark specification
    (mention --cipher option).
  * Fix off-by-one error in maximum keyfile size.
    Allow keyfiles up to compiled-in default and not that value
    minus one.
  * Support resume of interrupted decryption in cryptsetup-reencrypt
    utility. To resume decryption, LUKS device UUID (--uuid option)
    option must be used.
  * Do not use direct-io for LUKS header with unaligned keyslots.
    Such headers were used only by the first cryptsetup-luks-1.0.0
    release (2005).
  * Fix device block size detection to properly work on particular
    file-based containers over underlying devices with 4k sectors.
- Update to version 1.7.1:
  * Code now uses kernel crypto API backend according to new
    changes introduced in mainline kernel
    While mainline kernel should contain backward compatible
    changes, some stable series kernels do not contain fully
    backported compatibility patches.
    Without these patches  most of cryptsetup operations
    (like unlocking device) fail.
    This change in cryptsetup ensures that all operations using
    kernel crypto API works even on these kernels.
  * The cryptsetup-reencrypt utility now properly detects removal
    of underlying link to block device and does not remove
    ongoing re-encryption log.
    This allows proper recovery (resume) of reencrypt operation later.
    NOTE: Never use /dev/disk/by-uuid/ path for reencryption utility,
    this link disappears once the device metadata is temporarily
    removed from device.
  * Cryptsetup now allows special "-" (standard input) keyfile handling
    even for TCRYPT (TrueCrypt and VeraCrypt compatible) devices.
  * Cryptsetup now fails if there are more keyfiles specified
    for non-TCRYPT device.
  * The luksKillSlot command now does not suppress provided password
    in batch mode (if password is wrong slot is not destroyed).
    Note that not providing password in batch mode means that keyslot
    is destroyed unconditionally.</changelog>
  <changelog author="mpluskal@suse.com" date="1489752000">- Update to version 1.7.4:
  * Allow to specify LUKS1 hash algorithm in Python luksFormat
    wrapper.
  * Use LUKS1 compiled-in defaults also in Python wrapper.
  * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward
    compatible API.
  * OpenSSL backend: Fix LibreSSL compatibility.
  * Check for data device and hash device area overlap in
    veritysetup.
  * Fix a possible race while allocating a free loop device.
  * Fix possible file descriptor leaks if libcryptsetup is run from
    a forked process.
  * Fix missing same_cpu_crypt flag in status command.
  * Various updates to FAQ and man pages.
- Changes for version 1.7.3:
  * Fix device access to hash offsets located beyond the 2GB device
    boundary in veritysetup.
  * Set configured (compile-time) default iteration time for
    devices created directly through libcryptsetup
  * Fix PBKDF2 benchmark to not double iteration count for specific
    corner case.
  * Verify passphrase in cryptsetup-reencrypt when encrypting a new
    drive.
  * OpenSSL backend: fix memory leak if hash context was repeatedly
    reused.
  * OpenSSL backend: add support for OpenSSL 1.1.0.
  * Fix several minor spelling errors.
  * Properly check maximal buffer size when parsing UUID from
    /dev/disk/.</changelog>
  <changelog author="mpluskal@suse.com" date="1493467200">- Update to version 1.7.5:
  * Fixes to luksFormat to properly support recent kernel running
    in FIPS mode (bsc#1031998).
  * Fixes accesses to unaligned hidden legacy TrueCrypt header.
  * Fixes to optional dracut ramdisk scripts for offline
    re-encryption on initial boot.</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1513944000">- Update to version 2.0.0:
  * Add support for new on-disk LUKS2 format
  * Enable to use system libargon2 instead of bundled version
  * Install tmpfiles.d configuration for LUKS2 locking directory
  * New command integritysetup: support for the new dm-integrity kernel target
  * Support for larger sector sizes for crypt devices
  * Miscellaneous fixes and improvements</changelog>
  <changelog author="astieger@suse.com" date="1517313600">- update to 2.0.1:
  * To store volume key into kernel keyring, kernel 4.15 with
    dm-crypt 1.18.1 is required
  * Increase maximum allowed PBKDF memory-cost limit to 4 GiB
  * Use /run/cryptsetup as default for cryptsetup locking dir
  * Introduce new 64-bit byte-offset *keyfile_device_offset functions.
  * New set of fucntions that allows 64-bit offsets even on 32bit systems
    are now availeble:
  - crypt_resume_by_keyfile_device_offset
  - crypt_keyslot_add_by_keyfile_device_offset
  - crypt_activate_by_keyfile_device_offset
  - crypt_keyfile_device_read
    The new functions have added the _device_ in name.
    Old functions are just internal wrappers around these.
  * Also cryptsetup --keyfile-offset and --new-keyfile-offset now
    allows 64-bit offsets as parameters.
  * Add error hint for wrongly formatted cipher strings in LUKS1 and
    properly fail in luksFormat if cipher format is missing required IV.</changelog>
  <changelog author="lnussel@suse.de" date="1534852800">- New version 2.0.4
  Changes since version 2.0.3
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Use the libblkid (blockid) library to detect foreign signatures
    on a device before LUKS format and LUKS2 auto-recovery.
    This change fixes an unexpected recovery using the secondary
    LUKS2 header after a device was already overwritten with
    another format (filesystem or LVM physical volume).
    LUKS2 will not recreate a primary header if it detects a valid
    foreign signature. In this situation, a user must always
    use cryptsetup repair command for the recovery.
    Note that libcryptsetup and utilities are now linked to libblkid
    as a new dependence.
    To compile code without blockid support (strongly discouraged),
    use --disable-blkid configure switch.
  * Add prompt for format and repair actions in cryptsetup and
    integritysetup if foreign signatures are detected on the device
    through the blockid library.
    After the confirmation, all known signatures are then wiped as
    part of the format or repair procedure.
  * Print consistent verbose message about keyslot and token numbers.
    For keyslot actions: Key slot &lt;number&gt; unlocked/created/removed.
    For token actions: Token &lt;number&gt; created/removed.
  * Print error, if a non-existent token is tried to be removed.
  * Add support for LUKS2 token definition export and import.
    The token command now can export/import customized token JSON file
    directly from command line. See the man page for more details.
  * Add support for new dm-integrity superblock version 2.
  * Add an error message when nothing was read from a key file.
  * Update cryptsetup man pages, including --type option usage.
  * Add a snapshot of LUKS2 format specification to documentation
    and accordingly fix supported secondary header offsets.
  * Add bundled optimized Argon2 SSE (X86_64 platform) code.
    If the bundled Argon2 code is used and the new configure switch
  - -enable-internal-sse-argon2 option is present, and compiler flags
    support required optimization, the code will try to use optimized
    and faster variant.
    Always use the shared library (--enable-libargon2) if possible.
    This option was added because an enterprise distribution
    rejected to support the shared Argon2 library and native support
    in generic cryptographic libraries is not ready yet.
  * Fix compilation with crypto backend for LibreSSL &gt;= 2.7.0.
    LibreSSL introduced OpenSSL 1.1.x API functions, so compatibility
    wrapper must be commented out.
  * Fix on-disk header size calculation for LUKS2 format if a specific
    data alignment is requested. Until now, the code used default size
    that could be wrong for converted devices.
  Changes since version 2.0.2
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Expose interface to unbound LUKS2 keyslots.
    Unbound LUKS2 keyslot allows storing a key material that is independent
    of master volume key (it is not bound to encrypted data segment).
  * New API extensions for unbound keyslots (LUKS2 only)
    crypt_keyslot_get_key_size() and crypt_volume_key_get()
    These functions allow to get key and key size for unbound keyslots.
  * New enum value CRYPT_SLOT_UNBOUND for keyslot status (LUKS2 only).
  * Add --unbound keyslot option to the cryptsetup luksAddKey command.
  * Add crypt_get_active_integrity_failures() call to get integrity
    failure count for dm-integrity devices.
  * Add crypt_get_pbkdf_default() function to get per-type PBKDF default
    setting.
  * Add new flag to crypt_keyslot_add_by_key() to force update device
    volume key. This call is mainly intended for a wrapped key change.
  * Allow volume key store in a file with cryptsetup.
    The --dump-master-key together with --master-key-file allows cryptsetup
    to store the binary volume key to a file instead of standard output.
  * Add support detached header for cryptsetup-reencrypt command.
  * Fix VeraCrypt PIM handling - use proper iterations count formula
    for PBKDF2-SHA512 and PBKDF2-Whirlpool used in system volumes.
  * Fix cryptsetup tcryptDump for VeraCrypt PIM (support --veracrypt-pim).
  * Add --with-default-luks-format configure time option.
    (Option to override default LUKS format version.)
  * Fix LUKS version conversion for detached (and trimmed) LUKS headers.
  * Add luksConvertKey cryptsetup command that converts specific keyslot
    from one PBKDF to another.
  * Do not allow conversion to LUKS2 if LUKSMETA (external tool metadata)
    header is detected.
  * More cleanup and hardening of LUKS2 keyslot specific validation options.
    Add more checks for cipher validity before writing metadata on-disk.
  * Do not allow LUKS1 version downconversion if the header contains tokens.
  * Add "paes" family ciphers (AES wrapped key scheme for mainframes)
    to allowed ciphers.
    Specific wrapped ley configuration logic must be done by 3rd party tool,
    LUKS2 stores only keyslot material and allow activation of the device.
  * Add support for --check-at-most-once option (kernel 4.17) to veritysetup.
    This flag can be dangerous; if you can control underlying device
    (you can change its content after it was verified) it will no longer
    prevent reading tampered data and also it does not prevent silent
    data corruptions that appear after the block was once read.
  * Fix return code (EPERM instead of EINVAL) and retry count for bad
    passphrase on non-tty input.
  * Enable support for FEC decoding in veritysetup to check dm-verity devices
    with additional Reed-Solomon code in userspace (verify command).
  Changes since version 2.0.1
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix a regression in early detection of inactive keyslot for luksKillSlot.
    It tried to ask for passphrase even for already erased keyslot.
  * Fix a regression in loopaesOpen processing for keyfile on standard input.
    Use of "-" argument was not working properly.
  * Add LUKS2 specific options for cryptsetup-reencrypt.
    Tokens and persistent flags are now transferred during reencryption;
    change of PBKDF keyslot parameters is now supported and allows
    to set precalculated values (no benchmarks).
  * Do not allow LUKS2 --persistent and --test-passphrase cryptsetup flags
    combination. Persistent flags are now stored only if the device was
    successfully activated with the specified flags.
  * Fix integritysetup format after recent Linux kernel changes that
    requires to setup key for HMAC in all cases.
    Previously integritysetup allowed HMAC with zero key that behaves
    like a plain hash.
  * Fix VeraCrypt PIM handling that modified internal iteration counts
    even for subsequent activations. The PIM count is no longer printed
    in debug log as it is sensitive information.
    Also, the code now skips legacy TrueCrypt algorithms if a PIM
    is specified (they cannot be used with PIM anyway).
  * PBKDF values cannot be set (even with force parameters) below
    hardcoded minimums. For PBKDF2 is it 1000 iterations, for Argon2
    it is 4 iterations and 32 KiB of memory cost.
  * Introduce new crypt_token_is_assigned() API function for reporting
    the binding between token and keyslots.
  * Allow crypt_token_json_set() API function to create internal token types.
    Do not allow unknown fields in internal token objects.
  * Print message in cryptsetup that about was aborted if a user did not
    answer YES in a query.</changelog>
  <changelog author="lnussel@suse.de" date="1540900800">- make parallell installable version for SLE12</changelog>
  <changelog author="lnussel@suse.de" date="1540900801">- Suggest hmac package (boo#1090768)
- remove old upgrade hack for upgrades from 12.1
- New version 2.0.5
  Changes since version 2.0.4
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Wipe full header areas (including unused) during LUKS format.
    Since this version, the whole area up to the data offset is zeroed,
    and subsequently, all keyslots areas are wiped with random data.
    This ensures that no remaining old data remains in the LUKS header
    areas, but it could slow down format operation on some devices.
    Previously only first 4k (or 32k for LUKS2) and the used keyslot
    was overwritten in the format operation.
  * Several fixes to error messages that were unintentionally replaced
    in previous versions with a silent exit code.
    More descriptive error messages were added, including error
    messages if
  - a device is unusable (not a block device, no access, etc.),
  - a LUKS device is not detected,
  - LUKS header load code detects unsupported version,
  - a keyslot decryption fails (also happens in the cipher check),
  - converting an inactive keyslot.
  * Device activation fails if data area overlaps with LUKS header.
  * Code now uses explicit_bzero to wipe memory if available
    (instead of own implementation).
  * Additional VeraCrypt modes are now supported, including Camellia
    and Kuznyechik symmetric ciphers (and cipher chains) and Streebog
    hash function. These were introduced in a recent VeraCrypt upstream.
    Note that Kuznyechik requires out-of-tree kernel module and
    Streebog hash function is available only with the gcrypt cryptographic
    backend for now.
  * Fixes static build for integritysetup if the pwquality library is used.
  * Allows passphrase change for unbound keyslots.
  * Fixes removed keyslot number in verbose message for luksKillSlot,
    luksRemoveKey and erase command.
  * Adds blkid scan when attempting to open a plain device and warn the user
    about existing device signatures in a ciphertext device.
  * Remove LUKS header signature if luksFormat fails to add the first keyslot.
  * Remove O_SYNC from device open and use fsync() to speed up
    wipe operation considerably.
  * Create --master-key-file in luksDump and fail if the file already exists.
  * Fixes a bug when LUKS2 authenticated encryption with a detached header
    wiped the header device instead of dm-integrity data device area (causing
    unnecessary LUKS2 header auto recovery).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1575028800">- New version 2.0.6 (jsc#SLE-5911, bsc#1165580):
  Changes since version 2.0.5
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix support of larger metadata areas in LUKS2 header.
    This release properly supports all specified metadata areas, as documented
    in LUKS2 format description (see docs/on-disk-format-luks2.pdf in archive).
    Currently, only default metadata area size is used (in format or convert).
    Later cryptsetup versions will allow increasing this metadata area size.
  * If AEAD (authenticated encryption) is used, cryptsetup now tries to check
    if the requested AEAD algorithm with specified key size is available
    in kernel crypto API.
    This change avoids formatting a device that cannot be later activated.
    For this function, the kernel must be compiled with the
    CONFIG_CRYPTO_USER_API_AEAD option enabled.
    Note that kernel user crypto API options (CONFIG_CRYPTO_USER_API and
    CONFIG_CRYPTO_USER_API_SKCIPHER) are already mandatory for LUKS2.
  * Fix setting of integrity no-journal flag.
    Now you can store this flag to metadata using --persistent option.
  * Fix cryptsetup-reencrypt to not keep temporary reencryption headers
    if interrupted during initial password prompt.
  * Adds early check to plain and LUKS2 formats to disallow device format
    if device size is not aligned to requested sector size.
    Previously it was possible, and the device was rejected to activate by
    kernel later.
  * Fix checking of hash algorithms availability for PBKDF early.
    Previously LUKS2 format allowed non-existent hash algorithm with
    invalid keyslot preventing the device from activation.
  * Allow Adiantum cipher construction (a non-authenticated length-preserving
    fast encryption scheme), so it can be used both for data encryption and
    keyslot encryption in LUKS1/2 devices.
    For benchmark, use:
    [#] cryptsetup benchmark -c xchacha12,aes-adiantum
    [#] cryptsetup benchmark -c xchacha20,aes-adiantum
    For LUKS format:
    [#] cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 &lt;device&gt;
    The support for Adiantum will be merged in Linux kernel 4.21.
    For more info see the paper https://eprint.iacr.org/2018/720.</changelog>
</package>
<package pkgid="a9bddcef1d3f0e722ffe4454b1c2e0f516fb44e5fa343fc6d573492897b84037" name="cryptsetup" arch="src">
  <version epoch="0" ver="2.0.6" rel="lp151.2.3.1"/>
  <changelog author="meissner@suse.com" date="1401192000">- version 1.6.4
  - new tarball / signature location
  * Implement new erase (with alias luksErase) command.
  * Add internal "whirlpool_gcryptbug hash" for accessing flawed
    Whirlpool hash in gcrypt (requires gcrypt 1.6.1 or above).
  * Allow to use --disable-gcrypt-pbkdf2 during configuration
    to force use internal PBKDF2 code.
  * Require gcrypt 1.6.1 for imported implementation of PBKDF2
    (PBKDF2 in gcrypt 1.6.0 is too slow).
  * Add --keep-key to cryptsetup-reencrypt.
  * By default verify new passphrase in luksChangeKey and luksAddKey
    commands (if input is from terminal).
  * Fix memory leak in Nettle crypto backend.
  * Support --tries option even for TCRYPT devices in cryptsetup.
  * Support --allow-discards option even for TCRYPT devices.
    (Note that this could destroy hidden volume and it is not suggested
    by original TrueCrypt security model.)
  * Link against -lrt for clock_gettime to fix undefined reference
    to clock_gettime error (introduced in 1.6.2).
  * Fix misleading error message when some algorithms are not available.
  * Count system time in PBKDF2 benchmark if kernel returns no self
    usage info.</changelog>
  <changelog author="meissner@suse.com" date="1407758400">- libcryptsetup4-hmac split off contain the hmac for FIPS certification</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407844800">- version 1.6.5
  * Allow LUKS header operation handling without requiring root privilege.
    It means that you can manipulate with keyslots as a regular user, only
    write access to device (or image) is required.
  * Fix internal PBKDF2 key derivation function implementation for alternative
    crypto backends (kernel, NSS) which do not support PBKDF2 directly and have
    issues with longer HMAC keys.
  * Support for Python3 for simple Python binding.
    Python &gt;= 2.6 is now required. You can set Python compiled version by setting
  - -with-python_version configure option (together with --enable-python).
  * Use internal PBKDF2 in Nettle library for Nettle crypto backend.
    Cryptsetup compilation requires Nettle &gt;= 2.6 (if using Nettle crypto backend).
  * Allow simple status of crypt device without providing metadata header.
    The command "cryptsetup status" will print basic info, even if you
    do not provide detached header argument.
  * Allow to specify ECB mode in cryptsetup benchmark.
  * Add some LUKS images for regression testing.
    Note that if image with Whirlpool fails, the most probable cause is that
    you have old gcrypt library with flawed whirlpool hash.
    Read FAQ section 8.3 for more info.
- Removed e2fsprogs-devel and libtool build requirements (not needed).
- Added libpwquality-devel and libuuid-devel build requirements.</changelog>
  <changelog author="meissner@suse.com" date="1408708800">- Use --enable-gcrypt-pbkdf2 to use the PBKDFv2 method from libgcrypt.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1410696000">- version 1.6.6
  * LUKS: Fix keyslot device access for devices which
    do not support direct IO operations. (Regression in 1.6.5.)
  * LUKS: Fallback to old temporary keyslot device mapping method
    if hash (for ESSIV) is not supported by userspace crypto
    library. (Regression in 1.6.5.)
  * Properly activate device with discard (TRIM for SSDs)
    if requested even if dm_crypt module is not yet loaded.
    Only if discard is not supported by the old kernel then
    the discard option is ignored.
  * Fix some static analysis build warnings (scan-build).
  * Report crypto lib version only once (and always add kernel
    version) in debug output.</changelog>
  <changelog author="mpluskal@suse.com" date="1427976000">- Update to 1.6.7
  * Cryptsetup TCRYPT mode now supports VeraCrypt devices
    (TrueCrypt extension)
  * Support keyfile-offset and keyfile-size options even for plain
    volumes.
  * Support keyfile option for luksAddKey if the master key is
    specified.
  * For historic reasons, hashing in the plain mode is not used if
    keyfile is specified (with exception of --key-file=-). Print
    a warning if these parameters are ignored.
  * Support permanent device decryption for cryptsetup-reencrypt.
    To remove LUKS encryption from a device, you can now use
  - -decrypt option.
  * Allow to use --header option in all LUKS commands. The
  - -header always takes precedence over positional device argument.
  * Allow luksSuspend without need to specify a detached header.
  * Detect if O_DIRECT is usable on a device allocation. There are
    some strange storage stack configurations which wrongly allows
    to open devices with direct-io but fails on all IO operations later.
  * Add low-level performance options tuning for dmcrypt (for
    Linux 4.0 and later).
  * Get rid of libfipscheck library.
    (Note that this option was used only for Red Hat and derived
    distributions.) With recent FIPS changes we do not need to
    link to this FIPS monster anymore. Also drop some no longer
    needed FIPS mode checks.
  * Many fixes and clarifications to man pages.
  * Prevent compiler to optimize-out zeroing of buffers for on-stack
    variables.
  * Fix a crash if non-GNU strerror_r is used.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840000">- regenerate the initrd if cryptsetup tool changes
  (wanted by 90crypt dracut module)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840001">- Enable verbose build log.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441713600">- Update to 1.6.8
  * If the null cipher (no encryption) is used, allow only empty
    password for LUKS. (Previously cryptsetup accepted any password
    in this case.)
    The null cipher can be used only for testing and it is used
    temporarily during offline encrypting not yet encrypted device
    (cryptsetup-reencrypt tool).
    Accepting only empty password prevents situation when someone
    adds another LUKS device using the same UUID (UUID of existing
    LUKS device) with faked header containing null cipher.
    This could force user to use different LUKS device (with no
    encryption) without noticing.
    (IOW it prevents situation when attacker intentionally forces
    user to boot into different system just by LUKS header
    manipulation.)
    Properly configured systems should have an additional integrity
    protection in place here (LUKS here provides only
    confidentiality) but it is better to not allow this situation
    in the first place.
    (For more info see QubesOS Security Bulletin QSB-019-2015.)
  * Properly support stdin "-" handling for luksAddKey for both new
    and old keyfile parameters.
  * If encrypted device is file-backed (it uses underlying loop
    device), cryptsetup resize will try to resize underlying loop
    device as well. (It can be used to grow up file-backed device
    in one step.)
  * Cryptsetup now allows to use empty password through stdin pipe.
    (Intended only for testing in scripts.)</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1452340800">- update to 1.7.0:
  * The cryptsetup 1.7 release changes defaults for LUKS,
    there are no API changes.
  * Default hash function is now SHA256 (used in key derivation
    function and anti-forensic splitter).
  * Default iteration time for PBKDF2 is now 2 seconds.
  * Fix PBKDF2 iteration benchmark for longer key sizes.
  * Remove experimental warning for reencrypt tool.
  * Add optional libpasswdqc support for new LUKS passwords.
  * Update FAQ document.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1472126400">- Update to version 1.7.2:
  * Update LUKS documentation format.
    Clarify fixed sector size and keyslots alignment.
  * Support activation options for error handling modes in
    Linux kernel dm-verity module:
  - -ignore-corruption - dm-verity just logs detected corruption
  - -restart-on-corruption - dm-verity restarts the kernel if
    corruption is detected
    If the options above are not specified, default behavior for
    dm-verity remains. Default is that I/O operation fails with
    I/O error if corrupted block is detected.
  - -ignore-zero-blocks - Instructs dm-verity to not verify
    blocks that are expected to contain zeroes and always
    return zeroes directly instead.
    NOTE that these options could have security or functional
    impacts, do not use them without assessing the risks!
  * Fix help text for cipher benchmark specification
    (mention --cipher option).
  * Fix off-by-one error in maximum keyfile size.
    Allow keyfiles up to compiled-in default and not that value
    minus one.
  * Support resume of interrupted decryption in cryptsetup-reencrypt
    utility. To resume decryption, LUKS device UUID (--uuid option)
    option must be used.
  * Do not use direct-io for LUKS header with unaligned keyslots.
    Such headers were used only by the first cryptsetup-luks-1.0.0
    release (2005).
  * Fix device block size detection to properly work on particular
    file-based containers over underlying devices with 4k sectors.
- Update to version 1.7.1:
  * Code now uses kernel crypto API backend according to new
    changes introduced in mainline kernel
    While mainline kernel should contain backward compatible
    changes, some stable series kernels do not contain fully
    backported compatibility patches.
    Without these patches  most of cryptsetup operations
    (like unlocking device) fail.
    This change in cryptsetup ensures that all operations using
    kernel crypto API works even on these kernels.
  * The cryptsetup-reencrypt utility now properly detects removal
    of underlying link to block device and does not remove
    ongoing re-encryption log.
    This allows proper recovery (resume) of reencrypt operation later.
    NOTE: Never use /dev/disk/by-uuid/ path for reencryption utility,
    this link disappears once the device metadata is temporarily
    removed from device.
  * Cryptsetup now allows special "-" (standard input) keyfile handling
    even for TCRYPT (TrueCrypt and VeraCrypt compatible) devices.
  * Cryptsetup now fails if there are more keyfiles specified
    for non-TCRYPT device.
  * The luksKillSlot command now does not suppress provided password
    in batch mode (if password is wrong slot is not destroyed).
    Note that not providing password in batch mode means that keyslot
    is destroyed unconditionally.</changelog>
  <changelog author="mpluskal@suse.com" date="1489752000">- Update to version 1.7.4:
  * Allow to specify LUKS1 hash algorithm in Python luksFormat
    wrapper.
  * Use LUKS1 compiled-in defaults also in Python wrapper.
  * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward
    compatible API.
  * OpenSSL backend: Fix LibreSSL compatibility.
  * Check for data device and hash device area overlap in
    veritysetup.
  * Fix a possible race while allocating a free loop device.
  * Fix possible file descriptor leaks if libcryptsetup is run from
    a forked process.
  * Fix missing same_cpu_crypt flag in status command.
  * Various updates to FAQ and man pages.
- Changes for version 1.7.3:
  * Fix device access to hash offsets located beyond the 2GB device
    boundary in veritysetup.
  * Set configured (compile-time) default iteration time for
    devices created directly through libcryptsetup
  * Fix PBKDF2 benchmark to not double iteration count for specific
    corner case.
  * Verify passphrase in cryptsetup-reencrypt when encrypting a new
    drive.
  * OpenSSL backend: fix memory leak if hash context was repeatedly
    reused.
  * OpenSSL backend: add support for OpenSSL 1.1.0.
  * Fix several minor spelling errors.
  * Properly check maximal buffer size when parsing UUID from
    /dev/disk/.</changelog>
  <changelog author="mpluskal@suse.com" date="1493467200">- Update to version 1.7.5:
  * Fixes to luksFormat to properly support recent kernel running
    in FIPS mode (bsc#1031998).
  * Fixes accesses to unaligned hidden legacy TrueCrypt header.
  * Fixes to optional dracut ramdisk scripts for offline
    re-encryption on initial boot.</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1513944000">- Update to version 2.0.0:
  * Add support for new on-disk LUKS2 format
  * Enable to use system libargon2 instead of bundled version
  * Install tmpfiles.d configuration for LUKS2 locking directory
  * New command integritysetup: support for the new dm-integrity kernel target
  * Support for larger sector sizes for crypt devices
  * Miscellaneous fixes and improvements</changelog>
  <changelog author="astieger@suse.com" date="1517313600">- update to 2.0.1:
  * To store volume key into kernel keyring, kernel 4.15 with
    dm-crypt 1.18.1 is required
  * Increase maximum allowed PBKDF memory-cost limit to 4 GiB
  * Use /run/cryptsetup as default for cryptsetup locking dir
  * Introduce new 64-bit byte-offset *keyfile_device_offset functions.
  * New set of fucntions that allows 64-bit offsets even on 32bit systems
    are now availeble:
  - crypt_resume_by_keyfile_device_offset
  - crypt_keyslot_add_by_keyfile_device_offset
  - crypt_activate_by_keyfile_device_offset
  - crypt_keyfile_device_read
    The new functions have added the _device_ in name.
    Old functions are just internal wrappers around these.
  * Also cryptsetup --keyfile-offset and --new-keyfile-offset now
    allows 64-bit offsets as parameters.
  * Add error hint for wrongly formatted cipher strings in LUKS1 and
    properly fail in luksFormat if cipher format is missing required IV.</changelog>
  <changelog author="lnussel@suse.de" date="1534852800">- New version 2.0.4
  Changes since version 2.0.3
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Use the libblkid (blockid) library to detect foreign signatures
    on a device before LUKS format and LUKS2 auto-recovery.
    This change fixes an unexpected recovery using the secondary
    LUKS2 header after a device was already overwritten with
    another format (filesystem or LVM physical volume).
    LUKS2 will not recreate a primary header if it detects a valid
    foreign signature. In this situation, a user must always
    use cryptsetup repair command for the recovery.
    Note that libcryptsetup and utilities are now linked to libblkid
    as a new dependence.
    To compile code without blockid support (strongly discouraged),
    use --disable-blkid configure switch.
  * Add prompt for format and repair actions in cryptsetup and
    integritysetup if foreign signatures are detected on the device
    through the blockid library.
    After the confirmation, all known signatures are then wiped as
    part of the format or repair procedure.
  * Print consistent verbose message about keyslot and token numbers.
    For keyslot actions: Key slot &lt;number&gt; unlocked/created/removed.
    For token actions: Token &lt;number&gt; created/removed.
  * Print error, if a non-existent token is tried to be removed.
  * Add support for LUKS2 token definition export and import.
    The token command now can export/import customized token JSON file
    directly from command line. See the man page for more details.
  * Add support for new dm-integrity superblock version 2.
  * Add an error message when nothing was read from a key file.
  * Update cryptsetup man pages, including --type option usage.
  * Add a snapshot of LUKS2 format specification to documentation
    and accordingly fix supported secondary header offsets.
  * Add bundled optimized Argon2 SSE (X86_64 platform) code.
    If the bundled Argon2 code is used and the new configure switch
  - -enable-internal-sse-argon2 option is present, and compiler flags
    support required optimization, the code will try to use optimized
    and faster variant.
    Always use the shared library (--enable-libargon2) if possible.
    This option was added because an enterprise distribution
    rejected to support the shared Argon2 library and native support
    in generic cryptographic libraries is not ready yet.
  * Fix compilation with crypto backend for LibreSSL &gt;= 2.7.0.
    LibreSSL introduced OpenSSL 1.1.x API functions, so compatibility
    wrapper must be commented out.
  * Fix on-disk header size calculation for LUKS2 format if a specific
    data alignment is requested. Until now, the code used default size
    that could be wrong for converted devices.
  Changes since version 2.0.2
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Expose interface to unbound LUKS2 keyslots.
    Unbound LUKS2 keyslot allows storing a key material that is independent
    of master volume key (it is not bound to encrypted data segment).
  * New API extensions for unbound keyslots (LUKS2 only)
    crypt_keyslot_get_key_size() and crypt_volume_key_get()
    These functions allow to get key and key size for unbound keyslots.
  * New enum value CRYPT_SLOT_UNBOUND for keyslot status (LUKS2 only).
  * Add --unbound keyslot option to the cryptsetup luksAddKey command.
  * Add crypt_get_active_integrity_failures() call to get integrity
    failure count for dm-integrity devices.
  * Add crypt_get_pbkdf_default() function to get per-type PBKDF default
    setting.
  * Add new flag to crypt_keyslot_add_by_key() to force update device
    volume key. This call is mainly intended for a wrapped key change.
  * Allow volume key store in a file with cryptsetup.
    The --dump-master-key together with --master-key-file allows cryptsetup
    to store the binary volume key to a file instead of standard output.
  * Add support detached header for cryptsetup-reencrypt command.
  * Fix VeraCrypt PIM handling - use proper iterations count formula
    for PBKDF2-SHA512 and PBKDF2-Whirlpool used in system volumes.
  * Fix cryptsetup tcryptDump for VeraCrypt PIM (support --veracrypt-pim).
  * Add --with-default-luks-format configure time option.
    (Option to override default LUKS format version.)
  * Fix LUKS version conversion for detached (and trimmed) LUKS headers.
  * Add luksConvertKey cryptsetup command that converts specific keyslot
    from one PBKDF to another.
  * Do not allow conversion to LUKS2 if LUKSMETA (external tool metadata)
    header is detected.
  * More cleanup and hardening of LUKS2 keyslot specific validation options.
    Add more checks for cipher validity before writing metadata on-disk.
  * Do not allow LUKS1 version downconversion if the header contains tokens.
  * Add "paes" family ciphers (AES wrapped key scheme for mainframes)
    to allowed ciphers.
    Specific wrapped ley configuration logic must be done by 3rd party tool,
    LUKS2 stores only keyslot material and allow activation of the device.
  * Add support for --check-at-most-once option (kernel 4.17) to veritysetup.
    This flag can be dangerous; if you can control underlying device
    (you can change its content after it was verified) it will no longer
    prevent reading tampered data and also it does not prevent silent
    data corruptions that appear after the block was once read.
  * Fix return code (EPERM instead of EINVAL) and retry count for bad
    passphrase on non-tty input.
  * Enable support for FEC decoding in veritysetup to check dm-verity devices
    with additional Reed-Solomon code in userspace (verify command).
  Changes since version 2.0.1
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix a regression in early detection of inactive keyslot for luksKillSlot.
    It tried to ask for passphrase even for already erased keyslot.
  * Fix a regression in loopaesOpen processing for keyfile on standard input.
    Use of "-" argument was not working properly.
  * Add LUKS2 specific options for cryptsetup-reencrypt.
    Tokens and persistent flags are now transferred during reencryption;
    change of PBKDF keyslot parameters is now supported and allows
    to set precalculated values (no benchmarks).
  * Do not allow LUKS2 --persistent and --test-passphrase cryptsetup flags
    combination. Persistent flags are now stored only if the device was
    successfully activated with the specified flags.
  * Fix integritysetup format after recent Linux kernel changes that
    requires to setup key for HMAC in all cases.
    Previously integritysetup allowed HMAC with zero key that behaves
    like a plain hash.
  * Fix VeraCrypt PIM handling that modified internal iteration counts
    even for subsequent activations. The PIM count is no longer printed
    in debug log as it is sensitive information.
    Also, the code now skips legacy TrueCrypt algorithms if a PIM
    is specified (they cannot be used with PIM anyway).
  * PBKDF values cannot be set (even with force parameters) below
    hardcoded minimums. For PBKDF2 is it 1000 iterations, for Argon2
    it is 4 iterations and 32 KiB of memory cost.
  * Introduce new crypt_token_is_assigned() API function for reporting
    the binding between token and keyslots.
  * Allow crypt_token_json_set() API function to create internal token types.
    Do not allow unknown fields in internal token objects.
  * Print message in cryptsetup that about was aborted if a user did not
    answer YES in a query.</changelog>
  <changelog author="lnussel@suse.de" date="1540900800">- make parallell installable version for SLE12</changelog>
  <changelog author="lnussel@suse.de" date="1540900801">- Suggest hmac package (boo#1090768)
- remove old upgrade hack for upgrades from 12.1
- New version 2.0.5
  Changes since version 2.0.4
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Wipe full header areas (including unused) during LUKS format.
    Since this version, the whole area up to the data offset is zeroed,
    and subsequently, all keyslots areas are wiped with random data.
    This ensures that no remaining old data remains in the LUKS header
    areas, but it could slow down format operation on some devices.
    Previously only first 4k (or 32k for LUKS2) and the used keyslot
    was overwritten in the format operation.
  * Several fixes to error messages that were unintentionally replaced
    in previous versions with a silent exit code.
    More descriptive error messages were added, including error
    messages if
  - a device is unusable (not a block device, no access, etc.),
  - a LUKS device is not detected,
  - LUKS header load code detects unsupported version,
  - a keyslot decryption fails (also happens in the cipher check),
  - converting an inactive keyslot.
  * Device activation fails if data area overlaps with LUKS header.
  * Code now uses explicit_bzero to wipe memory if available
    (instead of own implementation).
  * Additional VeraCrypt modes are now supported, including Camellia
    and Kuznyechik symmetric ciphers (and cipher chains) and Streebog
    hash function. These were introduced in a recent VeraCrypt upstream.
    Note that Kuznyechik requires out-of-tree kernel module and
    Streebog hash function is available only with the gcrypt cryptographic
    backend for now.
  * Fixes static build for integritysetup if the pwquality library is used.
  * Allows passphrase change for unbound keyslots.
  * Fixes removed keyslot number in verbose message for luksKillSlot,
    luksRemoveKey and erase command.
  * Adds blkid scan when attempting to open a plain device and warn the user
    about existing device signatures in a ciphertext device.
  * Remove LUKS header signature if luksFormat fails to add the first keyslot.
  * Remove O_SYNC from device open and use fsync() to speed up
    wipe operation considerably.
  * Create --master-key-file in luksDump and fail if the file already exists.
  * Fixes a bug when LUKS2 authenticated encryption with a detached header
    wiped the header device instead of dm-integrity data device area (causing
    unnecessary LUKS2 header auto recovery).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1575028800">- New version 2.0.6 (jsc#SLE-5911, bsc#1165580):
  Changes since version 2.0.5
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix support of larger metadata areas in LUKS2 header.
    This release properly supports all specified metadata areas, as documented
    in LUKS2 format description (see docs/on-disk-format-luks2.pdf in archive).
    Currently, only default metadata area size is used (in format or convert).
    Later cryptsetup versions will allow increasing this metadata area size.
  * If AEAD (authenticated encryption) is used, cryptsetup now tries to check
    if the requested AEAD algorithm with specified key size is available
    in kernel crypto API.
    This change avoids formatting a device that cannot be later activated.
    For this function, the kernel must be compiled with the
    CONFIG_CRYPTO_USER_API_AEAD option enabled.
    Note that kernel user crypto API options (CONFIG_CRYPTO_USER_API and
    CONFIG_CRYPTO_USER_API_SKCIPHER) are already mandatory for LUKS2.
  * Fix setting of integrity no-journal flag.
    Now you can store this flag to metadata using --persistent option.
  * Fix cryptsetup-reencrypt to not keep temporary reencryption headers
    if interrupted during initial password prompt.
  * Adds early check to plain and LUKS2 formats to disallow device format
    if device size is not aligned to requested sector size.
    Previously it was possible, and the device was rejected to activate by
    kernel later.
  * Fix checking of hash algorithms availability for PBKDF early.
    Previously LUKS2 format allowed non-existent hash algorithm with
    invalid keyslot preventing the device from activation.
  * Allow Adiantum cipher construction (a non-authenticated length-preserving
    fast encryption scheme), so it can be used both for data encryption and
    keyslot encryption in LUKS1/2 devices.
    For benchmark, use:
    [#] cryptsetup benchmark -c xchacha12,aes-adiantum
    [#] cryptsetup benchmark -c xchacha20,aes-adiantum
    For LUKS format:
    [#] cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 &lt;device&gt;
    The support for Adiantum will be merged in Linux kernel 4.21.
    For more info see the paper https://eprint.iacr.org/2018/720.</changelog>
</package>
<package pkgid="1e2939d845ead195de2634fee0289c672f725652a9a00f2a2d47be9df80c52a7" name="cryptsetup" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1427976000">- Update to 1.6.7
  * Cryptsetup TCRYPT mode now supports VeraCrypt devices
    (TrueCrypt extension)
  * Support keyfile-offset and keyfile-size options even for plain
    volumes.
  * Support keyfile option for luksAddKey if the master key is
    specified.
  * For historic reasons, hashing in the plain mode is not used if
    keyfile is specified (with exception of --key-file=-). Print
    a warning if these parameters are ignored.
  * Support permanent device decryption for cryptsetup-reencrypt.
    To remove LUKS encryption from a device, you can now use
  - -decrypt option.
  * Allow to use --header option in all LUKS commands. The
  - -header always takes precedence over positional device argument.
  * Allow luksSuspend without need to specify a detached header.
  * Detect if O_DIRECT is usable on a device allocation. There are
    some strange storage stack configurations which wrongly allows
    to open devices with direct-io but fails on all IO operations later.
  * Add low-level performance options tuning for dmcrypt (for
    Linux 4.0 and later).
  * Get rid of libfipscheck library.
    (Note that this option was used only for Red Hat and derived
    distributions.) With recent FIPS changes we do not need to
    link to this FIPS monster anymore. Also drop some no longer
    needed FIPS mode checks.
  * Many fixes and clarifications to man pages.
  * Prevent compiler to optimize-out zeroing of buffers for on-stack
    variables.
  * Fix a crash if non-GNU strerror_r is used.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840000">- regenerate the initrd if cryptsetup tool changes
  (wanted by 90crypt dracut module)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840001">- Enable verbose build log.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441713600">- Update to 1.6.8
  * If the null cipher (no encryption) is used, allow only empty
    password for LUKS. (Previously cryptsetup accepted any password
    in this case.)
    The null cipher can be used only for testing and it is used
    temporarily during offline encrypting not yet encrypted device
    (cryptsetup-reencrypt tool).
    Accepting only empty password prevents situation when someone
    adds another LUKS device using the same UUID (UUID of existing
    LUKS device) with faked header containing null cipher.
    This could force user to use different LUKS device (with no
    encryption) without noticing.
    (IOW it prevents situation when attacker intentionally forces
    user to boot into different system just by LUKS header
    manipulation.)
    Properly configured systems should have an additional integrity
    protection in place here (LUKS here provides only
    confidentiality) but it is better to not allow this situation
    in the first place.
    (For more info see QubesOS Security Bulletin QSB-019-2015.)
  * Properly support stdin "-" handling for luksAddKey for both new
    and old keyfile parameters.
  * If encrypted device is file-backed (it uses underlying loop
    device), cryptsetup resize will try to resize underlying loop
    device as well. (It can be used to grow up file-backed device
    in one step.)
  * Cryptsetup now allows to use empty password through stdin pipe.
    (Intended only for testing in scripts.)</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1452340800">- update to 1.7.0:
  * The cryptsetup 1.7 release changes defaults for LUKS,
    there are no API changes.
  * Default hash function is now SHA256 (used in key derivation
    function and anti-forensic splitter).
  * Default iteration time for PBKDF2 is now 2 seconds.
  * Fix PBKDF2 iteration benchmark for longer key sizes.
  * Remove experimental warning for reencrypt tool.
  * Add optional libpasswdqc support for new LUKS passwords.
  * Update FAQ document.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1472126400">- Update to version 1.7.2:
  * Update LUKS documentation format.
    Clarify fixed sector size and keyslots alignment.
  * Support activation options for error handling modes in
    Linux kernel dm-verity module:
  - -ignore-corruption - dm-verity just logs detected corruption
  - -restart-on-corruption - dm-verity restarts the kernel if
    corruption is detected
    If the options above are not specified, default behavior for
    dm-verity remains. Default is that I/O operation fails with
    I/O error if corrupted block is detected.
  - -ignore-zero-blocks - Instructs dm-verity to not verify
    blocks that are expected to contain zeroes and always
    return zeroes directly instead.
    NOTE that these options could have security or functional
    impacts, do not use them without assessing the risks!
  * Fix help text for cipher benchmark specification
    (mention --cipher option).
  * Fix off-by-one error in maximum keyfile size.
    Allow keyfiles up to compiled-in default and not that value
    minus one.
  * Support resume of interrupted decryption in cryptsetup-reencrypt
    utility. To resume decryption, LUKS device UUID (--uuid option)
    option must be used.
  * Do not use direct-io for LUKS header with unaligned keyslots.
    Such headers were used only by the first cryptsetup-luks-1.0.0
    release (2005).
  * Fix device block size detection to properly work on particular
    file-based containers over underlying devices with 4k sectors.
- Update to version 1.7.1:
  * Code now uses kernel crypto API backend according to new
    changes introduced in mainline kernel
    While mainline kernel should contain backward compatible
    changes, some stable series kernels do not contain fully
    backported compatibility patches.
    Without these patches  most of cryptsetup operations
    (like unlocking device) fail.
    This change in cryptsetup ensures that all operations using
    kernel crypto API works even on these kernels.
  * The cryptsetup-reencrypt utility now properly detects removal
    of underlying link to block device and does not remove
    ongoing re-encryption log.
    This allows proper recovery (resume) of reencrypt operation later.
    NOTE: Never use /dev/disk/by-uuid/ path for reencryption utility,
    this link disappears once the device metadata is temporarily
    removed from device.
  * Cryptsetup now allows special "-" (standard input) keyfile handling
    even for TCRYPT (TrueCrypt and VeraCrypt compatible) devices.
  * Cryptsetup now fails if there are more keyfiles specified
    for non-TCRYPT device.
  * The luksKillSlot command now does not suppress provided password
    in batch mode (if password is wrong slot is not destroyed).
    Note that not providing password in batch mode means that keyslot
    is destroyed unconditionally.</changelog>
  <changelog author="mpluskal@suse.com" date="1489752000">- Update to version 1.7.4:
  * Allow to specify LUKS1 hash algorithm in Python luksFormat
    wrapper.
  * Use LUKS1 compiled-in defaults also in Python wrapper.
  * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward
    compatible API.
  * OpenSSL backend: Fix LibreSSL compatibility.
  * Check for data device and hash device area overlap in
    veritysetup.
  * Fix a possible race while allocating a free loop device.
  * Fix possible file descriptor leaks if libcryptsetup is run from
    a forked process.
  * Fix missing same_cpu_crypt flag in status command.
  * Various updates to FAQ and man pages.
- Changes for version 1.7.3:
  * Fix device access to hash offsets located beyond the 2GB device
    boundary in veritysetup.
  * Set configured (compile-time) default iteration time for
    devices created directly through libcryptsetup
  * Fix PBKDF2 benchmark to not double iteration count for specific
    corner case.
  * Verify passphrase in cryptsetup-reencrypt when encrypting a new
    drive.
  * OpenSSL backend: fix memory leak if hash context was repeatedly
    reused.
  * OpenSSL backend: add support for OpenSSL 1.1.0.
  * Fix several minor spelling errors.
  * Properly check maximal buffer size when parsing UUID from
    /dev/disk/.</changelog>
  <changelog author="mpluskal@suse.com" date="1493467200">- Update to version 1.7.5:
  * Fixes to luksFormat to properly support recent kernel running
    in FIPS mode (bsc#1031998).
  * Fixes accesses to unaligned hidden legacy TrueCrypt header.
  * Fixes to optional dracut ramdisk scripts for offline
    re-encryption on initial boot.</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1513944000">- Update to version 2.0.0:
  * Add support for new on-disk LUKS2 format
  * Enable to use system libargon2 instead of bundled version
  * Install tmpfiles.d configuration for LUKS2 locking directory
  * New command integritysetup: support for the new dm-integrity kernel target
  * Support for larger sector sizes for crypt devices
  * Miscellaneous fixes and improvements</changelog>
  <changelog author="astieger@suse.com" date="1517313600">- update to 2.0.1:
  * To store volume key into kernel keyring, kernel 4.15 with
    dm-crypt 1.18.1 is required
  * Increase maximum allowed PBKDF memory-cost limit to 4 GiB
  * Use /run/cryptsetup as default for cryptsetup locking dir
  * Introduce new 64-bit byte-offset *keyfile_device_offset functions.
  * New set of fucntions that allows 64-bit offsets even on 32bit systems
    are now availeble:
  - crypt_resume_by_keyfile_device_offset
  - crypt_keyslot_add_by_keyfile_device_offset
  - crypt_activate_by_keyfile_device_offset
  - crypt_keyfile_device_read
    The new functions have added the _device_ in name.
    Old functions are just internal wrappers around these.
  * Also cryptsetup --keyfile-offset and --new-keyfile-offset now
    allows 64-bit offsets as parameters.
  * Add error hint for wrongly formatted cipher strings in LUKS1 and
    properly fail in luksFormat if cipher format is missing required IV.</changelog>
  <changelog author="lnussel@suse.de" date="1534852800">- New version 2.0.4
  Changes since version 2.0.3
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Use the libblkid (blockid) library to detect foreign signatures
    on a device before LUKS format and LUKS2 auto-recovery.
    This change fixes an unexpected recovery using the secondary
    LUKS2 header after a device was already overwritten with
    another format (filesystem or LVM physical volume).
    LUKS2 will not recreate a primary header if it detects a valid
    foreign signature. In this situation, a user must always
    use cryptsetup repair command for the recovery.
    Note that libcryptsetup and utilities are now linked to libblkid
    as a new dependence.
    To compile code without blockid support (strongly discouraged),
    use --disable-blkid configure switch.
  * Add prompt for format and repair actions in cryptsetup and
    integritysetup if foreign signatures are detected on the device
    through the blockid library.
    After the confirmation, all known signatures are then wiped as
    part of the format or repair procedure.
  * Print consistent verbose message about keyslot and token numbers.
    For keyslot actions: Key slot &lt;number&gt; unlocked/created/removed.
    For token actions: Token &lt;number&gt; created/removed.
  * Print error, if a non-existent token is tried to be removed.
  * Add support for LUKS2 token definition export and import.
    The token command now can export/import customized token JSON file
    directly from command line. See the man page for more details.
  * Add support for new dm-integrity superblock version 2.
  * Add an error message when nothing was read from a key file.
  * Update cryptsetup man pages, including --type option usage.
  * Add a snapshot of LUKS2 format specification to documentation
    and accordingly fix supported secondary header offsets.
  * Add bundled optimized Argon2 SSE (X86_64 platform) code.
    If the bundled Argon2 code is used and the new configure switch
  - -enable-internal-sse-argon2 option is present, and compiler flags
    support required optimization, the code will try to use optimized
    and faster variant.
    Always use the shared library (--enable-libargon2) if possible.
    This option was added because an enterprise distribution
    rejected to support the shared Argon2 library and native support
    in generic cryptographic libraries is not ready yet.
  * Fix compilation with crypto backend for LibreSSL &gt;= 2.7.0.
    LibreSSL introduced OpenSSL 1.1.x API functions, so compatibility
    wrapper must be commented out.
  * Fix on-disk header size calculation for LUKS2 format if a specific
    data alignment is requested. Until now, the code used default size
    that could be wrong for converted devices.
  Changes since version 2.0.2
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Expose interface to unbound LUKS2 keyslots.
    Unbound LUKS2 keyslot allows storing a key material that is independent
    of master volume key (it is not bound to encrypted data segment).
  * New API extensions for unbound keyslots (LUKS2 only)
    crypt_keyslot_get_key_size() and crypt_volume_key_get()
    These functions allow to get key and key size for unbound keyslots.
  * New enum value CRYPT_SLOT_UNBOUND for keyslot status (LUKS2 only).
  * Add --unbound keyslot option to the cryptsetup luksAddKey command.
  * Add crypt_get_active_integrity_failures() call to get integrity
    failure count for dm-integrity devices.
  * Add crypt_get_pbkdf_default() function to get per-type PBKDF default
    setting.
  * Add new flag to crypt_keyslot_add_by_key() to force update device
    volume key. This call is mainly intended for a wrapped key change.
  * Allow volume key store in a file with cryptsetup.
    The --dump-master-key together with --master-key-file allows cryptsetup
    to store the binary volume key to a file instead of standard output.
  * Add support detached header for cryptsetup-reencrypt command.
  * Fix VeraCrypt PIM handling - use proper iterations count formula
    for PBKDF2-SHA512 and PBKDF2-Whirlpool used in system volumes.
  * Fix cryptsetup tcryptDump for VeraCrypt PIM (support --veracrypt-pim).
  * Add --with-default-luks-format configure time option.
    (Option to override default LUKS format version.)
  * Fix LUKS version conversion for detached (and trimmed) LUKS headers.
  * Add luksConvertKey cryptsetup command that converts specific keyslot
    from one PBKDF to another.
  * Do not allow conversion to LUKS2 if LUKSMETA (external tool metadata)
    header is detected.
  * More cleanup and hardening of LUKS2 keyslot specific validation options.
    Add more checks for cipher validity before writing metadata on-disk.
  * Do not allow LUKS1 version downconversion if the header contains tokens.
  * Add "paes" family ciphers (AES wrapped key scheme for mainframes)
    to allowed ciphers.
    Specific wrapped ley configuration logic must be done by 3rd party tool,
    LUKS2 stores only keyslot material and allow activation of the device.
  * Add support for --check-at-most-once option (kernel 4.17) to veritysetup.
    This flag can be dangerous; if you can control underlying device
    (you can change its content after it was verified) it will no longer
    prevent reading tampered data and also it does not prevent silent
    data corruptions that appear after the block was once read.
  * Fix return code (EPERM instead of EINVAL) and retry count for bad
    passphrase on non-tty input.
  * Enable support for FEC decoding in veritysetup to check dm-verity devices
    with additional Reed-Solomon code in userspace (verify command).
  Changes since version 2.0.1
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix a regression in early detection of inactive keyslot for luksKillSlot.
    It tried to ask for passphrase even for already erased keyslot.
  * Fix a regression in loopaesOpen processing for keyfile on standard input.
    Use of "-" argument was not working properly.
  * Add LUKS2 specific options for cryptsetup-reencrypt.
    Tokens and persistent flags are now transferred during reencryption;
    change of PBKDF keyslot parameters is now supported and allows
    to set precalculated values (no benchmarks).
  * Do not allow LUKS2 --persistent and --test-passphrase cryptsetup flags
    combination. Persistent flags are now stored only if the device was
    successfully activated with the specified flags.
  * Fix integritysetup format after recent Linux kernel changes that
    requires to setup key for HMAC in all cases.
    Previously integritysetup allowed HMAC with zero key that behaves
    like a plain hash.
  * Fix VeraCrypt PIM handling that modified internal iteration counts
    even for subsequent activations. The PIM count is no longer printed
    in debug log as it is sensitive information.
    Also, the code now skips legacy TrueCrypt algorithms if a PIM
    is specified (they cannot be used with PIM anyway).
  * PBKDF values cannot be set (even with force parameters) below
    hardcoded minimums. For PBKDF2 is it 1000 iterations, for Argon2
    it is 4 iterations and 32 KiB of memory cost.
  * Introduce new crypt_token_is_assigned() API function for reporting
    the binding between token and keyslots.
  * Allow crypt_token_json_set() API function to create internal token types.
    Do not allow unknown fields in internal token objects.
  * Print message in cryptsetup that about was aborted if a user did not
    answer YES in a query.</changelog>
  <changelog author="lnussel@suse.de" date="1540900800">- make parallell installable version for SLE12</changelog>
  <changelog author="lnussel@suse.de" date="1540900801">- Suggest hmac package (boo#1090768)
- remove old upgrade hack for upgrades from 12.1
- New version 2.0.5
  Changes since version 2.0.4
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Wipe full header areas (including unused) during LUKS format.
    Since this version, the whole area up to the data offset is zeroed,
    and subsequently, all keyslots areas are wiped with random data.
    This ensures that no remaining old data remains in the LUKS header
    areas, but it could slow down format operation on some devices.
    Previously only first 4k (or 32k for LUKS2) and the used keyslot
    was overwritten in the format operation.
  * Several fixes to error messages that were unintentionally replaced
    in previous versions with a silent exit code.
    More descriptive error messages were added, including error
    messages if
  - a device is unusable (not a block device, no access, etc.),
  - a LUKS device is not detected,
  - LUKS header load code detects unsupported version,
  - a keyslot decryption fails (also happens in the cipher check),
  - converting an inactive keyslot.
  * Device activation fails if data area overlaps with LUKS header.
  * Code now uses explicit_bzero to wipe memory if available
    (instead of own implementation).
  * Additional VeraCrypt modes are now supported, including Camellia
    and Kuznyechik symmetric ciphers (and cipher chains) and Streebog
    hash function. These were introduced in a recent VeraCrypt upstream.
    Note that Kuznyechik requires out-of-tree kernel module and
    Streebog hash function is available only with the gcrypt cryptographic
    backend for now.
  * Fixes static build for integritysetup if the pwquality library is used.
  * Allows passphrase change for unbound keyslots.
  * Fixes removed keyslot number in verbose message for luksKillSlot,
    luksRemoveKey and erase command.
  * Adds blkid scan when attempting to open a plain device and warn the user
    about existing device signatures in a ciphertext device.
  * Remove LUKS header signature if luksFormat fails to add the first keyslot.
  * Remove O_SYNC from device open and use fsync() to speed up
    wipe operation considerably.
  * Create --master-key-file in luksDump and fail if the file already exists.
  * Fixes a bug when LUKS2 authenticated encryption with a detached header
    wiped the header device instead of dm-integrity data device area (causing
    unnecessary LUKS2 header auto recovery).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1575028800">- New version 2.0.6 (jsc#SLE-5911, bsc#1165580):
  Changes since version 2.0.5
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix support of larger metadata areas in LUKS2 header.
    This release properly supports all specified metadata areas, as documented
    in LUKS2 format description (see docs/on-disk-format-luks2.pdf in archive).
    Currently, only default metadata area size is used (in format or convert).
    Later cryptsetup versions will allow increasing this metadata area size.
  * If AEAD (authenticated encryption) is used, cryptsetup now tries to check
    if the requested AEAD algorithm with specified key size is available
    in kernel crypto API.
    This change avoids formatting a device that cannot be later activated.
    For this function, the kernel must be compiled with the
    CONFIG_CRYPTO_USER_API_AEAD option enabled.
    Note that kernel user crypto API options (CONFIG_CRYPTO_USER_API and
    CONFIG_CRYPTO_USER_API_SKCIPHER) are already mandatory for LUKS2.
  * Fix setting of integrity no-journal flag.
    Now you can store this flag to metadata using --persistent option.
  * Fix cryptsetup-reencrypt to not keep temporary reencryption headers
    if interrupted during initial password prompt.
  * Adds early check to plain and LUKS2 formats to disallow device format
    if device size is not aligned to requested sector size.
    Previously it was possible, and the device was rejected to activate by
    kernel later.
  * Fix checking of hash algorithms availability for PBKDF early.
    Previously LUKS2 format allowed non-existent hash algorithm with
    invalid keyslot preventing the device from activation.
  * Allow Adiantum cipher construction (a non-authenticated length-preserving
    fast encryption scheme), so it can be used both for data encryption and
    keyslot encryption in LUKS1/2 devices.
    For benchmark, use:
    [#] cryptsetup benchmark -c xchacha12,aes-adiantum
    [#] cryptsetup benchmark -c xchacha20,aes-adiantum
    For LUKS format:
    [#] cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 &lt;device&gt;
    The support for Adiantum will be merged in Linux kernel 4.21.
    For more info see the paper https://eprint.iacr.org/2018/720.</changelog>
</package>
<package pkgid="cb53fe832cbec3c2e9e82edefc30146db173d5c88278262e2e5c54f4101f5e31" name="csync2" arch="src">
  <version epoch="0" ver="2.0+git.1461714863.10636a4" rel="lp151.3.3.1"/>
  <changelog author="jshi@novell.com" date="1259928000">- Init import of csync2 for DRBD configuration file sync (fate#307419)</changelog>
  <changelog author="ro@suse.de" date="1260792000">- fix build against current openssl</changelog>
  <changelog author="tserong@novell.com" date="1275998400">- Fix build against gnutls 2.8 in factory (integrated patch from
  http://bugs.gentoo.org/show_bug.cgi?id=274213)</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tserong@suse.com" date="1316520000">- Add csync2-rm-ssl-cert helper script (bnc#709811)</changelog>
  <changelog author="tserong@suse.com" date="1319630400">- Remove explicit lib dependencies from spec file</changelog>
  <changelog author="coolo@suse.com" date="1329739200">- factory has librsync split into devel package</changelog>
  <changelog author="tserong@suse.com" date="1332158400">- Force debug output off completely when running under xinetd (fixes
  protocol breakage when target directories don't exist; bnc#752563)</changelog>
  <changelog author="tserong@suse.com" date="1338811200">- Drop requirement on libgnutls-extra-devel (unnecessary on openSUSE)</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="tserong@suse.com" date="1368187200">- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch</changelog>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1574251200">- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.</changelog>
</package>
<package pkgid="7e0fb5daf41acab14e3d24d8dff895f7d66a2049266fe38561b9c9fdee83e76a" name="csync2" arch="x86_64">
  <version epoch="0" ver="2.0+git.1461714863.10636a4" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="tserong@suse.com" date="1368187200">- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch</changelog>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1574251200">- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.</changelog>
</package>
<package pkgid="87a99b33f8af71fb2e650ed6c5a98f7a507ea2c4d26c5644199c5d87b6c37aac" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="ebd38576b35fc86277e9305e34ba220e85d882f7319679e10b1f4ba0981d6cf6" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0751645dfbf29141751f812b4a16afe9656b970e17fedc07d02156cd4abf7d07" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="88e96230aa7d1c142661b0ef32df1203cc6f3704474c010b7045e76d928c4d40" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="5fd10191ac8b02c6b453b057941310112d667e384e37fd8760abeeadd42e6be9" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="0284870f9299adb9491bbf25e689c486ce3ccd4a1592bd4bb0c871047f03d2a1" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="799021d56fc48ca57e6a8e4f9d99f4f3b3d52ef9785c5c24764ef97559a31e73" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.224.86a8e66adea" rel="lp151.2.12.1"/>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
</package>
<package pkgid="05685fa94dfde11488bd9882a20da379226ca4b322df004ee5ebf2999776618d" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.224.86a8e66adea" rel="lp151.2.12.1"/>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
</package>
<package pkgid="98bed089b14c88f9d8e17c1ee0515ed4974a46c5e14080a235b9f785f6a87efd" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.243.e76c5cb3d97" rel="lp151.2.15.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540800">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
</package>
<package pkgid="6a9b2545d9db6cbc5309a3f1630cf4e3a86aadd3ea921843db65b45c3f99671e" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.243.e76c5cb3d97" rel="lp151.2.15.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540800">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
</package>
<package pkgid="a3419d2033cfbf1609d6ccc37be7e81628b0a6e3288a5c2bb9ee206eee86cb42" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.266.556a166d9cc" rel="lp151.2.18.1"/>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
</package>
<package pkgid="528f1bebc1f54fbec30c0aed76cc3137a17464a164b73e7e5b1996c21118a1e8" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.266.556a166d9cc" rel="lp151.2.18.1"/>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
</package>
<package pkgid="40ca72fbfad7aeb38d8dfc9c62feb728234dfedfc4d1028ad3f99bc6b9b0b777" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.296.3dd62eee45e" rel="lp151.2.21.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
</package>
<package pkgid="ac4ad368663529fbcb8a06aaf7312af4b2f79028bfca44c484427f4933031503" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.296.3dd62eee45e" rel="lp151.2.21.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
</package>
<package pkgid="d40414dc1de48e76b6f7bc677f09aff83526503c5787a7dbda811e772d9ccb4b" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.317.6d82fb3918b" rel="lp151.2.24.1"/>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
</package>
<package pkgid="6b9ee0da6da3754927bc301a066dda5798e073d84b73c8c74104a1071db095ea" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.317.6d82fb3918b" rel="lp151.2.24.1"/>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
</package>
<package pkgid="4abdfe4777ef68151441bcd62bd87009f08bcba7f24847335fa767a953ecf6c9" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.343.4bc358522a9" rel="lp151.2.27.1"/>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
</package>
<package pkgid="59fc755205e9c40827c06cd3d06b83fe07fc8a9488837a44ed1b4c4be3c7dbb4" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.343.4bc358522a9" rel="lp151.2.27.1"/>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
</package>
<package pkgid="fc0511a40841c3b34d860624608c79e7558466643de90347250fef987da41c88" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.350.020abd898fa" rel="lp151.2.30.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="f999ef10a79716e0e6a7be7e5822789a6f6036fa7f987109f3b75b5a2c49ef64" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.350.020abd898fa" rel="lp151.2.30.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="1e0f923a6dd5dd20697834c613982d4e109a4fddcd24f9d2a26ea987f89a51a5" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.373.26895a83dbf" rel="lp151.2.33.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
</package>
<package pkgid="5b738d8ebd1bdccebcea7ee5d0b1bf92ee00e17c788aadf951f0abbfed802527" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.373.26895a83dbf" rel="lp151.2.33.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
</package>
<package pkgid="4b9f0d3e960b255dd1ac01dd73726bb327197e0b37a72f08f9267237e3520456" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.383.7b7f8f14df8" rel="lp151.2.36.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="7643482b1b121086ff812c4036e3784925e7d368e7c49abc111cb693f4191d69" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.383.7b7f8f14df8" rel="lp151.2.36.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="177d365f2a67ef5d4610806335906e9e161ea05c1e3b83e09c48dad39e339106" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0dd2bc87c7fcf7532dc1d5c3d80e60dfee6b34eb04e608a1be02208713d29b33" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="3456a44c6bae9667b7f0f7b4e3e2b66aa658f98019af1312fefb4d8121c89bbc" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="aadfa561e7a8d51f7bded29b153c4f445c038e7d1b56df659cd8428fee048e85" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="259daeba019eb4e1a23b41e08983cd7c69bb91d0093be61445ce923668f41c37" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="b55b8bb9ec0ad423e528096766b825da41b34b8461ab58eb3caccc0016298d39" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="bf483524371de84dd4e4bf1abca03c82f67f66274ff2eb713c20cff6d0b53ca6" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.224.86a8e66adea" rel="lp151.2.12.1"/>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
</package>
<package pkgid="148b373154bb2f17959a488e73a8d4e8fa4a7040e1e04be348080249e6d0026e" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.224.86a8e66adea" rel="lp151.2.12.1"/>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
</package>
<package pkgid="7b4d09c6c617881afb1587b219ef83000915e84feb747f665388d92f4f019797" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.243.e76c5cb3d97" rel="lp151.2.15.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540800">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
</package>
<package pkgid="c39616ac3a8b04d798d9aa4e65933b0608ccac7a2c175da2e84c45a67e8be98f" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.243.e76c5cb3d97" rel="lp151.2.15.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540800">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
</package>
<package pkgid="8a68c36e33c5ab2f1da698cfdc1a08e8381000c40a0ffbb48afdbdd44d1c6d0b" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.266.556a166d9cc" rel="lp151.2.18.1"/>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
</package>
<package pkgid="30a4a9acd2a4325f12444a53b9a3779546ecc345af8e0b27809148894d819f3c" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.266.556a166d9cc" rel="lp151.2.18.1"/>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
</package>
<package pkgid="848965d0cded7e5ec88bdc6095fb93435921f5c8f0ef0104752f14950a4a7ec9" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.296.3dd62eee45e" rel="lp151.2.21.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
</package>
<package pkgid="49143bd5d891a9c658814fe157e9ca85abe1a5dd3d253f82508f7c38309db6a2" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.296.3dd62eee45e" rel="lp151.2.21.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
</package>
<package pkgid="78be91309cba756885515d8b36a2147270cc01cca8b2e75c5833482efdc40d46" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.317.6d82fb3918b" rel="lp151.2.24.1"/>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
</package>
<package pkgid="b8711faabe492dc3ebe649a79c25823e3f3ed1f70a76e8992d9a2d62eac740fa" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.317.6d82fb3918b" rel="lp151.2.24.1"/>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
</package>
<package pkgid="7dc01de5557ee9799b2d3963079dfba4b73d733627b80a19d58b9bafe63fd778" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.343.4bc358522a9" rel="lp151.2.27.1"/>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
</package>
<package pkgid="2ad53451217a3341bd64bc83e74b9b20629a8f5f5a26a2f86027c3dda984ecc4" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.343.4bc358522a9" rel="lp151.2.27.1"/>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
</package>
<package pkgid="42f0dc4dd1898fcb55ad26805c6af3911599cf81cf48a4736ebd5edfe71de157" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.350.020abd898fa" rel="lp151.2.30.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="343d5c0318eaf8e6b3259f4c40a036c8aa29ce5fb5a0b5f6e43f661a68da32a3" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.350.020abd898fa" rel="lp151.2.30.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="418931bac5f71534b7aa26541b46c791a3b7100402e907eeb0edc99df10ce20e" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.373.26895a83dbf" rel="lp151.2.33.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
</package>
<package pkgid="47fc7014edb3949e9aca393e564c35bab3f801692885bcd3c48f0488e13e9c3c" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.373.26895a83dbf" rel="lp151.2.33.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
</package>
<package pkgid="6db63462728a503db571bfd7e9eb927f39f00e75f7874e4592f188fd942f2f8b" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.383.7b7f8f14df8" rel="lp151.2.36.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ce75bdcf783296a2e5c0ba8d4ea030223324db6e7306c15be802a4922396016a" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.383.7b7f8f14df8" rel="lp151.2.36.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b8a34574acaef3e6020dfd25b1aae59ae2c40372536ecda98b04b6c124ef9fe1" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="6a961fac3e2ed0fab59f69bccf186af6da85d8b10bc14b646803ea093a988ff9" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="4b7b06edc7adf70c9e5c8bd63d84af03ed187fd45540d1d4bbc469cf4dfde2aa" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="4864120c164d46122c30e279686a9e0105b3eed00ed460f807739248585effd6" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="7cacee8b42f524f045637d67eeaa8d9e6109e3b3c476f3910b6ccc5bd0c51a83" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="24e0e8d7f6e8e05f3cb1e17ab4d7987635cad7312a719b2112d79b3df9432797" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="77c6e220ee9c01f29ea5be73a5e5a1d4e318fb0bd824561e82d25fcce47d61b9" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.224.86a8e66adea" rel="lp151.2.12.1"/>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
</package>
<package pkgid="658478a80f34d17efe3f66a0fdc6333c625e03f086ffadf7707f831c43760333" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.224.86a8e66adea" rel="lp151.2.12.1"/>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
</package>
<package pkgid="c17fe0cfb5c3cb717f79045250087735a4743e627227faf6babc0b2caffe21e1" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.243.e76c5cb3d97" rel="lp151.2.15.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540800">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
</package>
<package pkgid="ad05de8b8e94d9cd033385812d4b305790cd78e5d1ba3cc5c01b386d8bab5716" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.243.e76c5cb3d97" rel="lp151.2.15.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540800">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
</package>
<package pkgid="a49363f499b5ec11cf68e9569ae58e843bfd4d7f744b9b18e2430a116df86993" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.266.556a166d9cc" rel="lp151.2.18.1"/>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
</package>
<package pkgid="c9f7cac3b5f35c0c6065d03d73016c63aeb32572d1229af632dc2f53279ba4c9" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.266.556a166d9cc" rel="lp151.2.18.1"/>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
</package>
<package pkgid="561a719797ac8886eeaaa52d2ad8b25e2eebe32f4a5e90311c7d8fb7c6e7bd65" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.296.3dd62eee45e" rel="lp151.2.21.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
</package>
<package pkgid="137c7b2bc18d9478dfe1f56d8521b993d35278b86124271ac812f6c38df54390" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.296.3dd62eee45e" rel="lp151.2.21.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
</package>
<package pkgid="685c952d83bc87278719525a8ad07bd0437009a7ad8faa1a5569a800c4d226b9" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.317.6d82fb3918b" rel="lp151.2.24.1"/>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
</package>
<package pkgid="9abc22e47f2d04bffefcf3c085087f5870b660954152f8760066e3db12562ca7" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.317.6d82fb3918b" rel="lp151.2.24.1"/>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
</package>
<package pkgid="fde7d5e817bdb7d28759c9fcbbdc88ed5e928525945788692abe7ca8b9d74968" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.343.4bc358522a9" rel="lp151.2.27.1"/>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
</package>
<package pkgid="6926045782d18835248615f329c51ec9e05713ad1a654e3d6ef06c8e53568493" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.343.4bc358522a9" rel="lp151.2.27.1"/>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
</package>
<package pkgid="6153b3dc8d9fadc09571af22b47836440e8925c0164b26166504012e35cee56d" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.350.020abd898fa" rel="lp151.2.30.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="1ca9d0ca8f77d1c0287b60c4e7d8f10e3b3890aae25505bce7dccf7f41b8a348" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.350.020abd898fa" rel="lp151.2.30.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="7bb3f1a1ce085307ce713e10715cc16b1f36480fca54b5ab1fedc9668dc539b3" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.373.26895a83dbf" rel="lp151.2.33.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
</package>
<package pkgid="1f71c4e3f5f39962835c3295856c4e095793705b3b865f5f5d20b5d26169b595" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.373.26895a83dbf" rel="lp151.2.33.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
</package>
<package pkgid="cd4509a2844143f693d6ebfdbb0398322dc2628aa8d0bb7ae0fa2f583073895d" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.383.7b7f8f14df8" rel="lp151.2.36.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="71efd641022da6061ee208152708941f5f5c7dbd8b00392d0ff54ffd0bcc7d51" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.383.7b7f8f14df8" rel="lp151.2.36.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1575547200">- Print command %J substitution issue; (bso#13745); (bsc#1158551);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-19344: Fix  server crash with dns zone scavenging = yes;
  (bso#14050); (bsc#1160852).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580126400">- Prefer principal over DOMAIN/username for NTLM; (bso#13861);
  (bsc#1143499);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582891200">- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted
  domains/forests; (bso#14124); (bsc#1160490);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1584619200">- Fix domain join when the machine account does not exists;
  (bso#14007); (bsc#1161389);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1584705600">- Fix CLI tools still printing "Unable to initialize messaging
  context" messages; (bso#13925); (bsc#1167070).
- Do print mkdir failure message on error debug level when
  initializing messaging; (bso#13823); (bsc#1167070).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="9de1709204dcc9e6314411bba55557b250f3e4d34fc2e9d45118f712b4c0aa37" name="cups" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="3b4cecb57972236f0b49d2649fc06e4203d64d17638831467f50f07b0fa45e66" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="d583fa0d2d4ceb9a588413d09b3457b2cc0f8d5df2e56923463f66eefd4d91a2" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="9fb4ad3d7598e733d14c21b675de4013bc64713c33771b7c432e83b5909f63b7" name="cups" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
</package>
<package pkgid="bfa5263a3b83b1c2acc321a91d575e0f6af1225deb404842791c3d5cdf2ab642" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
</package>
<package pkgid="bdb5c147f3d5b72d69cfd194e89f364d988babad59ba38aa0cb259f5909cbfa6" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
</package>
<package pkgid="778e0ce2f6ace5028b7812e9618f4ad9fb313b515c749b74ffbf9099799d76f8" name="cups-client" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="0cc58336e71a4d22abe3e46a0b83f201fe33b1b758e5447ff9180b33b5474f79" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="5faf73ac6a937cb857d7196c74058a81a8598e7d2ade6fd63b41020ddbcc0e93" name="cups-client" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
</package>
<package pkgid="619e9268b39e45d1aa5a2ff0408a051dc13cb3cfa37452a226deaf59e8bfc937" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
</package>
<package pkgid="a8d9b146177413ea2f251ec6fe3063205848b355e3db47e38bd16c4313ff7fb5" name="cups-config" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="57527d011a212ebfa84e32b59709109cb26d716bcba200b9007775ac382441a1" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="8987c1e31cedfaefd24c61241409673faa2915552c52ec747a8d301683333a95" name="cups-config" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
</package>
<package pkgid="ad484949e2063a7c0e3babe5f28c7193ee9a87b2d9509b4f0c381ee7b3af4ab9" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
</package>
<package pkgid="acbfb5ac6f1b15dd015d6d93ec9680e0fbcf0023616eca9478cd1c5adaf08ee3" name="cups-ddk" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="efb263d2f48ead4a6e3ea94f3dabb46b92424eb4d84604ec016bac4ae12b26a7" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="1b20390bd5157b0df39a5f549a196cafa9d317965e94404e93becfc81179016e" name="cups-ddk" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
</package>
<package pkgid="63475e2275994f28ca66ba4dc1eee716bb10c233c22df07619401b828483db36" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
</package>
<package pkgid="5f113de91038391ee8636cd32b9d27a556bcf748674150cf6cfc6e7116abd726" name="cups-devel" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="3baa308c38040b807a81d615e937b4b1124115228527e48ed26012b7357e2592" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="c79958d015f68348db63e79981ad675d8240a16d969f281bed5f9b16efe4b983" name="cups-devel" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
</package>
<package pkgid="69ff58ecf653cf31769d71f39c2ec509083c8b3627a2c5c3c5269533bff9a71a" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
</package>
<package pkgid="0633c3cf46a13bffc7ae087a2a00596cb83948186c7fee88f331536f7ae32179" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="617ac8091969f05a1bbb4f93684f765125e25b0659aea2226da56c1a187806a9" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
</package>
<package pkgid="f98ddf7a84349957db7ad1f6e8670bba7771e48cdffb56c7a62899c16f87106a" name="cups-filters" arch="src">
  <version epoch="0" ver="1.20.3" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    CVE-2015-3258 (bsc#936281), thanks to Stefan Cornelius
    from Red Hat for the patch.
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking:
    lower-bounds for CVE-2015-3258 (bsc#936281) and
    upper-bounds for CVE-2015-3279 (bsc#937018)
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking CVE-2015-3279 (bsc#937018).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint CVE-2015-8560 (bsc#957531).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    CVE-2015-8327 (bsc#957531).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
  <changelog author="tchvatal@suse.com" date="1484913600">- Version upgrade to 1.13.3:
  * As the changelog is long for detailed info check the NEWS file
  * Disable mutool switch to not build with mupdf package in order
    to not expand the dependencies too much
  * /usr/lib/cups/filter/textonly was renamed to texttotext
  * pstopdf filter dropped by upstream (cf. boo#1036220)
  * Add new driverless binary/driver to work with
    new style IPP printers that do not require any driver</changelog>
  <changelog author="jsmeix@suse.de" date="1489406400">- fallback_read_ppd_file_from_environment.patch
  lets foomatic-rip call read_ppd_file() with
  PPD filename from environment as fallback, see
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1388</changelog>
  <changelog author="jsmeix@suse.de" date="1496145600">- Since version 1.14.0 there are no longer sub-packages
  (except cups-filters-devel) because nowadays cups-filters
  can no longer be built with CUPS &lt; 1.6 with reasonable effort,
  see the entry below dated "Wed Oct  7 11:16:13 CEST 2015".
  On systems with CUPS &gt;= 1.6 (i.e. since SLE12 GA / Leap 42.1)
  there is no good reason to keep cups-filters split into
  sub-packages and furthermore that split causes continuous
  (nowadays useless) efforts and bugs (like boo#1034877).
- Version upgrade to 1.14.0:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Added new setting "LocalOnly" for the
    CreateIPPPrinterQueues in cups-browsed.conf.
- Version upgrade to 1.13.5:
  Some excerpts (for details see the NEWS file):
  * foomatic-rip: When called via cupsfilter, foomatic-rip was
    not able to read the PPD file with (Bug #1388).
  * cups-browsed: When creating a local queue for a remote CUPS
    printer, add the line '*APRemoteQueueID: ""' to the PPD file
    so that CUPS sets the CUPS_PRINTER_REMOTE bit for the
    printer type of the local queue (Bug #1386).
- fallback_read_ppd_file_from_environment.patch is no longer
  needed because it is now provided in the upstream sources
  (see the "Bug #1388" entry above).
- Version upgrade to 1.13.4:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Corrected determination whether an IPP status
    is an error, to avoid "Unable to create/modify CUPS queue
    (Success)" and infinite repetition of a succeeded operation
    (Debian bug #852436).</changelog>
  <changelog author="jsmeix@suse.de" date="1496318400">- The RPM scriptlet hack that created a special cupsfilters.convs
  so that the gstoraster filter can be used with CUPS &lt;= 1.5.4
  does no longer make sense and is therefore removed.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- The filter for Apple Raster input is rastertopdf
  for CUPS 2.2.2+ and urftopdf for older CUPS.
  Because Factory/Tumbleweed uses the newest CUPS for build
  (which is currently CUPS 2.2.3 as of this writing) the filter
  for Apple Raster input is rastertopdf for Factory/Tumbleweed
  so that /usr/lib/cups/filter/urftopdf must be excluded
  from the RPM files list for Factory/Tumbleweed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Version upgrade to 1.17.6:
  * As the changelog is long for detailed info check the NEWS file.
  * Package new filters.
  * Compatible with poppler 0.58 and newer (Bug #1408).</changelog>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1570190400">- Add patch cups-filters-297cc2de-gs-9.27.patch
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (boo#1152720)</changelog>
</package>
<package pkgid="387eebc9b4af49a71468a2281a4ed2f9f906f40e0876b2e84073edd62247f496" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.20.3" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    CVE-2015-3258 (bsc#936281), thanks to Stefan Cornelius
    from Red Hat for the patch.
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking:
    lower-bounds for CVE-2015-3258 (bsc#936281) and
    upper-bounds for CVE-2015-3279 (bsc#937018)
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking CVE-2015-3279 (bsc#937018).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint CVE-2015-8560 (bsc#957531).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    CVE-2015-8327 (bsc#957531).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
  <changelog author="tchvatal@suse.com" date="1484913600">- Version upgrade to 1.13.3:
  * As the changelog is long for detailed info check the NEWS file
  * Disable mutool switch to not build with mupdf package in order
    to not expand the dependencies too much
  * /usr/lib/cups/filter/textonly was renamed to texttotext
  * pstopdf filter dropped by upstream (cf. boo#1036220)
  * Add new driverless binary/driver to work with
    new style IPP printers that do not require any driver</changelog>
  <changelog author="jsmeix@suse.de" date="1489406400">- fallback_read_ppd_file_from_environment.patch
  lets foomatic-rip call read_ppd_file() with
  PPD filename from environment as fallback, see
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1388</changelog>
  <changelog author="jsmeix@suse.de" date="1496145600">- Since version 1.14.0 there are no longer sub-packages
  (except cups-filters-devel) because nowadays cups-filters
  can no longer be built with CUPS &lt; 1.6 with reasonable effort,
  see the entry below dated "Wed Oct  7 11:16:13 CEST 2015".
  On systems with CUPS &gt;= 1.6 (i.e. since SLE12 GA / Leap 42.1)
  there is no good reason to keep cups-filters split into
  sub-packages and furthermore that split causes continuous
  (nowadays useless) efforts and bugs (like boo#1034877).
- Version upgrade to 1.14.0:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Added new setting "LocalOnly" for the
    CreateIPPPrinterQueues in cups-browsed.conf.
- Version upgrade to 1.13.5:
  Some excerpts (for details see the NEWS file):
  * foomatic-rip: When called via cupsfilter, foomatic-rip was
    not able to read the PPD file with (Bug #1388).
  * cups-browsed: When creating a local queue for a remote CUPS
    printer, add the line '*APRemoteQueueID: ""' to the PPD file
    so that CUPS sets the CUPS_PRINTER_REMOTE bit for the
    printer type of the local queue (Bug #1386).
- fallback_read_ppd_file_from_environment.patch is no longer
  needed because it is now provided in the upstream sources
  (see the "Bug #1388" entry above).
- Version upgrade to 1.13.4:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Corrected determination whether an IPP status
    is an error, to avoid "Unable to create/modify CUPS queue
    (Success)" and infinite repetition of a succeeded operation
    (Debian bug #852436).</changelog>
  <changelog author="jsmeix@suse.de" date="1496318400">- The RPM scriptlet hack that created a special cupsfilters.convs
  so that the gstoraster filter can be used with CUPS &lt;= 1.5.4
  does no longer make sense and is therefore removed.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- The filter for Apple Raster input is rastertopdf
  for CUPS 2.2.2+ and urftopdf for older CUPS.
  Because Factory/Tumbleweed uses the newest CUPS for build
  (which is currently CUPS 2.2.3 as of this writing) the filter
  for Apple Raster input is rastertopdf for Factory/Tumbleweed
  so that /usr/lib/cups/filter/urftopdf must be excluded
  from the RPM files list for Factory/Tumbleweed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Version upgrade to 1.17.6:
  * As the changelog is long for detailed info check the NEWS file.
  * Package new filters.
  * Compatible with poppler 0.58 and newer (Bug #1408).</changelog>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1570190400">- Add patch cups-filters-297cc2de-gs-9.27.patch
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (boo#1152720)</changelog>
</package>
<package pkgid="6ba0c9033f8c2719c2fbf65fdfac64fbd2827d7de9d23acb1e2671ad5c7081c6" name="cups-filters" arch="src">
  <version epoch="0" ver="1.20.3" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking:
    lower-bounds for CVE-2015-3258 (bsc#936281) and
    upper-bounds for CVE-2015-3279 (bsc#937018)
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking CVE-2015-3279 (bsc#937018).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint CVE-2015-8560 (bsc#957531).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    CVE-2015-8327 (bsc#957531).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
  <changelog author="tchvatal@suse.com" date="1484913600">- Version upgrade to 1.13.3:
  * As the changelog is long for detailed info check the NEWS file
  * Disable mutool switch to not build with mupdf package in order
    to not expand the dependencies too much
  * /usr/lib/cups/filter/textonly was renamed to texttotext
  * pstopdf filter dropped by upstream (cf. boo#1036220)
  * Add new driverless binary/driver to work with
    new style IPP printers that do not require any driver</changelog>
  <changelog author="jsmeix@suse.de" date="1489406400">- fallback_read_ppd_file_from_environment.patch
  lets foomatic-rip call read_ppd_file() with
  PPD filename from environment as fallback, see
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1388</changelog>
  <changelog author="jsmeix@suse.de" date="1496145600">- Since version 1.14.0 there are no longer sub-packages
  (except cups-filters-devel) because nowadays cups-filters
  can no longer be built with CUPS &lt; 1.6 with reasonable effort,
  see the entry below dated "Wed Oct  7 11:16:13 CEST 2015".
  On systems with CUPS &gt;= 1.6 (i.e. since SLE12 GA / Leap 42.1)
  there is no good reason to keep cups-filters split into
  sub-packages and furthermore that split causes continuous
  (nowadays useless) efforts and bugs (like boo#1034877).
- Version upgrade to 1.14.0:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Added new setting "LocalOnly" for the
    CreateIPPPrinterQueues in cups-browsed.conf.
- Version upgrade to 1.13.5:
  Some excerpts (for details see the NEWS file):
  * foomatic-rip: When called via cupsfilter, foomatic-rip was
    not able to read the PPD file with (Bug #1388).
  * cups-browsed: When creating a local queue for a remote CUPS
    printer, add the line '*APRemoteQueueID: ""' to the PPD file
    so that CUPS sets the CUPS_PRINTER_REMOTE bit for the
    printer type of the local queue (Bug #1386).
- fallback_read_ppd_file_from_environment.patch is no longer
  needed because it is now provided in the upstream sources
  (see the "Bug #1388" entry above).
- Version upgrade to 1.13.4:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Corrected determination whether an IPP status
    is an error, to avoid "Unable to create/modify CUPS queue
    (Success)" and infinite repetition of a succeeded operation
    (Debian bug #852436).</changelog>
  <changelog author="jsmeix@suse.de" date="1496318400">- The RPM scriptlet hack that created a special cupsfilters.convs
  so that the gstoraster filter can be used with CUPS &lt;= 1.5.4
  does no longer make sense and is therefore removed.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- The filter for Apple Raster input is rastertopdf
  for CUPS 2.2.2+ and urftopdf for older CUPS.
  Because Factory/Tumbleweed uses the newest CUPS for build
  (which is currently CUPS 2.2.3 as of this writing) the filter
  for Apple Raster input is rastertopdf for Factory/Tumbleweed
  so that /usr/lib/cups/filter/urftopdf must be excluded
  from the RPM files list for Factory/Tumbleweed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Version upgrade to 1.17.6:
  * As the changelog is long for detailed info check the NEWS file.
  * Package new filters.
  * Compatible with poppler 0.58 and newer (Bug #1408).</changelog>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1570190400">- Add patch cups-filters-297cc2de-gs-9.27.patch
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (boo#1152720)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571140800">- Add patch cups-filters-f0e1fc43.patch which is a backport from
  V1.22.2 due bug boo#1128167 -- "No destination host name supplied by cups-browsed"
  occurs if "LocalQueueNamingRemoteCUPS RemoteName" is set in cups-browsed.conf</changelog>
</package>
<package pkgid="2765d20a8258c29ea4034381cc545ba50c54b789a2c0ffa55cdb23b8cee0bd41" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.20.3" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking:
    lower-bounds for CVE-2015-3258 (bsc#936281) and
    upper-bounds for CVE-2015-3279 (bsc#937018)
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking CVE-2015-3279 (bsc#937018).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint CVE-2015-8560 (bsc#957531).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    CVE-2015-8327 (bsc#957531).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
  <changelog author="tchvatal@suse.com" date="1484913600">- Version upgrade to 1.13.3:
  * As the changelog is long for detailed info check the NEWS file
  * Disable mutool switch to not build with mupdf package in order
    to not expand the dependencies too much
  * /usr/lib/cups/filter/textonly was renamed to texttotext
  * pstopdf filter dropped by upstream (cf. boo#1036220)
  * Add new driverless binary/driver to work with
    new style IPP printers that do not require any driver</changelog>
  <changelog author="jsmeix@suse.de" date="1489406400">- fallback_read_ppd_file_from_environment.patch
  lets foomatic-rip call read_ppd_file() with
  PPD filename from environment as fallback, see
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1388</changelog>
  <changelog author="jsmeix@suse.de" date="1496145600">- Since version 1.14.0 there are no longer sub-packages
  (except cups-filters-devel) because nowadays cups-filters
  can no longer be built with CUPS &lt; 1.6 with reasonable effort,
  see the entry below dated "Wed Oct  7 11:16:13 CEST 2015".
  On systems with CUPS &gt;= 1.6 (i.e. since SLE12 GA / Leap 42.1)
  there is no good reason to keep cups-filters split into
  sub-packages and furthermore that split causes continuous
  (nowadays useless) efforts and bugs (like boo#1034877).
- Version upgrade to 1.14.0:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Added new setting "LocalOnly" for the
    CreateIPPPrinterQueues in cups-browsed.conf.
- Version upgrade to 1.13.5:
  Some excerpts (for details see the NEWS file):
  * foomatic-rip: When called via cupsfilter, foomatic-rip was
    not able to read the PPD file with (Bug #1388).
  * cups-browsed: When creating a local queue for a remote CUPS
    printer, add the line '*APRemoteQueueID: ""' to the PPD file
    so that CUPS sets the CUPS_PRINTER_REMOTE bit for the
    printer type of the local queue (Bug #1386).
- fallback_read_ppd_file_from_environment.patch is no longer
  needed because it is now provided in the upstream sources
  (see the "Bug #1388" entry above).
- Version upgrade to 1.13.4:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Corrected determination whether an IPP status
    is an error, to avoid "Unable to create/modify CUPS queue
    (Success)" and infinite repetition of a succeeded operation
    (Debian bug #852436).</changelog>
  <changelog author="jsmeix@suse.de" date="1496318400">- The RPM scriptlet hack that created a special cupsfilters.convs
  so that the gstoraster filter can be used with CUPS &lt;= 1.5.4
  does no longer make sense and is therefore removed.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- The filter for Apple Raster input is rastertopdf
  for CUPS 2.2.2+ and urftopdf for older CUPS.
  Because Factory/Tumbleweed uses the newest CUPS for build
  (which is currently CUPS 2.2.3 as of this writing) the filter
  for Apple Raster input is rastertopdf for Factory/Tumbleweed
  so that /usr/lib/cups/filter/urftopdf must be excluded
  from the RPM files list for Factory/Tumbleweed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Version upgrade to 1.17.6:
  * As the changelog is long for detailed info check the NEWS file.
  * Package new filters.
  * Compatible with poppler 0.58 and newer (Bug #1408).</changelog>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1570190400">- Add patch cups-filters-297cc2de-gs-9.27.patch
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (boo#1152720)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571140800">- Add patch cups-filters-f0e1fc43.patch which is a backport from
  V1.22.2 due bug boo#1128167 -- "No destination host name supplied by cups-browsed"
  occurs if "LocalQueueNamingRemoteCUPS RemoteName" is set in cups-browsed.conf</changelog>
</package>
<package pkgid="962a01ddd306bf4af4fdc8031865049e14809b6be950ab8894afae87d7254fe2" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.20.3" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    CVE-2015-3258 (bsc#936281), thanks to Stefan Cornelius
    from Red Hat for the patch.
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking:
    lower-bounds for CVE-2015-3258 (bsc#936281) and
    upper-bounds for CVE-2015-3279 (bsc#937018)
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking CVE-2015-3279 (bsc#937018).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint CVE-2015-8560 (bsc#957531).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    CVE-2015-8327 (bsc#957531).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
  <changelog author="tchvatal@suse.com" date="1484913600">- Version upgrade to 1.13.3:
  * As the changelog is long for detailed info check the NEWS file
  * Disable mutool switch to not build with mupdf package in order
    to not expand the dependencies too much
  * /usr/lib/cups/filter/textonly was renamed to texttotext
  * pstopdf filter dropped by upstream (cf. boo#1036220)
  * Add new driverless binary/driver to work with
    new style IPP printers that do not require any driver</changelog>
  <changelog author="jsmeix@suse.de" date="1489406400">- fallback_read_ppd_file_from_environment.patch
  lets foomatic-rip call read_ppd_file() with
  PPD filename from environment as fallback, see
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1388</changelog>
  <changelog author="jsmeix@suse.de" date="1496145600">- Since version 1.14.0 there are no longer sub-packages
  (except cups-filters-devel) because nowadays cups-filters
  can no longer be built with CUPS &lt; 1.6 with reasonable effort,
  see the entry below dated "Wed Oct  7 11:16:13 CEST 2015".
  On systems with CUPS &gt;= 1.6 (i.e. since SLE12 GA / Leap 42.1)
  there is no good reason to keep cups-filters split into
  sub-packages and furthermore that split causes continuous
  (nowadays useless) efforts and bugs (like boo#1034877).
- Version upgrade to 1.14.0:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Added new setting "LocalOnly" for the
    CreateIPPPrinterQueues in cups-browsed.conf.
- Version upgrade to 1.13.5:
  Some excerpts (for details see the NEWS file):
  * foomatic-rip: When called via cupsfilter, foomatic-rip was
    not able to read the PPD file with (Bug #1388).
  * cups-browsed: When creating a local queue for a remote CUPS
    printer, add the line '*APRemoteQueueID: ""' to the PPD file
    so that CUPS sets the CUPS_PRINTER_REMOTE bit for the
    printer type of the local queue (Bug #1386).
- fallback_read_ppd_file_from_environment.patch is no longer
  needed because it is now provided in the upstream sources
  (see the "Bug #1388" entry above).
- Version upgrade to 1.13.4:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Corrected determination whether an IPP status
    is an error, to avoid "Unable to create/modify CUPS queue
    (Success)" and infinite repetition of a succeeded operation
    (Debian bug #852436).</changelog>
  <changelog author="jsmeix@suse.de" date="1496318400">- The RPM scriptlet hack that created a special cupsfilters.convs
  so that the gstoraster filter can be used with CUPS &lt;= 1.5.4
  does no longer make sense and is therefore removed.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- The filter for Apple Raster input is rastertopdf
  for CUPS 2.2.2+ and urftopdf for older CUPS.
  Because Factory/Tumbleweed uses the newest CUPS for build
  (which is currently CUPS 2.2.3 as of this writing) the filter
  for Apple Raster input is rastertopdf for Factory/Tumbleweed
  so that /usr/lib/cups/filter/urftopdf must be excluded
  from the RPM files list for Factory/Tumbleweed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Version upgrade to 1.17.6:
  * As the changelog is long for detailed info check the NEWS file.
  * Package new filters.
  * Compatible with poppler 0.58 and newer (Bug #1408).</changelog>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1570190400">- Add patch cups-filters-297cc2de-gs-9.27.patch
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (boo#1152720)</changelog>
</package>
<package pkgid="8f637c39e7f9cca877446d98262258d6c146ef5c75fbe82cdb83094ddd67e910" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.20.3" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking:
    lower-bounds for CVE-2015-3258 (bsc#936281) and
    upper-bounds for CVE-2015-3279 (bsc#937018)
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking CVE-2015-3279 (bsc#937018).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint CVE-2015-8560 (bsc#957531).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    CVE-2015-8327 (bsc#957531).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
  <changelog author="tchvatal@suse.com" date="1484913600">- Version upgrade to 1.13.3:
  * As the changelog is long for detailed info check the NEWS file
  * Disable mutool switch to not build with mupdf package in order
    to not expand the dependencies too much
  * /usr/lib/cups/filter/textonly was renamed to texttotext
  * pstopdf filter dropped by upstream (cf. boo#1036220)
  * Add new driverless binary/driver to work with
    new style IPP printers that do not require any driver</changelog>
  <changelog author="jsmeix@suse.de" date="1489406400">- fallback_read_ppd_file_from_environment.patch
  lets foomatic-rip call read_ppd_file() with
  PPD filename from environment as fallback, see
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1388</changelog>
  <changelog author="jsmeix@suse.de" date="1496145600">- Since version 1.14.0 there are no longer sub-packages
  (except cups-filters-devel) because nowadays cups-filters
  can no longer be built with CUPS &lt; 1.6 with reasonable effort,
  see the entry below dated "Wed Oct  7 11:16:13 CEST 2015".
  On systems with CUPS &gt;= 1.6 (i.e. since SLE12 GA / Leap 42.1)
  there is no good reason to keep cups-filters split into
  sub-packages and furthermore that split causes continuous
  (nowadays useless) efforts and bugs (like boo#1034877).
- Version upgrade to 1.14.0:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Added new setting "LocalOnly" for the
    CreateIPPPrinterQueues in cups-browsed.conf.
- Version upgrade to 1.13.5:
  Some excerpts (for details see the NEWS file):
  * foomatic-rip: When called via cupsfilter, foomatic-rip was
    not able to read the PPD file with (Bug #1388).
  * cups-browsed: When creating a local queue for a remote CUPS
    printer, add the line '*APRemoteQueueID: ""' to the PPD file
    so that CUPS sets the CUPS_PRINTER_REMOTE bit for the
    printer type of the local queue (Bug #1386).
- fallback_read_ppd_file_from_environment.patch is no longer
  needed because it is now provided in the upstream sources
  (see the "Bug #1388" entry above).
- Version upgrade to 1.13.4:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Corrected determination whether an IPP status
    is an error, to avoid "Unable to create/modify CUPS queue
    (Success)" and infinite repetition of a succeeded operation
    (Debian bug #852436).</changelog>
  <changelog author="jsmeix@suse.de" date="1496318400">- The RPM scriptlet hack that created a special cupsfilters.convs
  so that the gstoraster filter can be used with CUPS &lt;= 1.5.4
  does no longer make sense and is therefore removed.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- The filter for Apple Raster input is rastertopdf
  for CUPS 2.2.2+ and urftopdf for older CUPS.
  Because Factory/Tumbleweed uses the newest CUPS for build
  (which is currently CUPS 2.2.3 as of this writing) the filter
  for Apple Raster input is rastertopdf for Factory/Tumbleweed
  so that /usr/lib/cups/filter/urftopdf must be excluded
  from the RPM files list for Factory/Tumbleweed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Version upgrade to 1.17.6:
  * As the changelog is long for detailed info check the NEWS file.
  * Package new filters.
  * Compatible with poppler 0.58 and newer (Bug #1408).</changelog>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1570190400">- Add patch cups-filters-297cc2de-gs-9.27.patch
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (boo#1152720)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571140800">- Add patch cups-filters-f0e1fc43.patch which is a backport from
  V1.22.2 due bug boo#1128167 -- "No destination host name supplied by cups-browsed"
  occurs if "LocalQueueNamingRemoteCUPS RemoteName" is set in cups-browsed.conf</changelog>
</package>
<package pkgid="92961aeffdcf35485652b32387fe6b98ce92dbb12ebe18fcb4fbb7a49349d77d" name="cups-rpm-helper" arch="x86_64">
  <version epoch="0" ver="1.9.74" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1346673600">- Remove redundant %clean section
- Make package compile on RH6-like systems by using standard
  python macros</changelog>
  <changelog author="os-dev@jacraig.com" date="1379160000">- Update to 1.9.63:
  * cups.IPPError tuple now contains the specific error string, if one is
    available.
- Changes from 1.9.62:
  * Define all constants regardless of which version of CUPS is built against.
- Added %doc to build section with several doc files from the source.</changelog>
  <changelog author="os-dev@jacraig.com" date="1390651200">- Update to 1.9.66:
  * Python3 compatibility
- Changes from 1.9.65:
  * cupsconnection.c (PyObject_from_attr_value): Fix getting of booleans.
  * cupsconnection.c (UTF8_from_PyObj): Propagate UTF-8 decoding errors.
  * cupsconnection.c: Don't just append printer name to base URI to get
    printer URI. Need to actually encode the name.
  * cupsconnection.c: Fixed documentation typo for Connection.getPPDs2.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1424952000">- update to version 1.9.72:
  * Removed private CANCEL_DOCUMENT, GET_DOCUMENT_ATTRIBUTES,
    GET_DOCUMENTS, DELETE_DOCUMENT, SET_DOCUMENT_ATTRIBUTES IPP
    operation constants
  * Fixed build for CUPS 1.4 by making several constants
    conditional on CUPS &gt;= 1.5
- additional changes from version 1.9.71:
  * Fixes for cups.IPP_JOB_CANCELED, cups.IPP_ERROR_JOB_CANCELED,
    cups.IPP_STATUS_ERROR_CUPS_AUTHENTICATION_CANCELED,
    cups.IPP_AUTHENTICATION_CANCELED,
    cups.IPP_STATUS_ERROR_CUPS_UPGRADE_REQUIRED, and
    cups.IPP_UPGRADE_REQUIRED
- additional changes from version 1.9.70:
  * cups.ippErrorString(). Fixed build with CUPS 1.5. New-style
    (CUPS 1.6) naming for HTTP status (cups.HTTP_STATUS_*), IPP
    orientation (cups.IPP_ORIENT_*), IPP status (cups.IPP_STATUS_*),
    and IPP I/O (cups.IPP_STATE_*) constants
- additional changes from version 1.9.69:
  * cups.IPPRequest.operation, cups.IPPRequest.state,
    cups.IPPRequest.statuscode, cups.ippOpString(), cups.IPP_OP_*,
    cups.IPPRequest.addSeparator(), cups.IPPRequest.add(),
    cups.IPPRequest.writeIO()
- additional changes from version 1.9.68:
  * Now builds against CUPS 2.0
  * The rpm provider script is now Python3
- additional changes from version 1.9.67:
  * Bindings for streaming API: cups.CUPS_FORMAT_* constants,
    cups.createJob(), cups.startDocument(), cups.writeRequestData(),
    cups.finishDocument()
- remove Changelog from doc: deleted by upstream</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1425816000">- add patch revert-postscriptdriver.prov-py3.patch:
  revert back to python2 for postscriptdriver.prov script</changelog>
  <changelog author="aloisio@gmx.com" date="1496664000">- Update to 1.9.73
  * Fixed build for CUPS 1.6.3 by making several constants
    conditional on CUPS &gt;= 1.7.
- Converted to single-spec
- Renamed package to python-pycups to follow naming guidelines</changelog>
  <changelog author="toddrme2178@gmail.com" date="1497009600">- Provide old packages.
- Minor singlespec cleanups.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1497873600">- Provide python-cups/python3-cups</changelog>
  <changelog author="svasudevan@suse.com" date="1557835200">- Update to version 1.9.74
  * no changelog provided</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566993600">- Package /usr/lib/rpm/postscriptdriver.prov again, in the
  new "cups-rpm-helper" subpackage (bsc#735865). The file hasn't
  been packaged any more after the switch from python-cups to
  python-pycups (sr#502741).
  * removed revert-postscriptdriver.prov-py3.patch
    (we use python3 now)</changelog>
</package>
<package pkgid="85b0e498865b0306f5f2e0302019b137801ec0618b1b5a362834a1bd92cf8bd0" name="curl" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.12.1"/>
  <changelog author="asn@cryptomilk.org" date="1516795200">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="3ba7cf20db585c7cd433d965d96e9e7f05631eabdb2f7d024ab0d1c91a7c6e3f" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.12.1"/>
  <changelog author="asn@cryptomilk.org" date="1516795200">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="3017b6282baebdc31cff85446ab3171561f000bb41e564155f979e56ddcadc54" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.12.1"/>
  <changelog author="asn@cryptomilk.org" date="1516795200">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="aa1bac6c48af949ec6514a7c4f63966239078f0228273ab24d8aedbe5a444874" name="curl" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.15.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="7f3f378854c716c93228ae875db3201266837c17d77920ab458c22e8a0da2c44" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.15.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="9bbbf4c72b7be9c9ef1acf9d74cd99cf240af3c0fcc87d82bf42a308307d7502" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.15.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="baeebce6bee61da3b512e1589d82fc46bae8f287e2aee622614ddb36eefafb54" name="curl" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.18.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="0f2ea58bcc5df7059e7743b69220cff0eaca73807d6394f96b1ddb463d668008" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.18.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="eda1f8dbdd4689c31dcad0ca2443ab2444fc94a52c06a804c380d1204fc73dbc" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.18.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="39b4c467b61698857184d12a66d54c60bd5e9706d3dee66e635e9345299e4675" name="curl" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="634a7ecc11ef881cef8bac6c58b7ad14a407067eba009534f06747cd867ed2fd" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="498924273d017f88c0016a800f5738d3ee0d5e626900cefbae31caa222435d52" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="5d4fedb6e2b34434fa70a4343e001d1b6ae9144bfa8ff7d0d2a6e46b3ef6a2eb" name="curl" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="cd40ab3ec869d1ab5d8caf476fb3b5bf1c246ca5fadbc06100a1c387e98578f1" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="9b569c455cb5edb23ffa811ad09f8e655e468d5c387883c350e57ed772af2278" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="76e7840a077dca68ac868c2c7ce0d225f0aa512f75ddbf98c04b3ceeddb6e5ce" name="curl" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="4019ea99e80c2f9d7152a42a20480b85ea87fc2a272d1ad8d8163298429a09b2" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="a44348fc6afc14f94446262ed40d0b76d992ef579913f7ee69fc9575a4ecc7ca" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="d0e2df9b158b8c00ab54408d64c22ef6df145a8294c209b117d831f5b3bbe8e4" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.12.1"/>
  <changelog author="asn@cryptomilk.org" date="1516795200">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="485db0b05d6c6867892d8636498ad6b24703a808e45bc87009757c31c869aa78" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.12.1"/>
  <changelog author="asn@cryptomilk.org" date="1516795200">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="7f0a6cfb6db24298211846b2e3cd9bc434deb62ce49821eb85c55c689da56a4b" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.12.1"/>
  <changelog author="asn@cryptomilk.org" date="1516795200">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="c40a2bf8336a50666f1621aed8af1179b3791fbd6af13646b8a8c5d96e10e6de" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.15.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="fbc94a7dc4cb21a3308be756e35ccaf2136ee3e4d08ead44bbfcc30975336b88" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.15.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="e6f3c4242835b1e2842a8f9680e14abca33e1d186dda98f2afe5ff18a41f6586" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.15.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="c7e8b9df021a44dce11b9c16a766c3da45afc0d5c3e60926fb3cf479767f15d5" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.18.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="a52c3b7633b552ed9f455419dbfaf0a72e61a01641af6af1b496fe5caf64d237" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.18.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="f8722158098c676169f7e188b849374d4300531a368d8be15050685b503fdb3c" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.18.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="e522d9bdf4c4441bf2f760d51cf50e81993562bdd582c32e9a897e0d96c946e6" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="15e7a1ebecb2ce206c5163626aa743f023cec7225c78f0512f24724bc214f9e8" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="6eeada104fcb870309636a25c45126f7c0ee21f522632d3a064ff2cc4ac2a192" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="d0431cfc41743b7d98f198876b5971d83126cefae40213e6c18646d4b497d6e2" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="5ed9060b09ffc25a99abf8ed0eafe95de005a6f5e4c821132b6c5e2e30a5e931" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="d328768d8533279728c7d30f4029c08e065af4ddc806b778fb329f03211c6705" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="ecc4b1ecc7657128d90e1ffd12fed03ed3baa20857750b7724647060f4123142" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="86535ecfbc8ba8793e574aa93845dc6d888ba98a3442ceeb0df887b853aea8f2" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="7160d4a6b5fe9bcadb35589d8dada094c8e12960d5b5c1a284ee25d96a360110" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="a67ec28cca09cc557188d6826e0c635f3d1e554a09fe6fafbcebd0afe1bbe1a4" name="cyrus-sasl" arch="i586">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="c04874b2f6d5454d49376a33e22bceadf5b72cbbcb5fcc0d6c947b0c2b375e1b" name="cyrus-sasl" arch="src">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="4e6abcfcadf0d41f19b0b73ad3baf6e19fdb4ec69a3919b05a56ef65e803374a" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="94bb1ec23470b2788b80d8035d50a141eddf8ba810ad81a435d4820a3ae37194" name="cyrus-sasl-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="7e4840499ff67a785976729d202ebcb87abdfe3f5d614737e5a95025ba086c47" name="cyrus-sasl-crammd5" arch="i586">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="949a1a5d36a7b3c46024d7ad9eb52f14f358641d2ae15015ac3ce79e994ab3cf" name="cyrus-sasl-crammd5" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="8587450e013c246513940508ba22069ed2291933ed8852dceb6e1c74af923d1b" name="cyrus-sasl-crammd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="a12655c0803ba30074fbca50922570b08d991eb65473105908204eeed675974a" name="cyrus-sasl-devel" arch="i586">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="6fdae5ef7c13d378e1ec6590f5b1bb66ba4e5884f4c8d3cfeeae756eb206df48" name="cyrus-sasl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="3fd679943b5695ab2cc9acb1f34bf13bd7b41eb06308978d8527ad7e3e8c7116" name="cyrus-sasl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="4127e810e7c414a327a213650a0102bf1cc3fdd84580dfd9a741a67cbd9b3bb9" name="cyrus-sasl-digestmd5" arch="i586">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="262a5715c4a932a629afe78b836b6445e8031c9bc216fb6c2abfa31c10eb050d" name="cyrus-sasl-digestmd5" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="ea8ad505d455929c9ec1ed1d7415f37b5fdc02f976edbefbbc4b082fcde062f2" name="cyrus-sasl-digestmd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="64c97da958d321364271eeef55a7282396e83737d07f7e88bbd6e6db21dbb42f" name="cyrus-sasl-gs2" arch="i586">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="3565dca9c2227a38e4a8b4a693b79643299978bde84057d7d96c86adab8f52d8" name="cyrus-sasl-gs2" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="87fa050ff54b17bb084f52ca7400b6b226dd35da1028a08d604433b8d9c3997a" name="cyrus-sasl-gssapi" arch="i586">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="309eb0138a8d3dee2db9f2bfacc46ab23adc291afd0bc5c74b3a917a2c0f2335" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="232ab26e8ceebc54aef8fd738f859c4a5a83b7038a42399f8cc8d79aa12bcd8c" name="cyrus-sasl-gssapi-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="f0107d6550962b0db9af42ec7ee548daeda8ce4b5684c50ae33824c94d752eab" name="cyrus-sasl-ldap-auxprop" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="c240f987eb01c86f323e85e029f9b6464573a1e8c97a326a8e6819ef5cc01e2c" name="cyrus-sasl-ntlm" arch="i586">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="25700dd5da234bcf294a140a19927863756dbcd5f0fdbf2d6e515993ef11c1c6" name="cyrus-sasl-ntlm" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="9df654d645d8aebc483cde5d97101852d93283cd0318b666b57eafa6620e5147" name="cyrus-sasl-otp" arch="i586">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="c5c93c77520b1e0a927eeb68573504ce80f4c8867787130e1f429f0fbaccb013" name="cyrus-sasl-otp" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="9932d845266acb9a6c61f3a289e6958bf8897d554fb5718ea58449d3859bb5ba" name="cyrus-sasl-otp-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="73bf9594eb3446638dd046645e9f6fc98ee41c3b9f8fcff34a93425cf8e2d39c" name="cyrus-sasl-plain" arch="i586">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="a435c3a164d7f7efee71933fba6f7b2d5cd50cfb5fec40c9d0ef5f5334a91256" name="cyrus-sasl-plain" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="a3f1ffdc3f2dfa2271cd772498df785ad9f98f9579c6cdb61016a5e7968f38db" name="cyrus-sasl-plain-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="4d2e6dec6f021f485cf7d15811f376d62704de28998c3d8499d180814003f18b" name="cyrus-sasl-saslauthd" arch="src">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="dd2616921a015a916a65fdfab4c5b5dd756accf3a4dfe8bc306a7405f5f84d65" name="cyrus-sasl-saslauthd" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="579871d6a3a7cc1cd64536313e14b220298739de79ea41d083bd232814ede290" name="cyrus-sasl-scram" arch="i586">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="6c2a11c7a033152be01492d91c4dba26be2386e1696746186b733a1084d07b76" name="cyrus-sasl-scram" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="b3e9b2923cdd6be90c004d933650913c067679a7af048bcbc64ffb5d62230742" name="cyrus-sasl-sqlauxprop" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp151.6.3.1"/>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
</package>
<package pkgid="b1468143ba8daca187107bdff98905e7add143e012954045e8e88eff07fa25a5" name="darktable" arch="src">
  <version epoch="0" ver="2.6.3" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove idempotent %if..%endif guards around %package
- Replace make install and make use of %make_install in its stead.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563192000">- Fix compilation failure due to stricter OpenMP 4.0 handling in GCC 9,
  add Fix-OpenMP-4_0-issues-with-GCC9.patch
- Fix build with exiv2 &gt;= 0.27, add
  0001-Fix-build-with-exiv2-0.27.patch
- Remove obsolete (since 2.2.0) SDL BuildRequires
- Specify minimum versions for GTK3 (3.14), glib (2.40) and
  exiv2 (0.24) in BuildRequires, matching upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571659200">- update to 2.6.3
  - New Features
  - April 1st game is now disabled by default
  - Add preference to disable/enable April 1st game
  - Print module default margin set 17mm
  - Add support for disabling base-curve by default
  - Add support for disabling sharpen by default
  - Bugfixes
  - Source with OpenMP can be compiled with GCC-9 and clang
  - Update skin tone preset on color-zones module
  - Fix compiling with exiv 0.27.2.1
  - Fix file access permissions on macOS Catalina 10.15
  - Fix shift+scroll only scrolling in one direction on macOS
  - Fix picasa, piwigo and facebook SSL support
  - Fix CSS issue on MacOS
  - Base Support
  - Epson R-D1s
  - Epson R-D1x
  - Fujifilm FinePix F770EXR
  - Fujifilm X-T30 (compressed)
  - Fujifilm XF10
  - Kodak EasyShare Z981
  - Kodak EasyShare Z990
  - Leica C (Typ 112) (4:3)
  - Leica CL (dng)
  - Leica Q (Typ 116) (dng)
  - Leica Q2 (dng)
  - Leica SL (Typ 601) (dng)
  - Leica V-LUX (Typ 114) (3:2, 4:3, 16:9, 1:1)
  - Olympus E-M1X
  - Olympus TG-6
  - Panasonic DC-G90 (4:3)
  - Panasonic DC-G91 (4:3)
  - Panasonic DC-G95 (4:3)
  - Panasonic DC-G99 (4:3)
  - Panasonic DC-ZS200 (3:2)
  - Panasonic DMC-TX1 (3:2)
  - Sony DSC-RX0M2
  - Sony ILCE-6400
  - Sony ILCE-7RM4
  - White Balance Presets
  - Panasonic DC-LX100M2
  - Noise Profiles
  - Panasonic DC-LX100M2
- drop upstream patches
  Fix-OpenMP-4_0-issues-with-GCC9.patch</changelog>
</package>
<package pkgid="65c3220beef20f048151a8075de3c063da4d50183cd5fbfc9e0c6abfa416820a" name="darktable" arch="x86_64">
  <version epoch="0" ver="2.6.3" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove idempotent %if..%endif guards around %package
- Replace make install and make use of %make_install in its stead.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563192000">- Fix compilation failure due to stricter OpenMP 4.0 handling in GCC 9,
  add Fix-OpenMP-4_0-issues-with-GCC9.patch
- Fix build with exiv2 &gt;= 0.27, add
  0001-Fix-build-with-exiv2-0.27.patch
- Remove obsolete (since 2.2.0) SDL BuildRequires
- Specify minimum versions for GTK3 (3.14), glib (2.40) and
  exiv2 (0.24) in BuildRequires, matching upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571659200">- update to 2.6.3
  - New Features
  - April 1st game is now disabled by default
  - Add preference to disable/enable April 1st game
  - Print module default margin set 17mm
  - Add support for disabling base-curve by default
  - Add support for disabling sharpen by default
  - Bugfixes
  - Source with OpenMP can be compiled with GCC-9 and clang
  - Update skin tone preset on color-zones module
  - Fix compiling with exiv 0.27.2.1
  - Fix file access permissions on macOS Catalina 10.15
  - Fix shift+scroll only scrolling in one direction on macOS
  - Fix picasa, piwigo and facebook SSL support
  - Fix CSS issue on MacOS
  - Base Support
  - Epson R-D1s
  - Epson R-D1x
  - Fujifilm FinePix F770EXR
  - Fujifilm X-T30 (compressed)
  - Fujifilm XF10
  - Kodak EasyShare Z981
  - Kodak EasyShare Z990
  - Leica C (Typ 112) (4:3)
  - Leica CL (dng)
  - Leica Q (Typ 116) (dng)
  - Leica Q2 (dng)
  - Leica SL (Typ 601) (dng)
  - Leica V-LUX (Typ 114) (3:2, 4:3, 16:9, 1:1)
  - Olympus E-M1X
  - Olympus TG-6
  - Panasonic DC-G90 (4:3)
  - Panasonic DC-G91 (4:3)
  - Panasonic DC-G95 (4:3)
  - Panasonic DC-G99 (4:3)
  - Panasonic DC-ZS200 (3:2)
  - Panasonic DMC-TX1 (3:2)
  - Sony DSC-RX0M2
  - Sony ILCE-6400
  - Sony ILCE-7RM4
  - White Balance Presets
  - Panasonic DC-LX100M2
  - Noise Profiles
  - Panasonic DC-LX100M2
- drop upstream patches
  Fix-OpenMP-4_0-issues-with-GCC9.patch</changelog>
</package>
<package pkgid="f8026d6579a55014dc12f84326956df19dbe355005a4cd85c5ed182ead58fd23" name="darktable-doc" arch="noarch">
  <version epoch="0" ver="2.6.3" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove idempotent %if..%endif guards around %package
- Replace make install and make use of %make_install in its stead.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563192000">- Fix compilation failure due to stricter OpenMP 4.0 handling in GCC 9,
  add Fix-OpenMP-4_0-issues-with-GCC9.patch
- Fix build with exiv2 &gt;= 0.27, add
  0001-Fix-build-with-exiv2-0.27.patch
- Remove obsolete (since 2.2.0) SDL BuildRequires
- Specify minimum versions for GTK3 (3.14), glib (2.40) and
  exiv2 (0.24) in BuildRequires, matching upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571659200">- update to 2.6.3
  - New Features
  - April 1st game is now disabled by default
  - Add preference to disable/enable April 1st game
  - Print module default margin set 17mm
  - Add support for disabling base-curve by default
  - Add support for disabling sharpen by default
  - Bugfixes
  - Source with OpenMP can be compiled with GCC-9 and clang
  - Update skin tone preset on color-zones module
  - Fix compiling with exiv 0.27.2.1
  - Fix file access permissions on macOS Catalina 10.15
  - Fix shift+scroll only scrolling in one direction on macOS
  - Fix picasa, piwigo and facebook SSL support
  - Fix CSS issue on MacOS
  - Base Support
  - Epson R-D1s
  - Epson R-D1x
  - Fujifilm FinePix F770EXR
  - Fujifilm X-T30 (compressed)
  - Fujifilm XF10
  - Kodak EasyShare Z981
  - Kodak EasyShare Z990
  - Leica C (Typ 112) (4:3)
  - Leica CL (dng)
  - Leica Q (Typ 116) (dng)
  - Leica Q2 (dng)
  - Leica SL (Typ 601) (dng)
  - Leica V-LUX (Typ 114) (3:2, 4:3, 16:9, 1:1)
  - Olympus E-M1X
  - Olympus TG-6
  - Panasonic DC-G90 (4:3)
  - Panasonic DC-G91 (4:3)
  - Panasonic DC-G95 (4:3)
  - Panasonic DC-G99 (4:3)
  - Panasonic DC-ZS200 (3:2)
  - Panasonic DMC-TX1 (3:2)
  - Sony DSC-RX0M2
  - Sony ILCE-6400
  - Sony ILCE-7RM4
  - White Balance Presets
  - Panasonic DC-LX100M2
  - Noise Profiles
  - Panasonic DC-LX100M2
- drop upstream patches
  Fix-OpenMP-4_0-issues-with-GCC9.patch</changelog>
</package>
<package pkgid="ea01aeb061374a3e14f85fb6fbcba27589ab09846069be0c631f34c478bb104c" name="darktable-tools-basecurve" arch="x86_64">
  <version epoch="0" ver="2.6.3" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove idempotent %if..%endif guards around %package
- Replace make install and make use of %make_install in its stead.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563192000">- Fix compilation failure due to stricter OpenMP 4.0 handling in GCC 9,
  add Fix-OpenMP-4_0-issues-with-GCC9.patch
- Fix build with exiv2 &gt;= 0.27, add
  0001-Fix-build-with-exiv2-0.27.patch
- Remove obsolete (since 2.2.0) SDL BuildRequires
- Specify minimum versions for GTK3 (3.14), glib (2.40) and
  exiv2 (0.24) in BuildRequires, matching upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571659200">- update to 2.6.3
  - New Features
  - April 1st game is now disabled by default
  - Add preference to disable/enable April 1st game
  - Print module default margin set 17mm
  - Add support for disabling base-curve by default
  - Add support for disabling sharpen by default
  - Bugfixes
  - Source with OpenMP can be compiled with GCC-9 and clang
  - Update skin tone preset on color-zones module
  - Fix compiling with exiv 0.27.2.1
  - Fix file access permissions on macOS Catalina 10.15
  - Fix shift+scroll only scrolling in one direction on macOS
  - Fix picasa, piwigo and facebook SSL support
  - Fix CSS issue on MacOS
  - Base Support
  - Epson R-D1s
  - Epson R-D1x
  - Fujifilm FinePix F770EXR
  - Fujifilm X-T30 (compressed)
  - Fujifilm XF10
  - Kodak EasyShare Z981
  - Kodak EasyShare Z990
  - Leica C (Typ 112) (4:3)
  - Leica CL (dng)
  - Leica Q (Typ 116) (dng)
  - Leica Q2 (dng)
  - Leica SL (Typ 601) (dng)
  - Leica V-LUX (Typ 114) (3:2, 4:3, 16:9, 1:1)
  - Olympus E-M1X
  - Olympus TG-6
  - Panasonic DC-G90 (4:3)
  - Panasonic DC-G91 (4:3)
  - Panasonic DC-G95 (4:3)
  - Panasonic DC-G99 (4:3)
  - Panasonic DC-ZS200 (3:2)
  - Panasonic DMC-TX1 (3:2)
  - Sony DSC-RX0M2
  - Sony ILCE-6400
  - Sony ILCE-7RM4
  - White Balance Presets
  - Panasonic DC-LX100M2
  - Noise Profiles
  - Panasonic DC-LX100M2
- drop upstream patches
  Fix-OpenMP-4_0-issues-with-GCC9.patch</changelog>
</package>
<package pkgid="a2483a33488f09eb43e946fae9536e051b2a8df0ed84afd57aef795607cc6f33" name="darktable-tools-noise" arch="x86_64">
  <version epoch="0" ver="2.6.3" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove idempotent %if..%endif guards around %package
- Replace make install and make use of %make_install in its stead.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563192000">- Fix compilation failure due to stricter OpenMP 4.0 handling in GCC 9,
  add Fix-OpenMP-4_0-issues-with-GCC9.patch
- Fix build with exiv2 &gt;= 0.27, add
  0001-Fix-build-with-exiv2-0.27.patch
- Remove obsolete (since 2.2.0) SDL BuildRequires
- Specify minimum versions for GTK3 (3.14), glib (2.40) and
  exiv2 (0.24) in BuildRequires, matching upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571659200">- update to 2.6.3
  - New Features
  - April 1st game is now disabled by default
  - Add preference to disable/enable April 1st game
  - Print module default margin set 17mm
  - Add support for disabling base-curve by default
  - Add support for disabling sharpen by default
  - Bugfixes
  - Source with OpenMP can be compiled with GCC-9 and clang
  - Update skin tone preset on color-zones module
  - Fix compiling with exiv 0.27.2.1
  - Fix file access permissions on macOS Catalina 10.15
  - Fix shift+scroll only scrolling in one direction on macOS
  - Fix picasa, piwigo and facebook SSL support
  - Fix CSS issue on MacOS
  - Base Support
  - Epson R-D1s
  - Epson R-D1x
  - Fujifilm FinePix F770EXR
  - Fujifilm X-T30 (compressed)
  - Fujifilm XF10
  - Kodak EasyShare Z981
  - Kodak EasyShare Z990
  - Leica C (Typ 112) (4:3)
  - Leica CL (dng)
  - Leica Q (Typ 116) (dng)
  - Leica Q2 (dng)
  - Leica SL (Typ 601) (dng)
  - Leica V-LUX (Typ 114) (3:2, 4:3, 16:9, 1:1)
  - Olympus E-M1X
  - Olympus TG-6
  - Panasonic DC-G90 (4:3)
  - Panasonic DC-G91 (4:3)
  - Panasonic DC-G95 (4:3)
  - Panasonic DC-G99 (4:3)
  - Panasonic DC-ZS200 (3:2)
  - Panasonic DMC-TX1 (3:2)
  - Sony DSC-RX0M2
  - Sony ILCE-6400
  - Sony ILCE-7RM4
  - White Balance Presets
  - Panasonic DC-LX100M2
  - Noise Profiles
  - Panasonic DC-LX100M2
- drop upstream patches
  Fix-OpenMP-4_0-issues-with-GCC9.patch</changelog>
</package>
<package pkgid="706596910cd6924cedaf78a124d92e5099ea03e6bc3d3f79a4253e8ac663039a" name="dash" arch="i586">
  <version epoch="0" ver="0.5.11.2" rel="lp151.3.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="d2ab5f097c40a3fa00ff942b855a0abb80380b44a9d367c9191fa69bceb9a7f8" name="dash" arch="src">
  <version epoch="0" ver="0.5.11.2" rel="lp151.3.3.1"/>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1266062400">- initial packaging of dash</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1266062401">- do not provide ash</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1266580800">- cleaned up specfile</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1279540800">- update to version 0.5.6.1
  - bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="bd3b6342433fe0d9862ef1a5abcb90e702c188844777d50cd7a7d5c9839cea5b" name="dash" arch="x86_64">
  <version epoch="0" ver="0.5.11.2" rel="lp151.3.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="f165bb35f73bb197f361e3cf06ad5567ad38184f31eec19e8372ee338dfc07bc" name="dash" arch="i586">
  <version epoch="0" ver="0.5.11.2" rel="lp151.3.6.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1605787200">- add check-nflag-in-evaltree.patch (bsc#1178978)</changelog>
</package>
<package pkgid="746bbec997b55478cb693ebe81da7aa5dd56ea5baf55c6490183ca3d4b56c181" name="dash" arch="src">
  <version epoch="0" ver="0.5.11.2" rel="lp151.3.6.1"/>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1266062400">- initial packaging of dash</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1266062401">- do not provide ash</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1266580800">- cleaned up specfile</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1279540800">- update to version 0.5.6.1
  - bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1605787200">- add check-nflag-in-evaltree.patch (bsc#1178978)</changelog>
</package>
<package pkgid="91d87a31258a00c6e369bc490d35263e7b3481dcd0dcd3af076e19cb5a67e4db" name="dash" arch="x86_64">
  <version epoch="0" ver="0.5.11.2" rel="lp151.3.6.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1605787200">- add check-nflag-in-evaltree.patch (bsc#1178978)</changelog>
</package>
<package pkgid="168288d5a5763eb1a5846b15b53c2f677395c829bbad5647668492be0b0f75dc" name="db48-doc" arch="noarch">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="a6381ab65fa52446029142c36058d4b65d7a1ce2713a63fd9965d53be6423a17" name="db48-utils" arch="i586">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="b1ac5399e80ef5ee4d2a3a59c01ecc949a8795c2c97099c60a67648dbcae538f" name="db48-utils" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="2bf268d5972b8c629f301cb574af4b3bce31ff53fe432d5155c685c9fa982ac4" name="dbus-1" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="2508ba7bf0b1cc4b74a847be12b96684f601748bd15b50fc50850f59d798fb2a" name="dbus-1" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="d59e3bf816e45ae8205cc6f164d71328669b9f47a0af50c3d49a63a35de6dcda" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="f9c5eec297b4aee4db48d3eb28264db078cd8a78cc6b7e3a9a7940d00963e8f2" name="dbus-1-devel" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="68cf212ca542a631deb5b562761f3f9bd6f404663438b6b76940ebf35ce61eb8" name="dbus-1-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="4b7fac95d79e0b7f80dcac9e9f09d87597aae0a5f837ac1228f6fafb97f427d0" name="dbus-1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="485b04a82f537acb9b8038d5094fe89f5f0b804138bed4d2e6846db0023ef0cb" name="dbus-1-devel-doc" arch="noarch">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="e0c06500bffd2995d83a8152094d5c8b35ba24a043d280a76c828d7e362e3e4c" name="dbus-1-x11" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="f40206f2853337ec2e9a3e031ca5608f46e35e9b9cc820765735e275024c5cd6" name="dbus-1-x11" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="65b94bf4dee8d32d2683505492d9a5f153693a410a719d30fe0c69e2bf088c1c" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="a65b8eb8e696bc3680f7e186094cbbc4de8960803ab921027221667a915d4d9f" name="dehydrated" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp151.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="3f1706509bba354f8ac8d17b7835c87d1f8483c81c73f14e364d8419ca0e4547" name="dehydrated" arch="src">
  <version epoch="0" ver="0.6.5" rel="lp151.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="b5674d96ce5395e90b0734b7402e18a89f486d46d02aaa9f81543e607e464086" name="dehydrated" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp151.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
</package>
<package pkgid="4c66466310b8c8ed67d1ac72acbaaec7de56e94cdb561937723c04ba93027d33" name="dehydrated" arch="src">
  <version epoch="0" ver="0.6.5" rel="lp151.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
</package>
<package pkgid="d73d4c9a1e45344668e477ed6362ebb43cebad0a2ec7289a1a42a43b5c3b3608" name="dehydrated-apache2" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp151.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="8360bfccdb08879e3443c3a1bc504fea862c480a5e2b0bd89ecb7aa0e5566919" name="dehydrated-apache2" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp151.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
</package>
<package pkgid="10c9bb0ee8f301c68221cf1abba0206abf7be3419a67c94b4ed6eff1eb76081b" name="dehydrated-lighttpd" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp151.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="e0dc9a9ccb2ad9dbf67050a3b8cf205b72cec2892e555aef80c1b570278cd08b" name="dehydrated-lighttpd" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp151.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
</package>
<package pkgid="d4d5fe5826eb45eafb01ed2222f02de9d5b87591a24fbcd8b76238f087911b12" name="dehydrated-nginx" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp151.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="f0775a505b33b49fb02efdeb531a2d4e49a30f9aec8e1d233a0565905a2a8c71" name="dehydrated-nginx" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp151.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
</package>
<package pkgid="6189c796710c79e38784a682abfe0e422870787ce9159f59cb1ee4cab229af68" name="desktop-file-utils" arch="i586">
  <version epoch="0" ver="0.23" rel="lp151.4.3.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1418644800">- Add U_trailing-semicolons-are-optional_aec5711.patch
  bfo#76902, fixes a no longer correct rpmlint warning for some
  upstream desktop files without trailing semicolon
- Add U_add-EDE-desktop-environment_97d6ba3.patch,
  U_add-Cinnamon-desktop-environment_50271fe.patch
  bfo#56353, bfo#73497</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- http://standards.freedesktop.org/mime-apps-spec/mime-apps-spec-latest.html
  + the mime app list is now called $desktop-mimeapps.list in place
    of $desktop-defaults.list. Each DE is allowed to have 'better'
    defaults.</changelog>
  <changelog author="tchvatal@suse.com" date="1425988800">- Cleanup with spec-cleaner
- Update suse-update-mime-defaults to search subfolders for desktop
  files by changing to find from simple ls bnc#867135</changelog>
  <changelog author="hpj@suse.com" date="1460548800">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="hpj@suse.com" date="1462795200">- Add desktop-file-utils-fdo94303-fix-buffer-over-read.patch
  (fdo#94303).</changelog>
  <changelog author="dimstar@opensuse.org" date="1464091200">- Fix suse-update-mime-defaults: Ensure the directory structure to
  write the cache info to is in place (boo#976973).</changelog>
  <changelog author="dimstar@opensuse.org" date="1476273600">- Use standardized patch tags as documented at
  https://en.opensuse.org/openSUSE:Packaging_Patches_guidelines.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 0.23:
  + Accept version 1.1 desktop files.
  + Add Cinnamon, EDE and LXQt to the list of registered desktop
    environments (fdo#73497, fdo#56353, fdo#79561).
  + Allow multipart/related MIME type; it's used for MHTML
    (fdo#93376).
  + Ensure DBusActivatable filenames conform to reverse-DNS
    notation (fdo#66904).
  + Downgrade trailing semicolons to optional (fdo#76902).
  + Fix buffer over-read (fdo#94303).
- Drop upstreamed fixed patches:
  + desktop-file-utils-fdo94303-fix-buffer-over-read.patch.
  + U_add-Cinnamon-desktop-environment_50271fe.patch.
  + U_add-EDE-desktop-environment_97d6ba3.patch.
  + U_trailing-semicolons-are-optional_aec5711.patch.
- Rebase desktop-file-utils-suse-keys.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Replace %desktop_database_post/postun with respective file
  triggers in desktop-file-utils: any file put into
  /usr/share/applications will trigger the execution of the script.
  In order to not break the macros short-term they are being
  redefined to %nil.</changelog>
  <changelog author="sbrabec@suse.com" date="1507550400">- suse-update-mime-defaults: Do not be confused by "r" environment
  variable. Requires DESTDIR=/foo command line argument instead
  (boo#1049867).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519992000">- suse-update-mime-defaults requires coreutils and awk
  add both to package requires</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560945600">- Add desktop-file-utils-add-Pantheon.patch: Backporting upstream
  patch to Add Pantheon to desktop env list(fdo#105785 bnc#1094774).</changelog>
  <changelog author="sbrabec@suse.com" date="1563537600">- Revert pkconfig package name change back to correct pkg-config.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1566907200">- Add 0001-add-font-as-valid-media-type.patch from upstream to let
  update-desktop-database recognize font media types (bsc#1148080)</changelog>
</package>
<package pkgid="51162676c7d9487786bb9610510e43f953d4c9b8f90a83cf549cf1c79d63a7d6" name="desktop-file-utils" arch="src">
  <version epoch="0" ver="0.23" rel="lp151.4.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1331035200">- Update to version 0.20:
  + desktop-file-install:
  - fix list of locale strings without trailing slash
  + desktop-file-validate:
  - add MATE and Razor to list of registered environments
  - validate Desktop Actions
- Rebase desktop-file-utils-suse-keys.patch.</changelog>
  <changelog author="idonmez@suse.com" date="1348660800">- BuildIgnore dbus-1-x11 to break the cycle</changelog>
  <changelog author="vuntz@opensuse.org" date="1349092800">- Import SuSEconfig script from glib2 here:
  + This is needed as SuSEconfig is now dead, and we need a way to
    generate the defaults.list file needed for the default MIME
    associations. Part of bnc#782120.
  + Add suse-update-mime-defaults as source, and install it.
  + Call suse-update-mime-defaults in %post.
  + Call suse-update-mime-defaults from the %desktop_database_post
    and %desktop_database_postun macros defined in
    macros.desktop-file-utils. This way, packages using those
    macros will regenerate the defaults.list files on
    install/removal.</changelog>
  <changelog author="vuntz@opensuse.org" date="1349956800">- Update to verison 0.21:
  + desktop-file-validate:
  - update to current version of menu specification:
    . only print hint if no main category is present, not an
    error
    . make Science a main category
    . add new registered categories: Adult, Feed, Humanities,
    Maps, Shooter, Spirituality, XFCE
    . update related categories
    . add TDE to list of registered OnlyShowIn
  - accept and validate GNOME3/GSettings for AutostartCondition
  - output hint if more than one main category is present
  - output hint about suggested related categories
  + misc:
  - do not require glib &gt;= 2.28 for build</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1377864000">- Update to version 0.22:
  + desktop-file-validate
  - add DBusActivatable key to allowed keys
  - warn about OnlyShowIn in Action groups
  - allow validating multiple desktop files
  - improve help output
  - update man page
  + update-desktop-database
  - list only once a desktop file per mime type
  + misc
  - honor NOCONFIGURE=1
- Rebase desktop-file-utils-suse-keys.patch to new release</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1418644800">- Add U_trailing-semicolons-are-optional_aec5711.patch
  bfo#76902, fixes a no longer correct rpmlint warning for some
  upstream desktop files without trailing semicolon
- Add U_add-EDE-desktop-environment_97d6ba3.patch,
  U_add-Cinnamon-desktop-environment_50271fe.patch
  bfo#56353, bfo#73497</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- http://standards.freedesktop.org/mime-apps-spec/mime-apps-spec-latest.html
  + the mime app list is now called $desktop-mimeapps.list in place
    of $desktop-defaults.list. Each DE is allowed to have 'better'
    defaults.</changelog>
  <changelog author="tchvatal@suse.com" date="1425988800">- Cleanup with spec-cleaner
- Update suse-update-mime-defaults to search subfolders for desktop
  files by changing to find from simple ls bnc#867135</changelog>
  <changelog author="hpj@suse.com" date="1460548800">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="hpj@suse.com" date="1462795200">- Add desktop-file-utils-fdo94303-fix-buffer-over-read.patch
  (fdo#94303).</changelog>
  <changelog author="dimstar@opensuse.org" date="1464091200">- Fix suse-update-mime-defaults: Ensure the directory structure to
  write the cache info to is in place (boo#976973).</changelog>
  <changelog author="dimstar@opensuse.org" date="1476273600">- Use standardized patch tags as documented at
  https://en.opensuse.org/openSUSE:Packaging_Patches_guidelines.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 0.23:
  + Accept version 1.1 desktop files.
  + Add Cinnamon, EDE and LXQt to the list of registered desktop
    environments (fdo#73497, fdo#56353, fdo#79561).
  + Allow multipart/related MIME type; it's used for MHTML
    (fdo#93376).
  + Ensure DBusActivatable filenames conform to reverse-DNS
    notation (fdo#66904).
  + Downgrade trailing semicolons to optional (fdo#76902).
  + Fix buffer over-read (fdo#94303).
- Drop upstreamed fixed patches:
  + desktop-file-utils-fdo94303-fix-buffer-over-read.patch.
  + U_add-Cinnamon-desktop-environment_50271fe.patch.
  + U_add-EDE-desktop-environment_97d6ba3.patch.
  + U_trailing-semicolons-are-optional_aec5711.patch.
- Rebase desktop-file-utils-suse-keys.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Replace %desktop_database_post/postun with respective file
  triggers in desktop-file-utils: any file put into
  /usr/share/applications will trigger the execution of the script.
  In order to not break the macros short-term they are being
  redefined to %nil.</changelog>
  <changelog author="sbrabec@suse.com" date="1507550400">- suse-update-mime-defaults: Do not be confused by "r" environment
  variable. Requires DESTDIR=/foo command line argument instead
  (boo#1049867).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519992000">- suse-update-mime-defaults requires coreutils and awk
  add both to package requires</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560945600">- Add desktop-file-utils-add-Pantheon.patch: Backporting upstream
  patch to Add Pantheon to desktop env list(fdo#105785 bnc#1094774).</changelog>
  <changelog author="sbrabec@suse.com" date="1563537600">- Revert pkconfig package name change back to correct pkg-config.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1566907200">- Add 0001-add-font-as-valid-media-type.patch from upstream to let
  update-desktop-database recognize font media types (bsc#1148080)</changelog>
</package>
<package pkgid="8475545f8dfc4613091db9463979c091cb160411f6f2af0d372519107067af0f" name="desktop-file-utils" arch="x86_64">
  <version epoch="0" ver="0.23" rel="lp151.4.3.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1418644800">- Add U_trailing-semicolons-are-optional_aec5711.patch
  bfo#76902, fixes a no longer correct rpmlint warning for some
  upstream desktop files without trailing semicolon
- Add U_add-EDE-desktop-environment_97d6ba3.patch,
  U_add-Cinnamon-desktop-environment_50271fe.patch
  bfo#56353, bfo#73497</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- http://standards.freedesktop.org/mime-apps-spec/mime-apps-spec-latest.html
  + the mime app list is now called $desktop-mimeapps.list in place
    of $desktop-defaults.list. Each DE is allowed to have 'better'
    defaults.</changelog>
  <changelog author="tchvatal@suse.com" date="1425988800">- Cleanup with spec-cleaner
- Update suse-update-mime-defaults to search subfolders for desktop
  files by changing to find from simple ls bnc#867135</changelog>
  <changelog author="hpj@suse.com" date="1460548800">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="hpj@suse.com" date="1462795200">- Add desktop-file-utils-fdo94303-fix-buffer-over-read.patch
  (fdo#94303).</changelog>
  <changelog author="dimstar@opensuse.org" date="1464091200">- Fix suse-update-mime-defaults: Ensure the directory structure to
  write the cache info to is in place (boo#976973).</changelog>
  <changelog author="dimstar@opensuse.org" date="1476273600">- Use standardized patch tags as documented at
  https://en.opensuse.org/openSUSE:Packaging_Patches_guidelines.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 0.23:
  + Accept version 1.1 desktop files.
  + Add Cinnamon, EDE and LXQt to the list of registered desktop
    environments (fdo#73497, fdo#56353, fdo#79561).
  + Allow multipart/related MIME type; it's used for MHTML
    (fdo#93376).
  + Ensure DBusActivatable filenames conform to reverse-DNS
    notation (fdo#66904).
  + Downgrade trailing semicolons to optional (fdo#76902).
  + Fix buffer over-read (fdo#94303).
- Drop upstreamed fixed patches:
  + desktop-file-utils-fdo94303-fix-buffer-over-read.patch.
  + U_add-Cinnamon-desktop-environment_50271fe.patch.
  + U_add-EDE-desktop-environment_97d6ba3.patch.
  + U_trailing-semicolons-are-optional_aec5711.patch.
- Rebase desktop-file-utils-suse-keys.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Replace %desktop_database_post/postun with respective file
  triggers in desktop-file-utils: any file put into
  /usr/share/applications will trigger the execution of the script.
  In order to not break the macros short-term they are being
  redefined to %nil.</changelog>
  <changelog author="sbrabec@suse.com" date="1507550400">- suse-update-mime-defaults: Do not be confused by "r" environment
  variable. Requires DESTDIR=/foo command line argument instead
  (boo#1049867).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519992000">- suse-update-mime-defaults requires coreutils and awk
  add both to package requires</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560945600">- Add desktop-file-utils-add-Pantheon.patch: Backporting upstream
  patch to Add Pantheon to desktop env list(fdo#105785 bnc#1094774).</changelog>
  <changelog author="sbrabec@suse.com" date="1563537600">- Revert pkconfig package name change back to correct pkg-config.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1566907200">- Add 0001-add-font-as-valid-media-type.patch from upstream to let
  update-desktop-database recognize font media types (bsc#1148080)</changelog>
</package>
<package pkgid="a4759b3e6c27cbfc6e99e9589e233be5c3b457417325a156d611da11b6481d46" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.12.1"/>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
</package>
<package pkgid="e315432d79cf177adb1dcbc46423c9a0f73e81f19c58a7663b3dadd535ae0038" name="device-mapper" arch="src">
  <version epoch="0" ver="1.02.149" rel="lp151.4.12.1"/>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
</package>
<package pkgid="564212eb5418bd71b1e55f96a14903b301ea173fb868b85a91d87f10f63bb2ac" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.12.1"/>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
</package>
<package pkgid="2a82020d2e99786bbe03c6b33cd37c08a2f586dad4752b7914c6c0c43ef7ecd4" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.15.1"/>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
</package>
<package pkgid="5502b2515342ed7da00989695443c75afe08f610a771325e9b13dbb0e01f589a" name="device-mapper" arch="src">
  <version epoch="0" ver="1.02.149" rel="lp151.4.15.1"/>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
</package>
<package pkgid="3dec27b486eb81bdb022b1dda3a334cdd109fa74e7d3771b5ae58011740e9401" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.15.1"/>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
</package>
<package pkgid="0d8cfeda708c650f5387200b6c8334f93cdd3d6c704f2b46e5a4bb86e9a2b3ed" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.18.1"/>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
</package>
<package pkgid="d58f65256ec436e7a70ee381a3ec99c760a86ea8261a21f3b5238616f554ebe3" name="device-mapper" arch="src">
  <version epoch="0" ver="1.02.149" rel="lp151.4.18.1"/>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
</package>
<package pkgid="1ba5bf9955876cb8a8a72aa05bdd98ea2e50a5ead741d29b8c3fe8ede8c7b7e8" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.18.1"/>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
</package>
<package pkgid="231aee0608e0773439d4a8b663eb345b730c3d6ce638f602f8b4eb2163b1577d" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.21.1"/>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1597060800">- add missing patches
  systemd lvm2-pvscan@.service StartLimitInterval misplaced (bsc#1123327)
  + bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
- modify patch according to changing patch:
  bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-998893_make_pvscan_service_after_multipathd.patch (bsc#998893)
- use COMMON-PATCH to manage clvm patch
  + lvm2-clvm.spec
  - Patch3001: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
    + Patch1006: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- lvm scan: Too many open files (bsc#1173503)
  + bug-1173503_lvmetad-fix-pvs-for-many-devices.patch
- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1604923200">- update patch according to systemd version/behaviour changed (bsc#1123327)
  - bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-1123327-pvscan-service-use-StartLimitIntervalSec.patch</changelog>
</package>
<package pkgid="c53e464d7089eb355104aa012782daf80d93af55731517509477d32a3fcd667c" name="device-mapper" arch="src">
  <version epoch="0" ver="1.02.149" rel="lp151.4.21.1"/>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1597060800">- add missing patches
  systemd lvm2-pvscan@.service StartLimitInterval misplaced (bsc#1123327)
  + bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
- modify patch according to changing patch:
  bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-998893_make_pvscan_service_after_multipathd.patch (bsc#998893)
- use COMMON-PATCH to manage clvm patch
  + lvm2-clvm.spec
  - Patch3001: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
    + Patch1006: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- lvm scan: Too many open files (bsc#1173503)
  + bug-1173503_lvmetad-fix-pvs-for-many-devices.patch
- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1604923200">- update patch according to systemd version/behaviour changed (bsc#1123327)
  - bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-1123327-pvscan-service-use-StartLimitIntervalSec.patch</changelog>
</package>
<package pkgid="7fb992da2730e125c1ab69c24b90a61bc3c915aacebc4f40b7b75a3469435566" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.21.1"/>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1597060800">- add missing patches
  systemd lvm2-pvscan@.service StartLimitInterval misplaced (bsc#1123327)
  + bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
- modify patch according to changing patch:
  bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-998893_make_pvscan_service_after_multipathd.patch (bsc#998893)
- use COMMON-PATCH to manage clvm patch
  + lvm2-clvm.spec
  - Patch3001: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
    + Patch1006: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- lvm scan: Too many open files (bsc#1173503)
  + bug-1173503_lvmetad-fix-pvs-for-many-devices.patch
- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1604923200">- update patch according to systemd version/behaviour changed (bsc#1123327)
  - bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-1123327-pvscan-service-use-StartLimitIntervalSec.patch</changelog>
</package>
<package pkgid="764eb8fbea24213bcb0503170f7895ba38a48caadb38a4015c2e5e6900ed7959" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.24.1"/>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1597060800">- add missing patches
  systemd lvm2-pvscan@.service StartLimitInterval misplaced (bsc#1123327)
  + bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
- modify patch according to changing patch:
  bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-998893_make_pvscan_service_after_multipathd.patch (bsc#998893)
- use COMMON-PATCH to manage clvm patch
  + lvm2-clvm.spec
  - Patch3001: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
    + Patch1006: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- lvm scan: Too many open files (bsc#1173503)
  + bug-1173503_lvmetad-fix-pvs-for-many-devices.patch
- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1604923200">- update patch according to systemd version/behaviour changed (bsc#1123327)
  - bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-1123327-pvscan-service-use-StartLimitIntervalSec.patch</changelog>
</package>
<package pkgid="d056b795d19236cbca29379bb99cff115f16277729f164ddc3b8b985222fa194" name="device-mapper" arch="src">
  <version epoch="0" ver="1.02.149" rel="lp151.4.24.1"/>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1597060800">- add missing patches
  systemd lvm2-pvscan@.service StartLimitInterval misplaced (bsc#1123327)
  + bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
- modify patch according to changing patch:
  bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-998893_make_pvscan_service_after_multipathd.patch (bsc#998893)
- use COMMON-PATCH to manage clvm patch
  + lvm2-clvm.spec
  - Patch3001: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
    + Patch1006: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- lvm scan: Too many open files (bsc#1173503)
  + bug-1173503_lvmetad-fix-pvs-for-many-devices.patch
- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1604923200">- update patch according to systemd version/behaviour changed (bsc#1123327)
  - bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-1123327-pvscan-service-use-StartLimitIntervalSec.patch</changelog>
</package>
<package pkgid="0259b09cac1b25cbf4fc2f4b67891a22150429f4395e51b51b79931059b9cdf6" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.24.1"/>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1597060800">- add missing patches
  systemd lvm2-pvscan@.service StartLimitInterval misplaced (bsc#1123327)
  + bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
- modify patch according to changing patch:
  bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-998893_make_pvscan_service_after_multipathd.patch (bsc#998893)
- use COMMON-PATCH to manage clvm patch
  + lvm2-clvm.spec
  - Patch3001: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
    + Patch1006: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- lvm scan: Too many open files (bsc#1173503)
  + bug-1173503_lvmetad-fix-pvs-for-many-devices.patch
- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1604923200">- update patch according to systemd version/behaviour changed (bsc#1123327)
  - bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-1123327-pvscan-service-use-StartLimitIntervalSec.patch</changelog>
</package>
<package pkgid="e04e4011e8bc23dceccb68111822194b5db69b4316c75dea00afd0c8c84a7de4" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="8f44474b8333c7a450e8a9c0a3f2fde47ded29ae65413f324c0491871500125b" name="device-mapper" arch="src">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="fb1b59fc571ab6e4545960271f066597245309e6147899f451d20d94df6fb670" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="ba17cd1ea76499a33582ad5743781b8ea12e225079ae6105b25eaf54af44fb0a" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="ed95e12c5e55fbb7d5e8c72c1ded76f1c25d4c2431cf30f4b2beb6f3ba4cd51c" name="device-mapper" arch="src">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="a80a2e627ea72fb80ad556c5b707a33243860be5e92e5a17cad4f11403f94f0e" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="e63f1669c8b7827c35532c6e6b1321d0f50f2f0cffe8b45069d4d7a08c9ca1f9" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.9.1"/>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
</package>
<package pkgid="eca022a4128338ab95b45dd8c28fed8f87b77a1282a8a4887e1f9094042fc1c0" name="device-mapper" arch="src">
  <version epoch="0" ver="1.02.149" rel="lp151.4.9.1"/>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
</package>
<package pkgid="2285b9393b02505b63f47954451c87ac99db1fc4c55e962bcf0c4c5c40e47ddc" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.9.1"/>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
</package>
<package pkgid="b6c7f81536555e8c35405dd779ac6c968e0b9702bf5f41e0ff43b460a27956fe" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.12.1"/>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
</package>
<package pkgid="1075636025f5f93c60cfff166bde3666893bd9a6e25eaed2f1bc4c0d60238d2c" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.12.1"/>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
</package>
<package pkgid="611944e8f55b4055daaeab6f11a56d4b82f021ee716bb2dbbee0bf31369d2181" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.15.1"/>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
</package>
<package pkgid="7d34db047d8238e23ac594742bcd03f19f655066bc3478a65780f7aa2a3aeabc" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.15.1"/>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
</package>
<package pkgid="087fb710c330efe71c9151d50c9d124629de5c71e1b9cfbe4764c89b46a374a7" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.18.1"/>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
</package>
<package pkgid="14c55da8e38fb5bc5cf36da85656c9685f6d525438efb124161ace56e23bfd3d" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.18.1"/>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
</package>
<package pkgid="1ab511bb76bf4fd3e1c872159d5b93051acbc6bdb898bcc9ae51a18148e81952" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.21.1"/>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1597060800">- add missing patches
  systemd lvm2-pvscan@.service StartLimitInterval misplaced (bsc#1123327)
  + bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
- modify patch according to changing patch:
  bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-998893_make_pvscan_service_after_multipathd.patch (bsc#998893)
- use COMMON-PATCH to manage clvm patch
  + lvm2-clvm.spec
  - Patch3001: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
    + Patch1006: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- lvm scan: Too many open files (bsc#1173503)
  + bug-1173503_lvmetad-fix-pvs-for-many-devices.patch
- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1604923200">- update patch according to systemd version/behaviour changed (bsc#1123327)
  - bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-1123327-pvscan-service-use-StartLimitIntervalSec.patch</changelog>
</package>
<package pkgid="a3609a059ff245e47160ee0af9d7a364fd738980d7508a3bbbcae85e330ad5d5" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.21.1"/>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1597060800">- add missing patches
  systemd lvm2-pvscan@.service StartLimitInterval misplaced (bsc#1123327)
  + bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
- modify patch according to changing patch:
  bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-998893_make_pvscan_service_after_multipathd.patch (bsc#998893)
- use COMMON-PATCH to manage clvm patch
  + lvm2-clvm.spec
  - Patch3001: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
    + Patch1006: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- lvm scan: Too many open files (bsc#1173503)
  + bug-1173503_lvmetad-fix-pvs-for-many-devices.patch
- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1604923200">- update patch according to systemd version/behaviour changed (bsc#1123327)
  - bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-1123327-pvscan-service-use-StartLimitIntervalSec.patch</changelog>
</package>
<package pkgid="958ffa7526c16eb9b1c58898342979bd9ef51ed5735d94744e5d04832cdcfb42" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.24.1"/>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1597060800">- add missing patches
  systemd lvm2-pvscan@.service StartLimitInterval misplaced (bsc#1123327)
  + bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
- modify patch according to changing patch:
  bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-998893_make_pvscan_service_after_multipathd.patch (bsc#998893)
- use COMMON-PATCH to manage clvm patch
  + lvm2-clvm.spec
  - Patch3001: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
    + Patch1006: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- lvm scan: Too many open files (bsc#1173503)
  + bug-1173503_lvmetad-fix-pvs-for-many-devices.patch
- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1604923200">- update patch according to systemd version/behaviour changed (bsc#1123327)
  - bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-1123327-pvscan-service-use-StartLimitIntervalSec.patch</changelog>
</package>
<package pkgid="78aa4144e90e405ad720cc2f63d97c5b862af21904b66796fd4f41f8fae8fdda" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.24.1"/>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1597060800">- add missing patches
  systemd lvm2-pvscan@.service StartLimitInterval misplaced (bsc#1123327)
  + bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
- modify patch according to changing patch:
  bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-998893_make_pvscan_service_after_multipathd.patch (bsc#998893)
- use COMMON-PATCH to manage clvm patch
  + lvm2-clvm.spec
  - Patch3001: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
    + Patch1006: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- lvm scan: Too many open files (bsc#1173503)
  + bug-1173503_lvmetad-fix-pvs-for-many-devices.patch
- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1604923200">- update patch according to systemd version/behaviour changed (bsc#1123327)
  - bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-1123327-pvscan-service-use-StartLimitIntervalSec.patch</changelog>
</package>
<package pkgid="3f2ec3eb669d85e30024237c9ff937c2118effe54160a5c2bfaf2cc95620d549" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="db779517b15e774cb35ab6efc6759b7a651f8d0c35bf3412e30b2be6ee0a42c5" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="91160f6cb4cb4720d373dec9fa9bfc744ce0c69f469272dd79bb50b4d373cc6f" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="227d85105020e5fba5dbd8344437fb54dcc63151446117e5cf13d83d951b6731" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="dec79fe3c4f79c3ad9c6f9b6c10e85e6c6069b6ac736235b4b01b4277790b939" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.9.1"/>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
</package>
<package pkgid="99fd72aefb497ca20bddb0ae45513421b4c410ce82bf7cb6b39e84c1c813f56c" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.9.1"/>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
</package>
<package pkgid="f0e0fc882ecd69a87335977cea3d3aaa1d3275013c0787cc9ce77af12e5dd968" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.12.1"/>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
</package>
<package pkgid="1afd026776ea7eeb0c362b9d40c192db5075e58dfed6c74232cd586df183d3e4" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.15.1"/>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
</package>
<package pkgid="82ab0c605f74368f2849a0ee2622b8475133f6642342828eedf53e96ca8ba8c6" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.18.1"/>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
</package>
<package pkgid="d9e16a7c84b64328ae974a8ffd8f11d3ffaab15b219ec304918d478f5e42efc2" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.21.1"/>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1597060800">- add missing patches
  systemd lvm2-pvscan@.service StartLimitInterval misplaced (bsc#1123327)
  + bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
- modify patch according to changing patch:
  bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-998893_make_pvscan_service_after_multipathd.patch (bsc#998893)
- use COMMON-PATCH to manage clvm patch
  + lvm2-clvm.spec
  - Patch3001: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
    + Patch1006: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- lvm scan: Too many open files (bsc#1173503)
  + bug-1173503_lvmetad-fix-pvs-for-many-devices.patch
- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1604923200">- update patch according to systemd version/behaviour changed (bsc#1123327)
  - bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-1123327-pvscan-service-use-StartLimitIntervalSec.patch</changelog>
</package>
<package pkgid="9b64a7ad40df162a07b75f71dd8844167f4bd2e5e714671cca226bae0b28898e" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.24.1"/>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-fix-dev_unset_last_byte-after-write-error.patch
  + bug-1150021_02-suse-special-bcache-bug-fix.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582113600">- lvmetad uses devices/global_filter but not devices/filter after lvm2 update (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch</changelog>
  <changelog author="ghe@suse.com" date="1582200000">- Fix heap memory leak in lvmetad. (bsc#1164126)
  + bug-1164126_lvmetad-fix-heap-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1582718400">- update patch (bsc#1163526)
  + bug-1163526_suse-special-global-filter-compat.patch
- update patch (bsc#1145231)
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch
- boot takes extremely long time with 400 LUN's (bsc#1158358)
  + bug-1158358_bcache-reduce-MAX_IO-to-256.patch
- lvm2 bcache code enhancement (bsc#1164718)
  + bug-1164718_01-vgcreate-close-exclusive-fd-after-pvcreate.patch
  + bug-1164718_02-io-use-sync-io-if-aio-fails.patch
  + bug-1164718_03-bcache-sync-io-fixes.patch
  + bug-1164718_04-lvconvert-restrict-command-matching-for-no-option-va.patch
  + bug-1164718_05-lvmetad-only-disable-if-repair-will-do-something.patch
  + bug-1164718_06-lvmetad-fix-disabling-in-previous-commit.patch
  + bug-1164718_07-filter-add-config-setting-to-skip-scanning-LVs.patch
  + bug-1164718_08-pvscan-lvmetad-init-should-set-updating-before-scann.patch
  + bug-1164718_09-config-change-scan_lvs-default-to-0.patch
  + bug-1164718_10-config-add-new-setting-io_memory_size.patch
  + bug-1164718_11-io-warn-when-metadata-size-approaches-io-memory-size.patch
  + bug-1164718_12-io-increase-the-default-io-memory-from-4-to-8-MiB.patch
  + bug-1164718_13-bcache-Fix-memory-leak.patch
  + bug-1164718_14-lvmcache-remove-unused_duplicate_devs-list-from-cmd.patch
  + bug-1164718_15-cov-release-iterator-on-error-path.patch
  + bug-1164718_16-cov-check-lv_info.patch
  + bug-1164718_17-cov-add-stack-tracing-for-error-paths.patch
  + bug-1164718_18-cov-validate-pagesize-is-not-negative.patch
  + bug-1164718_19-cov-remove-unused-headers.patch
  + bug-1164718_20-cov-check-result-of-dev_get_block_size.patch
  + bug-1164718_21-gcc-clean-uninitialized-var-warning.patch
  + bug-1164718_22-cov-release-iterator-on-error-path.patch
  + bug-1164718_23-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1164718_24-pvscan-avoid-redundant-activation.patch
  + bug-1164718_25-devs-check-for-no-dev-when-dropping-aliases.patch
  + bug-1164718_26-pvscan-fix-activation-of-incomplete-VGs.patch
  + bug-1164718_27-lvmetad-fix-sync-cache-to-lvmetad.patch
  + bug-1164718_28-lvmcache-free-resource-on-error-path.patch
- Avoid creation of mixed-blocksize PV on LVM volume groups (LVM2) (bsc#1149408)
  + bug-1149408_01-vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  + bug-1149408_02-tests-allow-mixed-block-sizes.patch
  + bug-1149408_03-tests-allow-mixed-block-sizes-skip-with-older-losetu.patch
  + bug-1149408_04-config-allow_mixed_block_sizes-set-default-to-1.patch
  + bug-1149408_05-config-allow_mixed_block_sizes-set-version-2.02.187.patch
  + bug-1149408_06-suse-special-config-allow_mixed_block_sizes-set-version-2.02.180.patch
- Use the upstream patches for LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  remove SUSE speical patch:
  - bug-1150021_02-suse-special-bcache-bug-fix.patch
  add patch:
  + bug-1150021_02-radix-tree-Bring-radix-tree-up-to-date-with-the-mast.patch
  + bug-1150021_03-cov-Fix-a-leak.patch
  + bug-1150021_04-bcache-Bring-bcache-into-sync-with-master-branch.patch
  + bug-1150021_05-bcache-add-bcache_abort.patch
  + bug-1150021_06-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_07-bcache-add-unit-test.patch
  + bug-1150021_08-bcache-pass-up-the-error-from-io_submit-rather-than.patch
  + bug-1150021_09-bcache-reverse-earlier-patch.patch
  + bug-1150021_10-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_11-radix-tree-Add-missing-test-case.patch
  + bug-1150021_12-base-Get-Makefile-from-master.patch
  + bug-1150021_13-Fix-rounding-writes-up-to-sector-size.patch
  + bug-1150021_14-bcache-Fix-memory-leak-in-error-path.patch
- Update lvm.conf file
  add devices/allow_mixed_block_sizes item
  add global/use_aio item</changelog>
  <changelog author="heming.zhao@suse.com" date="1595419200">- On shutdown systems hangs for 90 seconds stopping LVM2 metatdata daemon (bsc#1172597)
  + bug-1172597_1-libdaemon-use-pselect-to-avoid-condition-checking-ra.patch
  + bug-1172597_2-cleanup-missed-string-specifier.patch
  + bug-1172597_3-libdaemon-ensure-threads-are-reaped-before-checking-.patch
  + bug-1172597_4-cov-check-for-socket_path-being-set.patch
  + bug-1172597_5-lvmetad-fix-timeout-on-shutdown.patch
  + bug-1172597_6-cov-missing-checks-of-syscalls.patch
  + bug-1172597_7-daemon-better-error-path-handling-for-shutdown.patch
  + bug-1172597_8-daemons-check-for-non-zero-thread_id.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1597060800">- add missing patches
  systemd lvm2-pvscan@.service StartLimitInterval misplaced (bsc#1123327)
  + bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
- modify patch according to changing patch:
  bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-998893_make_pvscan_service_after_multipathd.patch (bsc#998893)
- use COMMON-PATCH to manage clvm patch
  + lvm2-clvm.spec
  - Patch3001: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
    + Patch1006: bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- lvm scan: Too many open files (bsc#1173503)
  + bug-1173503_lvmetad-fix-pvs-for-many-devices.patch
- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1604923200">- update patch according to systemd version/behaviour changed (bsc#1123327)
  - bug-1123327_pvscan.service.in-Move-StartLimitInterval-to-Service.patch
  + bug-1123327-pvscan-service-use-StartLimitIntervalSec.patch</changelog>
</package>
<package pkgid="fe8c76c2cfa5bc7c7f9b932239929f1deac0eeb4ae47bbfa698829b154a2a0ca" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="0997667a44f06a5d8b0f88227544cee57522665ba1d331924b8fddd2c0909f67" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="6f3dc78f0f4bef19f8af85b12fea0b027891d1b09ca31e704c04134b24ed57f7" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.9.1"/>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1573041600">- Fix seeing a 90 Second delay on shutdown and reboot (bsc#1155668)
  + bug-1155668_systemd-add-missing-Before-shutdown.target-to-LVM2.patch</changelog>
</package>
<package pkgid="bbb4fe8622fc0e6944213b9a201275f5637ba43d69b17f93aedba71804cd20e5" name="devscripts" arch="i586">
  <version epoch="0" ver="2.19.5" rel="lp151.3.5.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="fd19c18527651e1dd0d2e754e1be6521686763b70ff03bcc2f988abd5cc017eb" name="devscripts" arch="src">
  <version epoch="0" ver="2.19.5" rel="lp151.3.5.1"/>
  <changelog author="frank.lichtenheld@sophos.com" date="1322308800">- update to dpkg-1.15.8.11
  * Do not segfault on "dpkg -i --no-act".
  * Fix typo in "dpkg-name --overwrite" argument parsing so that it actually
  works at all. Ubuntu Bug #728708
  * Fix dpkg-split to not corrupt binary part metadata when generating the
  split packages on 32-bit systems.
  * Fix a regression in dpkg-divert where using --rename led to a failure when
  the rename implies crossing file systems.</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1327838400">- update to dpkg-1.15.8.12
  * Do not fail to unpack shared directories missing on the file system
  from packages being replaced by other packages. Debian Bug #631808
  * Defer hardlink renames so that there's never a point were the new
  file contents are accessible from the final path before they have
  been fsync()ed and cannot be executed causing ETXTBSY when trying
  to open the to be installed paths for writing. Debian Bug #635683
  * Add armhf support to ostable and triplettable.
  Debian Bugs #594179, #639674</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1336046400">- install missing parts of devscripts
  * install man pages installed by debian/manpages
  * install symlinks installed by debian/links</changelog>
  <changelog author="i@marguerite.su" date="1337601600">- update to dpkg-1.16.3
  * see http://packages.debian.org/changelogs/pool/main/d/dpkg/dpkg_1.16.3/changelog
- update to debhelper 9.20120518
  * Fix versioned dependency on dpkg for xz options. Closes: #672895
  * dh_link: Doc improvement. Closes: #672988
- update to devscripts-2.11.7
  * see http://packages.debian.org/changelogs/pool/main/d/devscripts/devscripts_2.11.7/changelog
- reworked patch. remove version for archtable. for it's universal.
- add dh_make 0.60
  * see http://packages.debian.org/changelogs/pool/main/d/dh-make/dh-make_0.60/changelog
- add dh_autoreconf 6
  * see http://packages.debian.org/changelogs/pool/main/d/dh-autoreconf/dh-autoreconf_6/changelog</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1340712000">- package devscripts separately</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1340712001">- fix build on Fedora
  * fix path to XSL stylesheets
  * build require dpkg-devel since dpkg-parsechangelog
  is in there in Fedora
  * do not pretend that the Makefile honors %_libexecdir
- fix scripts that use File::Path on SLE 11</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1341576000">- no need to depend on a specific perl version</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1348747200">- update to devscripts-2.12.4
  * dget: Fix CVE-2012-2241 (arbitrary file deletion)
  * dscverify: Fix CVE-2012-2240 (arbitrary code execution)
  * annotate-output: Fix to prevent symlink attack: don't delete
  safely-created file and reuse its name.  Instead, create temporary
  directory and create FIFOs therein.  Also, be sure to remove temporaries
  upon catchable signal.  Fixes CVE-2012-3500.
  * debdiff: Fix regression in exit code, introduced in 2.11.4.
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1349438400">- extend License header according to review. (bnc#783729)
- add debian/changelog and debian/copyright to package</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="86795aa70b3daec525c0bf32d1e84391b031910a6d5b127352db2680fbace32c" name="devscripts" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="lp151.3.5.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="c5acbc5c370ed6c95f8d94c972fd7e48a59bf71820a32c09d28b82c92da831ec" name="devscripts" arch="i586">
  <version epoch="0" ver="2.19.5" rel="lp151.3.8.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5 bsc#1174163:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="ee47af8b8b8a8a9c62b370a984c8c20db9bcb018eb080e9b5fe9c2ae9055aba0" name="devscripts" arch="src">
  <version epoch="0" ver="2.19.5" rel="lp151.3.8.1"/>
  <changelog author="frank.lichtenheld@sophos.com" date="1322308800">- update to dpkg-1.15.8.11
  * Do not segfault on "dpkg -i --no-act".
  * Fix typo in "dpkg-name --overwrite" argument parsing so that it actually
  works at all. Ubuntu Bug #728708
  * Fix dpkg-split to not corrupt binary part metadata when generating the
  split packages on 32-bit systems.
  * Fix a regression in dpkg-divert where using --rename led to a failure when
  the rename implies crossing file systems.</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1327838400">- update to dpkg-1.15.8.12
  * Do not fail to unpack shared directories missing on the file system
  from packages being replaced by other packages. Debian Bug #631808
  * Defer hardlink renames so that there's never a point were the new
  file contents are accessible from the final path before they have
  been fsync()ed and cannot be executed causing ETXTBSY when trying
  to open the to be installed paths for writing. Debian Bug #635683
  * Add armhf support to ostable and triplettable.
  Debian Bugs #594179, #639674</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1336046400">- install missing parts of devscripts
  * install man pages installed by debian/manpages
  * install symlinks installed by debian/links</changelog>
  <changelog author="i@marguerite.su" date="1337601600">- update to dpkg-1.16.3
  * see http://packages.debian.org/changelogs/pool/main/d/dpkg/dpkg_1.16.3/changelog
- update to debhelper 9.20120518
  * Fix versioned dependency on dpkg for xz options. Closes: #672895
  * dh_link: Doc improvement. Closes: #672988
- update to devscripts-2.11.7
  * see http://packages.debian.org/changelogs/pool/main/d/devscripts/devscripts_2.11.7/changelog
- reworked patch. remove version for archtable. for it's universal.
- add dh_make 0.60
  * see http://packages.debian.org/changelogs/pool/main/d/dh-make/dh-make_0.60/changelog
- add dh_autoreconf 6
  * see http://packages.debian.org/changelogs/pool/main/d/dh-autoreconf/dh-autoreconf_6/changelog</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1340712000">- package devscripts separately</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1340712001">- fix build on Fedora
  * fix path to XSL stylesheets
  * build require dpkg-devel since dpkg-parsechangelog
  is in there in Fedora
  * do not pretend that the Makefile honors %_libexecdir
- fix scripts that use File::Path on SLE 11</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1341576000">- no need to depend on a specific perl version</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1348747200">- update to devscripts-2.12.4
  * dget: Fix CVE-2012-2241 (arbitrary file deletion)
  * dscverify: Fix CVE-2012-2240 (arbitrary code execution)
  * annotate-output: Fix to prevent symlink attack: don't delete
  safely-created file and reuse its name.  Instead, create temporary
  directory and create FIFOs therein.  Also, be sure to remove temporaries
  upon catchable signal.  Fixes CVE-2012-3500.
  * debdiff: Fix regression in exit code, introduced in 2.11.4.
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1349438400">- extend License header according to review. (bnc#783729)
- add debian/changelog and debian/copyright to package</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5 bsc#1174163:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="70816f51fe9de3aa5d452c1ebc8fea0e5d18ba43e2548e92d66147cbea645dbe" name="devscripts" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="lp151.3.8.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5 bsc#1174163:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="3f6f35f279632d48bc5bb93e1172062b2f6c8ea1b17a7e028d226571415d0f05" name="dfu-tool" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 0.8.0:
  + Show a different error when checking for updates while on
  + battery power (gh#hughsie/fwupd#68).
  + Clarify the test in --help and man page related to offline
  + (gh#hughsie/fwupd#69).
  + libdfu: Use a heuristic for the start address if the firmware
  + has no DfuSe footer.
  + dell: Don't return the address of a stack variable.
  + dell: Fix a possibly-impossible-to-hit buffer overrun.
  + close USB devices before error returns (gh#hughsie/fwupd#73).
  + Make libelf support optional.
  + Always make sure we're getting a C99 compiler.
  + Fix redeclaration of polkit autocleanup functions.
  + Uncomment SystemdService parameter in the dbus service file
  + (gh#hughsie/fwupd#74).
  + Make all providers and plugins share a GUsbContext.
  + Unexport libebitdo.
  + Move the plugins into plugin-specific directories.
  + Convert the providers to plugins to simplify code and for
  + future features.
  + Add support for Logitech Unifying devices.
  + Add a set of vfuncs that are run before and after a device
  + update.
  + Return the pending UEFI update when not on AC power.
  + Move the UPower functionality to a plugin.
  + Fix udev plugin loading.
  + fix dfu plugin loading.
  + Disable PrivateNetwork on systemd service.
  + Use more restrictive settings when running under systemd.
  + dell: add a new method for forcing a controller to flash mode.
  + Add VerifyUpdate to update the device checksums server-side.
  + Move the Option ROM parsing to the Udev plugin.
  + Move the device add delay to shared code.
  + Add initial skeleton for Intel Thunderbolt support.
  + unifying: Use the actual bootloader VID/PIDs when in firmware
  + mode.
  + Allow the metadata to match a version of fwupd and the existing
  + fw version.
  + Add fwupd_result_get_device_version_bootloader().
  + Fix the appstream-glib version guards.
  + dell: Add coldplug methods to let other plugins turn on
  + TBT/GPIO.
  + libdfu: Don't read data from some DfuSe targets.
  + Add the ability to run a prepare-&gt;exec-&gt;cleanup on coldplug.
  + Allow plugins to request that all plugins re-coldplug.
  + thunderbolt: Detecting new devices and add an actual device to
  + the daemon.
  + Add support for flashing the ChaosKey.
  + thunderbolt: add some guards around empty arrays.
  + dell: Adjust the coldplug preparation and cleanup sequence.
  + dell: Fix possible linker problem.
  + Revert "thunderbolt: add some guards around empty arrays".
  + Add fu_plugin_set_coldplug_delay() to allow hardware to
  + initialize if required.
  + altos: Add error checking when using termios.
  + ebitdo: Subclass FuDevice like the altos plugin.
  + altos: Set the flags in the init_real so they work for the
  + cmdline tool.
  + unifying: Subclass FuDevice like the altos plugin.
  + Include all debug messages when run with --verbose.
  + dell: introduce a standalone (noinst) tool to force mode
  + flashes.
  + Introduce plugin for Synaptics MST hubs.
  + synapticsmst: Add cascade support.
  + Only register the D-Bus service when all devices have been
  + added.
  + synapticsmst: Refactor away the global state.
  + synapticsmst: fix cascade support in the plugin.
  + Updates for thunderbolt plugin.
  + thunderbolt: Add special handling for safe mode on Dell systems
  + (gh#hughsie/fwupd#84).
  + synapticsmst: Iterate all nodes rather than hardcoding to 3.
  + synapticsmst: build GUID using dock type.
  + Add a new function fu_dell_supported to fu-dell-common.
  + synapticsmst: add a test suite.
  + synapticsmst: Fix up some trivial whitespace issues.
  + Fix a refcounting issue in the udev plugin.
- Add rpmlintrc untill security review is resolved</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 0.8.1:
  + Delete duplicate translations (gh#hughsie/fwupd#89).
  + Do not hardcode docbook2man path.
  + Fix fwupdmgr timeout with missing pending database.
  + Fix compiler warnings.
  + Fix a crash when enumerating devices on a Dell WLD15.
  + dell: don't initialize libsmbios on unsupported systems.
  + Do not fail to start on Dell hardware.
  + Adjust systemd confinement restrictions.
  + Do not dlclose modules when running under valgrind.
  + Really remove the NoNewPrivileges systemd confinement.
  + Release fwupd 0.8.1.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Update to version 0.9.7:
  + 10 months worth of bugfixing, integrating more vendor specific
    Firmware update paths.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 0.9.8:
  * Add a command 'clear-offline' to fwupdmgr
  * Do not fail to load the daemon if cached metadata is invalid
  * Fix a crash when using fu_plugin_device_add_delay()
  * Fix the libdfu self test failure on s390 and ppc64
  * Format the BCD USB revision numbers correctly
  * Never fallback to an offline update from client code
  * Prevent fwupd from mounting filesystems
  * dfu: Allow flashing when the target does not specify an
    alt-name
  * dfu: Do not try to verify the element write if upload is
    unsupported
  * dfu: Fix uploading large firmware files
  * dfu: Include the reset timeout as wValue to fix some hardware
  * dfu: Set the vendor ID to the runtime USB VID
  * dfu: Use 0x0101 as an alias for 0x0110
  * thunderbolt: move test for mock environment
    (gh#hughsie/fwupd#280)
  * udev: Do not match USB devices, even with a GUID set
  * uefi: Do not set the release version
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105601">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
</package>
<package pkgid="7fe79113a8f949113616df07f1da1f93bb18f5afd1d232f37cb1290bb50a8d45" name="dfu-tool" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="lp151.2.5.1"/>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 0.8.0:
  + Show a different error when checking for updates while on
  + battery power (gh#hughsie/fwupd#68).
  + Clarify the test in --help and man page related to offline
  + (gh#hughsie/fwupd#69).
  + libdfu: Use a heuristic for the start address if the firmware
  + has no DfuSe footer.
  + dell: Don't return the address of a stack variable.
  + dell: Fix a possibly-impossible-to-hit buffer overrun.
  + close USB devices before error returns (gh#hughsie/fwupd#73).
  + Make libelf support optional.
  + Always make sure we're getting a C99 compiler.
  + Fix redeclaration of polkit autocleanup functions.
  + Uncomment SystemdService parameter in the dbus service file
  + (gh#hughsie/fwupd#74).
  + Make all providers and plugins share a GUsbContext.
  + Unexport libebitdo.
  + Move the plugins into plugin-specific directories.
  + Convert the providers to plugins to simplify code and for
  + future features.
  + Add support for Logitech Unifying devices.
  + Add a set of vfuncs that are run before and after a device
  + update.
  + Return the pending UEFI update when not on AC power.
  + Move the UPower functionality to a plugin.
  + Fix udev plugin loading.
  + fix dfu plugin loading.
  + Disable PrivateNetwork on systemd service.
  + Use more restrictive settings when running under systemd.
  + dell: add a new method for forcing a controller to flash mode.
  + Add VerifyUpdate to update the device checksums server-side.
  + Move the Option ROM parsing to the Udev plugin.
  + Move the device add delay to shared code.
  + Add initial skeleton for Intel Thunderbolt support.
  + unifying: Use the actual bootloader VID/PIDs when in firmware
  + mode.
  + Allow the metadata to match a version of fwupd and the existing
  + fw version.
  + Add fwupd_result_get_device_version_bootloader().
  + Fix the appstream-glib version guards.
  + dell: Add coldplug methods to let other plugins turn on
  + TBT/GPIO.
  + libdfu: Don't read data from some DfuSe targets.
  + Add the ability to run a prepare-&gt;exec-&gt;cleanup on coldplug.
  + Allow plugins to request that all plugins re-coldplug.
  + thunderbolt: Detecting new devices and add an actual device to
  + the daemon.
  + Add support for flashing the ChaosKey.
  + thunderbolt: add some guards around empty arrays.
  + dell: Adjust the coldplug preparation and cleanup sequence.
  + dell: Fix possible linker problem.
  + Revert "thunderbolt: add some guards around empty arrays".
  + Add fu_plugin_set_coldplug_delay() to allow hardware to
  + initialize if required.
  + altos: Add error checking when using termios.
  + ebitdo: Subclass FuDevice like the altos plugin.
  + altos: Set the flags in the init_real so they work for the
  + cmdline tool.
  + unifying: Subclass FuDevice like the altos plugin.
  + Include all debug messages when run with --verbose.
  + dell: introduce a standalone (noinst) tool to force mode
  + flashes.
  + Introduce plugin for Synaptics MST hubs.
  + synapticsmst: Add cascade support.
  + Only register the D-Bus service when all devices have been
  + added.
  + synapticsmst: Refactor away the global state.
  + synapticsmst: fix cascade support in the plugin.
  + Updates for thunderbolt plugin.
  + thunderbolt: Add special handling for safe mode on Dell systems
  + (gh#hughsie/fwupd#84).
  + synapticsmst: Iterate all nodes rather than hardcoding to 3.
  + synapticsmst: build GUID using dock type.
  + Add a new function fu_dell_supported to fu-dell-common.
  + synapticsmst: add a test suite.
  + synapticsmst: Fix up some trivial whitespace issues.
  + Fix a refcounting issue in the udev plugin.
- Add rpmlintrc untill security review is resolved</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 0.8.1:
  + Delete duplicate translations (gh#hughsie/fwupd#89).
  + Do not hardcode docbook2man path.
  + Fix fwupdmgr timeout with missing pending database.
  + Fix compiler warnings.
  + Fix a crash when enumerating devices on a Dell WLD15.
  + dell: don't initialize libsmbios on unsupported systems.
  + Do not fail to start on Dell hardware.
  + Adjust systemd confinement restrictions.
  + Do not dlclose modules when running under valgrind.
  + Really remove the NoNewPrivileges systemd confinement.
  + Release fwupd 0.8.1.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Update to version 0.9.7:
  + 10 months worth of bugfixing, integrating more vendor specific
    Firmware update paths.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 0.9.8:
  * Add a command 'clear-offline' to fwupdmgr
  * Do not fail to load the daemon if cached metadata is invalid
  * Fix a crash when using fu_plugin_device_add_delay()
  * Fix the libdfu self test failure on s390 and ppc64
  * Format the BCD USB revision numbers correctly
  * Never fallback to an offline update from client code
  * Prevent fwupd from mounting filesystems
  * dfu: Allow flashing when the target does not specify an
    alt-name
  * dfu: Do not try to verify the element write if upload is
    unsupported
  * dfu: Fix uploading large firmware files
  * dfu: Include the reset timeout as wValue to fix some hardware
  * dfu: Set the vendor ID to the runtime USB VID
  * dfu: Use 0x0101 as an alias for 0x0110
  * thunderbolt: move test for mock environment
    (gh#hughsie/fwupd#280)
  * udev: Do not match USB devices, even with a GUID set
  * uefi: Do not set the release version
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105601">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
</package>
<package pkgid="38a3d8961f995249f5bc67958eed567aa6a3e49f9820a697ea8b1eceaa6c8412" name="dhcp" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="d1bb8fdc608d515f766fb88c937a06fd41eb2e7b957c14a6d62a23355a635c62" name="dhcp" arch="src">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="a6e3193d7967fd2c46b5132eb2af6f1a0925bc02996e41019af0c0cc4080a312" name="dhcp" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="ebb72f2e17448a9e591644a968de4fe467399fd265952b751c1585fd0d7959f1" name="dhcp-client" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="30b776deb7d345a50092cf8b6cfaafef5513ec20227751ad6abec7d20eee3196" name="dhcp-client" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="5b12fab459b34732cf204df0d2838e006d7c43c2c150bee529496704ca8409d8" name="dhcp-devel" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="ab9dc91a51d3322d1d65739e39f8d3a7be8f460da94080972cf5c953a38bae8b" name="dhcp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="e039c234bec197c63ed7e69b338a7cec43481c9b01fe0d36e931377a81b91c18" name="dhcp-doc" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="e2f30e04b2851068cba9704473bc04d58fad52557e203e0913015794e17b54c4" name="dhcp-doc" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="959d69f9c6572ba908fa1866f9e1dd4496ee1f30b51197a0dde3fb37ecac5624" name="dhcp-relay" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="39d417f9be976d0c3ceb9d58ac2f04b1d711831fd61ddc948c66d24dd7a018e9" name="dhcp-relay" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="46fe867a54b143e22c49d1c3561f1c6312f8b7e66ac96713cc043d3e857093b0" name="dhcp-server" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="f9b5fa831bddc4d9b2ddcc7d89c39877443e86388bce2b550fa8ff5f58c658bc" name="dhcp-server" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="e18c19e31535e45d306a02e9fa1579ef3763166b97ef2929dcb3f1b906b7880f" name="dia" arch="src">
  <version epoch="0" ver="0.97.3" rel="lp151.4.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322740800">- Add dia-glib-2.31.patch: Fix build with glib 2.31.</changelog>
  <changelog author="vuntz@opensuse.org" date="1325678400">- Update to version 0.97.2:
  + More colors for SADT.
  + Various bug fixes, including:
  - crashes
  - fixes to SVG, PNG and Xfig exports
  + Updated translations.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Drop dia-python-acinclude.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1345032000">- No longer move sr@Latn to sr@latin.</changelog>
  <changelog author="sbrabec@suse.cz" date="1348574400">- Add dia-libemf-64bit.patch: Fix 64-bit build with libEMF, which
  is now available on all platforms (bgo#675495).</changelog>
  <changelog author="dimstar@opensuse.org" date="1358596800">- Only run fdupes on %{_datadir} (where the duplicates are) and
  make hardlinks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1377345600">- Add dia-glib-2.35.patch: GLib drop support for adding interfaces
  after class_init.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387022400">- Added dia-use-recommended-freetype-include.patch: Freetype
  upstream recommends using their macros together with ft2build
  include. Positive sideeffect is that this patch makes it build
  with both freetype2 2.5.1, and older versions (bgo#720573).</changelog>
  <changelog author="mgorse@suse.com" date="1393416000">- Remove libgnomeui support. Libgnomeui is deprecated, and session
  management does not appear to be working well anyhow with GNOME 3.
- Remove help files from GNOME directories
- Add dia-enable-html-doc.patch -- always build html docs, as they
  are needed for online help. Ie, don't require --with-hardbooks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1410955200">- Update to version 0.97.3:
  + Fix double free with some SVG rendering (regression from Dia
    0.97.2).
  + Fixes to cope better with updated versions of Dia's
    dependencies:
  - don't crash at start-up with ABI breaking GLib 2-36.
  - don't assert in cairo 1.12 with invalid arc parameters.
  - avoid kerning problems (character overlap) for all Pango
    versions.
  - fix image files to be loadable by libpng16.
  + Backport fixes for some seldom crashes and other annoyances.
  + Updated translations.
- Drop upstream fixed patches:
  + dia-glib-2.31.patch.
  + dia-glib-2.35.patch.
  + dia-swig-2x.patch.
  + dia-use-recommended-freetype-include.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413720000">- Add dia.appdata.xml: allow DIA to show up as an application in
  gnome-software (installation will abort when upstream ships the
  file).
- Run spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428580800">- Add dia-intltool-0.51.patch: Fix installation of translations
  using intltool 0.51.</changelog>
  <changelog author="mgorse@suse.com" date="1432036800">- Build docs in the right place: pass --docdir=%{_docdir}/%{name}
  to configure (boo#931168).</changelog>
  <changelog author="zaitor@opensuse.org" date="1485000000">- Drop scrollkeeper BuildRequires: No longer needed.
- Stop packaging INSTALL in docs.</changelog>
  <changelog author="badshah400@gmail.com" date="1486123200">- Fix building with rpm &gt;= 4.13 by explicitly listing %{_docdir}
  files installed by make. Package the non-C lang documentation
  in the %{name}-lang package. The examples for all non-C locales
  are simply symlinks to the C locale example, so these need to
  be installed as part of the main package itself.
- Move man for fr locale into lang package (instead of main
  package).</changelog>
  <changelog author="badshah400@gmail.com" date="1486728000">- Make sure to own %{_docdir}/%{name} and lower directories
  individually by using %doc/%dir wherever appropriate.</changelog>
  <changelog author="badshah400@gmail.com" date="1487678400">- Avoid double inclusion of the contents of the directory
  %{_docdir}/%{name}, by removing it from the file-list for
  main package.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- spec-cleaned
- drop support for python plugin - depends on obsolete python-gtk package
- fix buildrequires
- enable png support</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1575374400">- Add dia-CVE-2019-19451.patch: Fix endless loop on filenames with
  invalid encoding (glgo#GNOME/dia#428 CVE-2019-19451 bsc#1158194).</changelog>
</package>
<package pkgid="3dd73683a3d2d280c79bf4290292726c4c94cca17ee8f397d29bd852bafd69be" name="dia" arch="x86_64">
  <version epoch="0" ver="0.97.3" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1410955200">- Update to version 0.97.3:
  + Fix double free with some SVG rendering (regression from Dia
    0.97.2).
  + Fixes to cope better with updated versions of Dia's
    dependencies:
  - don't crash at start-up with ABI breaking GLib 2-36.
  - don't assert in cairo 1.12 with invalid arc parameters.
  - avoid kerning problems (character overlap) for all Pango
    versions.
  - fix image files to be loadable by libpng16.
  + Backport fixes for some seldom crashes and other annoyances.
  + Updated translations.
- Drop upstream fixed patches:
  + dia-glib-2.31.patch.
  + dia-glib-2.35.patch.
  + dia-swig-2x.patch.
  + dia-use-recommended-freetype-include.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413720000">- Add dia.appdata.xml: allow DIA to show up as an application in
  gnome-software (installation will abort when upstream ships the
  file).
- Run spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428580800">- Add dia-intltool-0.51.patch: Fix installation of translations
  using intltool 0.51.</changelog>
  <changelog author="mgorse@suse.com" date="1432036800">- Build docs in the right place: pass --docdir=%{_docdir}/%{name}
  to configure (boo#931168).</changelog>
  <changelog author="zaitor@opensuse.org" date="1485000000">- Drop scrollkeeper BuildRequires: No longer needed.
- Stop packaging INSTALL in docs.</changelog>
  <changelog author="badshah400@gmail.com" date="1486123200">- Fix building with rpm &gt;= 4.13 by explicitly listing %{_docdir}
  files installed by make. Package the non-C lang documentation
  in the %{name}-lang package. The examples for all non-C locales
  are simply symlinks to the C locale example, so these need to
  be installed as part of the main package itself.
- Move man for fr locale into lang package (instead of main
  package).</changelog>
  <changelog author="badshah400@gmail.com" date="1486728000">- Make sure to own %{_docdir}/%{name} and lower directories
  individually by using %doc/%dir wherever appropriate.</changelog>
  <changelog author="badshah400@gmail.com" date="1487678400">- Avoid double inclusion of the contents of the directory
  %{_docdir}/%{name}, by removing it from the file-list for
  main package.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- spec-cleaned
- drop support for python plugin - depends on obsolete python-gtk package
- fix buildrequires
- enable png support</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1575374400">- Add dia-CVE-2019-19451.patch: Fix endless loop on filenames with
  invalid encoding (glgo#GNOME/dia#428 CVE-2019-19451 bsc#1158194).</changelog>
</package>
<package pkgid="68260869688a365e2d79a797588de256ce9993683cca80754815898719c1df48" name="dia-lang" arch="noarch">
  <version epoch="0" ver="0.97.3" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1410955200">- Update to version 0.97.3:
  + Fix double free with some SVG rendering (regression from Dia
    0.97.2).
  + Fixes to cope better with updated versions of Dia's
    dependencies:
  - don't crash at start-up with ABI breaking GLib 2-36.
  - don't assert in cairo 1.12 with invalid arc parameters.
  - avoid kerning problems (character overlap) for all Pango
    versions.
  - fix image files to be loadable by libpng16.
  + Backport fixes for some seldom crashes and other annoyances.
  + Updated translations.
- Drop upstream fixed patches:
  + dia-glib-2.31.patch.
  + dia-glib-2.35.patch.
  + dia-swig-2x.patch.
  + dia-use-recommended-freetype-include.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413720000">- Add dia.appdata.xml: allow DIA to show up as an application in
  gnome-software (installation will abort when upstream ships the
  file).
- Run spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428580800">- Add dia-intltool-0.51.patch: Fix installation of translations
  using intltool 0.51.</changelog>
  <changelog author="mgorse@suse.com" date="1432036800">- Build docs in the right place: pass --docdir=%{_docdir}/%{name}
  to configure (boo#931168).</changelog>
  <changelog author="zaitor@opensuse.org" date="1485000000">- Drop scrollkeeper BuildRequires: No longer needed.
- Stop packaging INSTALL in docs.</changelog>
  <changelog author="badshah400@gmail.com" date="1486123200">- Fix building with rpm &gt;= 4.13 by explicitly listing %{_docdir}
  files installed by make. Package the non-C lang documentation
  in the %{name}-lang package. The examples for all non-C locales
  are simply symlinks to the C locale example, so these need to
  be installed as part of the main package itself.
- Move man for fr locale into lang package (instead of main
  package).</changelog>
  <changelog author="badshah400@gmail.com" date="1486728000">- Make sure to own %{_docdir}/%{name} and lower directories
  individually by using %doc/%dir wherever appropriate.</changelog>
  <changelog author="badshah400@gmail.com" date="1487678400">- Avoid double inclusion of the contents of the directory
  %{_docdir}/%{name}, by removing it from the file-list for
  main package.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- spec-cleaned
- drop support for python plugin - depends on obsolete python-gtk package
- fix buildrequires
- enable png support</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1575374400">- Add dia-CVE-2019-19451.patch: Fix endless loop on filenames with
  invalid encoding (glgo#GNOME/dia#428 CVE-2019-19451 bsc#1158194).</changelog>
</package>
<package pkgid="95817bd864ba635bfe6744bc9baf06e36e2913833e26e3a1425fd222c8dd24d4" name="diffutils" arch="i586">
  <version epoch="0" ver="3.6" rel="lp151.4.3.1"/>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="ef3795969f6aaa3851955f06bc58e6495f9c8473dbd0b06a9f6eb732c9ee763b" name="diffutils" arch="src">
  <version epoch="0" ver="3.6" rel="lp151.4.3.1"/>
  <changelog author="pth@suse.de" date="1313236800">- Update to 3.1:
  + Bug fixes
  - diff no longer reports spurious differences merely because two
    entries in the same directory have names that compare equal in
    the current locale, or compare equal because --ignore-file-name-case
    was given.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="jslaby@suse.de" date="1330344000">- Update to 3.2:
  * diff: --ignore-file-name-case now applies at top level too
  * diff, sdiff: new option --ignore-trailing-space
  * maint: avoid new "make sytnax-check" failure</changelog>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="schwab@suse.de" date="1359806400">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jslaby@suse.com" date="1365163200">- Update to 3.3:
  * add --no-dereference
  * -N works with - (stdin) as input
  * many fixes
  * many cleanups (in docco too)
- remove: config-guess-sub-update.patch
- remove: diffutils-stdio.in.patch</changelog>
  <changelog author="meissner@suse.com" date="1365163201">- add gpg key checking, keyring from savannah</changelog>
  <changelog author="meissner@suse.com" date="1371816000">- disable gpg key checking to avoid build cycles. will be
  done by source service</changelog>
  <changelog author="pth@suse.de" date="1386331200">- Diffutils has a testsuite so run it.</changelog>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="505292c8bfdf58f1f7d20f52796819218f96eda7a35f5c8e34090da5df2bf25c" name="diffutils" arch="x86_64">
  <version epoch="0" ver="3.6" rel="lp151.4.3.1"/>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="00ed108e945775666e4a55d1810f702489246c6f198e0576ad6e2ee76788b99e" name="diffutils-lang" arch="noarch">
  <version epoch="0" ver="3.6" rel="lp151.4.3.1"/>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="71dc9c279ae3415ae610476fec1c355532489d215cc2f9fae6418fb13d6c0a83" name="ding-libs" arch="src">
  <version epoch="0" ver="0.6.1" rel="lp151.3.3.1"/>
  <changelog author="rhafer@novell.com" date="1289908800">- Initial release after spilt from sssd, based on upstream specfile</changelog>
  <changelog author="rhafer@novell.com" date="1290168000">- libref_array's license is LGPLv3+, the Headers in ref_array.c and
  ref_array.h were wrong. See:
  https://fedorahosted.org/pipermail/sssd-devel/2010-November/005107.html</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Implement baselibs config</changelog>
  <changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 0.1.3
  * Fixes a serious bug in libdhash with very large (&gt;1024 slots)
  initial size</changelog>
  <changelog author="jengelh@inai.de" date="1375963200">- Update to new upstream release 0.3.0.1
  * A new libini_config interface (merging config section,
  better handling of metadata)
- Optional signature verification
- Add 0001-build-add-missing-Requires-to-pkgconfig-file.patch
  for corrected pkgconfig dependencies</changelog>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1573128000">- Update to 0.6.1 from 0.6.0 (jsc#ECO-248):
  * libini now supports validators that check for well-formed INI
    files.
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
</package>
<package pkgid="9881bd665306d5eb78edec8097041c5d291bfb04ddadc83bb174b37897e227b5" name="djvulibre" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="df568366cd496086180127d5b0b935a65e1777173d9a95301b9e2e1a25f353c1" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="lmichnovic@suse.cz" date="1181131200">- renamed lib to libdjvulibre15 according to Shared Library
  Packaging Policy
- splitted of devel package
- fixed calling ldconfig in post scripts</changelog>
  <changelog author="lmichnovic@suse.cz" date="1181563200">- fixed djvulibre-devel's Requires with %{version}; [#282833]</changelog>
  <changelog author="lmichnovic@suse.cz" date="1184328000">- added trailing semicolon in desktop file (semicolon.patch)
- splitted off djview3 (Qt3) to make possible have alternative
  djview4 (Qt4) package</changelog>
  <changelog author="lmichnovic@suse.cz" date="1189425600">- moved desktop file to djview3 subpackage [#307485]</changelog>
  <changelog author="lmichnovic@suse.cz" date="1197288000">- update to version 3.5.20
  obsoletes semicolon.patch, strip.patch
  * Csepdjvu handle gsdjvu hyperlink comments.
  * Djvudigital therefore handles hyperlinks.</changelog>
  <changelog author="lmichnovic@suse.cz" date="1219665600">- update to version 3.5.21
  * Speed improvement on multicore platforms
  * Ddjvu now can produce pdf output.
- renamed lib to libdjvulibre21 according to Shared Library
  Packaging Policy</changelog>
  <changelog author="mseben@suse.cz" date="1244462400">- updated to version 3.5.22
  * backported djview4 version of nsdejavu.so
  * various bug fixes
- splitted to doc package</changelog>
  <changelog author="pgajdos@suse.cz" date="1289908800">- updated to version 3.5.23:
  * Added ddjvu_document_create_by_filename_utf8
  * Generate icons with rsvg rather than imagemagick.
  * djvused: correctly outputs escape characters.
  * djvumake: added options to generate foreground colors.
  * Various bug fixes.</changelog>
  <changelog author="pgajdos@suse.cz" date="1299499200">- updated to version 3.5.24:
  * Set ddjvuapi_version to 20.
  * Added ddjvuapi support for changing the white point.
  * Added option "-u" in djvused.
  * Added option "-o djvufile" in djvuxmlparser.
  * Added support for &lt;CHARACTER&gt; tag in djvuxmlparser.
  * Added print-xmp, set-xmp, remove-smp in djvused.</changelog>
  <changelog author="idoenmez@novell.com" date="1304337600">- Add djvulibre-3.5.23-gcc46.patch to fix compilation with gcc 4.6</changelog>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="32a68dc5418a2660ecbd6051d743b069531ddf90df1e5d64a2c724727c825109" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="6337ab1dd7f30c343bf81b5bb1081f250e8d93694f4fc4f9bb879e2d1f01d8a0" name="djvulibre" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="db3eda52a9d15b2aad79dd3f9a9411629d76647fb69e0f7e9c59418da9175f09" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="lmichnovic@suse.cz" date="1184328000">- added trailing semicolon in desktop file (semicolon.patch)
- splitted off djview3 (Qt3) to make possible have alternative
  djview4 (Qt4) package</changelog>
  <changelog author="lmichnovic@suse.cz" date="1189425600">- moved desktop file to djview3 subpackage [#307485]</changelog>
  <changelog author="lmichnovic@suse.cz" date="1197288000">- update to version 3.5.20
  obsoletes semicolon.patch, strip.patch
  * Csepdjvu handle gsdjvu hyperlink comments.
  * Djvudigital therefore handles hyperlinks.</changelog>
  <changelog author="lmichnovic@suse.cz" date="1219665600">- update to version 3.5.21
  * Speed improvement on multicore platforms
  * Ddjvu now can produce pdf output.
- renamed lib to libdjvulibre21 according to Shared Library
  Packaging Policy</changelog>
  <changelog author="mseben@suse.cz" date="1244462400">- updated to version 3.5.22
  * backported djview4 version of nsdejavu.so
  * various bug fixes
- splitted to doc package</changelog>
  <changelog author="pgajdos@suse.cz" date="1289908800">- updated to version 3.5.23:
  * Added ddjvu_document_create_by_filename_utf8
  * Generate icons with rsvg rather than imagemagick.
  * djvused: correctly outputs escape characters.
  * djvumake: added options to generate foreground colors.
  * Various bug fixes.</changelog>
  <changelog author="pgajdos@suse.cz" date="1299499200">- updated to version 3.5.24:
  * Set ddjvuapi_version to 20.
  * Added ddjvuapi support for changing the white point.
  * Added option "-u" in djvused.
  * Added option "-o djvufile" in djvuxmlparser.
  * Added support for &lt;CHARACTER&gt; tag in djvuxmlparser.
  * Added print-xmp, set-xmp, remove-smp in djvused.</changelog>
  <changelog author="idoenmez@novell.com" date="1304337600">- Add djvulibre-3.5.23-gcc46.patch to fix compilation with gcc 4.6</changelog>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="30781f177f87607277841a631ac780cfcf0bdc3448fababe4b130c7eb65b2ba9" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="e3708c302e5aa9530133de7306a21e9179eb5548fda1ea700d146b1f72734b15" name="djvulibre-doc" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="652347c27a97aba732b3f9aa9f256e7671ecf69671daabd2884add9aa6629f14" name="djvulibre-doc" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="d2884bb8f7edc5fbeba23823119b80fe79ae6888e1354de28fac790b4e1d97bd" name="djvulibre-doc" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="4ebbfb87767c9c60454a9cae87585967ab127049439ce1aed3acf5fc0457a37c" name="djvulibre-doc" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="3f2f10cd3c643bc73858af94947011e2c43bc9109de743dd9c138781211fb806" name="dkgpg" arch="src">
  <version epoch="0" ver="1.1.3" rel="lp151.3.3.1"/>
  <changelog author="kbabioch@suse.com" date="1516017600">- Initial packaging of version 1.0.4</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Update to version 1.0.5
  * added secure memory allocation from libgcrypt for some parts
  * dkg-verify: added options "-f" and "-t" for a validity period
  * added simple initalization procedure for memory locking
  * added basic check on signature strength in parse_signature()
  * added some basic checks on key strength in parse_public_key()
  * added check for revocation signatures in parse_public_key()
  * dkg-encrypt: added option "-z" for improved privacy (zero key ID)
  * dkg-verify: added validity checks on key and signature
  * dkg-keycheck: added ROCA vulnerability detector (Infineon RSALib)
  * added option "-U" for dkg-keysign (policy URI)
  * added option "-r" for dkg-keysign (revocation signature)
  * added option "-r" for dkg-keycheck (support for RSA keys)
  * added program dkg-keysign for creating certification signatures
  * dkg-decrypt: removed support for not integrity protected messages
  * dkg-keycheck: added test for small/same k in DSA signatures
  * dkg-refresh: added cache for very strong randomness
- Use https instead of http</changelog>
  <changelog author="jengelh@inai.de" date="1518264000">- Trim/compact long description for size, and wrap at 70 cols.</changelog>
  <changelog author="kbabioch@suse.com" date="1521633600">- Update to version 1.0.6:
  * dkg-keysign: added option "-k" (keyring with external keys)
  * dkg-encrypt: added option "-k" (keyring with external keys)
  * dkg-verify: added option "-k" (keyring with external keys)
  * dkg-keycheck: added option "-k" (keyring with external keys)
  * dkg-keycheck: added output of allowed external revocation keys
  * dkg-encrypt: added option "-s" to select appropriate subkey
  * dkg-encrypt: renamed option "-z" to "-t" for convenience
  * dkg-keysign: include only exportable signatures to output
  * check and set strict permissions (0600) for private key file
  * dkg-sign: added option "-U" (policy URI) and improved manpage
  * dkg-refresh: support generic verification and public key parsing
  * dkg-keysign: added options "-1" through "-3" (validation level)
  * dkg-keysign: added option "-u" (select user IDs) for CLT18
  * dkg-keysign: support generic verification and public key parsing
  * dkg-verify: support generic verification and public key parsing
  * dkg-encrypt: support generic encryption and public key parsing
  * dkg-generate: added no-modify key server preferences (0x80)
  * improved error handling for unrecognized OpenPGP (sub)packets
  * dkg-keycheck: changed semantics of option "-r" (reduce subkeys)
  * dkg-keycheck: uses new public-key block parser from LibTMCG
  * new default domain parameter set (CRS) due to LibTMCG changes
  * raised the requirement of libgcrypt version to &gt;= 1.7.0</changelog>
  <changelog author="kbabioch@suse.com" date="1531137600">- Update to 1.0.7:
  * Small improvments due to the new OpenPGP structures from libTMCG
  * "-k" option has been added to further programs
  * OpenPGP cleartext signatures can be generated with the "-t" option
  * Output of potentially malicious user IDs has been sanitized in
    dkg-keycheck, dkg-keyinfo, and dkg-keysign
- Applied spec-cleaner</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to version 1.0.8:
    First of all, passive support for ECDSA, ECDH, and EdDSA (cf. RFC 6637
    and Werner Koch's draft RFC 4880bis) has been added by relying on the
    most recent version of LibTMCG. The threshold signature scheme and the
    threshold encryption are still limited to finite field cryptography
    (i.e. DSA and ElGamal). Moreover, the programs generate and recognize
    a few other new OpenPGP features (e.g. issuer fingerprint subpackets)
    from RFC 4880bis. Compressed messages are now decompressed by the
    program dkg-decrypt using zlib Compression Library (and optionally by
    library routines from libbzip2). This completes DKGPG's compatibility
    with other OpenPGP software, however, the prefered compression algorithm
    (i.e. "no compression") in self-signatures of generated keys is kept
    for now. Support for symmetric-key decryption by dkg-decrypt has been
    added too. The program dkg-verify now reads the signature from a file,
    if option "-s" is used. To keep track of later protocol changes, all
    interactive programs include a version identifier in their common ID of
    the reliable broadcast channel. Thus programs from previous releases
    will not communicate with those of this release. With the new programs
    dkg-timestamp and dkg-timestamp-verify a OpenPGP timestamp signature
    can be generated and verified, respectively. Last but not least, by the
    new option "-y" some programs (dkg-generate, dkg-decrypt, dkg-sign,
    dkg-keysign, and dkg-timestamp) will work with regular OpenPGP keys too.
    The README file contains a configuration sample showing how to replace
    classic PGP by DKGPG in the famous mail user agent mutt based on this
    option. Please note that this feature is experimental and semantics
    may be changed later.
- Added new build requirements:
  * zlib
  * bzip2</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1542024000">- Update to version 1.0.9
    This release improves the possibilities of DKGPG further. With the new
    programs dkg-adduid and dkg-revuid an user ID can be added and revoked,
    respectively. The program dkg-revoke now supports a human-readable
    reason for revocation (by option "-R") and dkg-decrypt verifies an
    included signature according to a given key ring (option "-k"). Last
    but not least, by the program dkg-addrevoker an external revocation
    key can be specified.</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to version 1.1.0:
    This release supports Authenticated Encryption with Associated Data (AEAD)
    in accordance to RFC 4880bis (draft); this can be enforced with the new
    added option "-a" when  dkg-(d)encrypt is used. For using domain parameters,
    as described in RFC 7919, one should specify the new option "-r", when
    dkg-gencrs is used. Last, for key generation (dkg-generate) the timestamp
    option was added ( "--timestamping") which sets a key usage flag.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1556452800">- Update to version 1.1.1:
    Some small improvements have been applied for dkg-generate: Two new
    options ("-u" and "-N") allow providing the initial user ID and to
    disable the passphrase at command line. Moreover, since this release
    dkg-timestamp and dkg-timestamp-verify require a special key usage flag
    from recent RFC 4880bis draft to select so-called timestamping keys.
    Finally, the synchronization time of the internally used broadcast
    protocol was reduced to a more reasonable amount and in dkg-decrypt the
    detection of end of data for message and decryption shares was changed.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559476800">- Update to version 1.1.2:
    This release adds a lot of features to some programs: two new options
    ("-K" and "-f") allow dkg-keysign to read the certification key from a
    keyring instead of a single key block file. Moreover, with option "-a"
    an interactive confirmation by the user is required for each signature.
    Passive support of V5 keys (cf. draft RFC 4880bis) has been added for
    all programs, however, dkg-generate still generates V4 keys only,
    because this new feature of the draft is not widely spread. There is
    also a new encryption capability: an empty KEYSPEC tells dkg-encrypt to
    create a symmetric-key encrypted session key, i.e., the user has to
    supply a passphrase for encryption and decryption without any public-key
    cryptography involved. Last but not least, two bugs have been fixed:
    First, dkg-decrypt failed on many ZIP-compressed OpenPGP messages with
    "ZLIB ERROR: -3 invalid block type" due to a bug in decompression logic.
    Second, dkg-decrypt failed in a special case of symmetric-key encrypted
    session keys. Finally, the non-installing program dkg-fuzzer (generates
    fuzzy samples of somehow corrupted OpenPGP stuctures) has been added.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1563796800">- Update to version 1.1.3:
    This is a bugfix release that includes only three minor improvements: a
    direct-key signature (0x1f) for the primary key is added by default such
    that restricting key servers (e.g. keys.openpgp.org) can deliver a
    cryptographically checkable key without verification of any included
    user ID or without appended subkey. The command line interface of
    dkg-decrypt has been improved in order to give users an easy access to
    the symmetric-key decryption mode. An additional option ("-5") for
    dkg-sign allows to generate V5 signatures (cf. draft RFC 4880bis).</changelog>
</package>
<package pkgid="f92bf0e2754c07bc9b72fc0c08a4ab5d6cadd2b940a6f5546de452d4ebd4f01f" name="dkgpg" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="lp151.3.3.1"/>
  <changelog author="kbabioch@suse.com" date="1516017600">- Initial packaging of version 1.0.4</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Update to version 1.0.5
  * added secure memory allocation from libgcrypt for some parts
  * dkg-verify: added options "-f" and "-t" for a validity period
  * added simple initalization procedure for memory locking
  * added basic check on signature strength in parse_signature()
  * added some basic checks on key strength in parse_public_key()
  * added check for revocation signatures in parse_public_key()
  * dkg-encrypt: added option "-z" for improved privacy (zero key ID)
  * dkg-verify: added validity checks on key and signature
  * dkg-keycheck: added ROCA vulnerability detector (Infineon RSALib)
  * added option "-U" for dkg-keysign (policy URI)
  * added option "-r" for dkg-keysign (revocation signature)
  * added option "-r" for dkg-keycheck (support for RSA keys)
  * added program dkg-keysign for creating certification signatures
  * dkg-decrypt: removed support for not integrity protected messages
  * dkg-keycheck: added test for small/same k in DSA signatures
  * dkg-refresh: added cache for very strong randomness
- Use https instead of http</changelog>
  <changelog author="jengelh@inai.de" date="1518264000">- Trim/compact long description for size, and wrap at 70 cols.</changelog>
  <changelog author="kbabioch@suse.com" date="1521633600">- Update to version 1.0.6:
  * dkg-keysign: added option "-k" (keyring with external keys)
  * dkg-encrypt: added option "-k" (keyring with external keys)
  * dkg-verify: added option "-k" (keyring with external keys)
  * dkg-keycheck: added option "-k" (keyring with external keys)
  * dkg-keycheck: added output of allowed external revocation keys
  * dkg-encrypt: added option "-s" to select appropriate subkey
  * dkg-encrypt: renamed option "-z" to "-t" for convenience
  * dkg-keysign: include only exportable signatures to output
  * check and set strict permissions (0600) for private key file
  * dkg-sign: added option "-U" (policy URI) and improved manpage
  * dkg-refresh: support generic verification and public key parsing
  * dkg-keysign: added options "-1" through "-3" (validation level)
  * dkg-keysign: added option "-u" (select user IDs) for CLT18
  * dkg-keysign: support generic verification and public key parsing
  * dkg-verify: support generic verification and public key parsing
  * dkg-encrypt: support generic encryption and public key parsing
  * dkg-generate: added no-modify key server preferences (0x80)
  * improved error handling for unrecognized OpenPGP (sub)packets
  * dkg-keycheck: changed semantics of option "-r" (reduce subkeys)
  * dkg-keycheck: uses new public-key block parser from LibTMCG
  * new default domain parameter set (CRS) due to LibTMCG changes
  * raised the requirement of libgcrypt version to &gt;= 1.7.0</changelog>
  <changelog author="kbabioch@suse.com" date="1531137600">- Update to 1.0.7:
  * Small improvments due to the new OpenPGP structures from libTMCG
  * "-k" option has been added to further programs
  * OpenPGP cleartext signatures can be generated with the "-t" option
  * Output of potentially malicious user IDs has been sanitized in
    dkg-keycheck, dkg-keyinfo, and dkg-keysign
- Applied spec-cleaner</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to version 1.0.8:
    First of all, passive support for ECDSA, ECDH, and EdDSA (cf. RFC 6637
    and Werner Koch's draft RFC 4880bis) has been added by relying on the
    most recent version of LibTMCG. The threshold signature scheme and the
    threshold encryption are still limited to finite field cryptography
    (i.e. DSA and ElGamal). Moreover, the programs generate and recognize
    a few other new OpenPGP features (e.g. issuer fingerprint subpackets)
    from RFC 4880bis. Compressed messages are now decompressed by the
    program dkg-decrypt using zlib Compression Library (and optionally by
    library routines from libbzip2). This completes DKGPG's compatibility
    with other OpenPGP software, however, the prefered compression algorithm
    (i.e. "no compression") in self-signatures of generated keys is kept
    for now. Support for symmetric-key decryption by dkg-decrypt has been
    added too. The program dkg-verify now reads the signature from a file,
    if option "-s" is used. To keep track of later protocol changes, all
    interactive programs include a version identifier in their common ID of
    the reliable broadcast channel. Thus programs from previous releases
    will not communicate with those of this release. With the new programs
    dkg-timestamp and dkg-timestamp-verify a OpenPGP timestamp signature
    can be generated and verified, respectively. Last but not least, by the
    new option "-y" some programs (dkg-generate, dkg-decrypt, dkg-sign,
    dkg-keysign, and dkg-timestamp) will work with regular OpenPGP keys too.
    The README file contains a configuration sample showing how to replace
    classic PGP by DKGPG in the famous mail user agent mutt based on this
    option. Please note that this feature is experimental and semantics
    may be changed later.
- Added new build requirements:
  * zlib
  * bzip2</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1542024000">- Update to version 1.0.9
    This release improves the possibilities of DKGPG further. With the new
    programs dkg-adduid and dkg-revuid an user ID can be added and revoked,
    respectively. The program dkg-revoke now supports a human-readable
    reason for revocation (by option "-R") and dkg-decrypt verifies an
    included signature according to a given key ring (option "-k"). Last
    but not least, by the program dkg-addrevoker an external revocation
    key can be specified.</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to version 1.1.0:
    This release supports Authenticated Encryption with Associated Data (AEAD)
    in accordance to RFC 4880bis (draft); this can be enforced with the new
    added option "-a" when  dkg-(d)encrypt is used. For using domain parameters,
    as described in RFC 7919, one should specify the new option "-r", when
    dkg-gencrs is used. Last, for key generation (dkg-generate) the timestamp
    option was added ( "--timestamping") which sets a key usage flag.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1556452800">- Update to version 1.1.1:
    Some small improvements have been applied for dkg-generate: Two new
    options ("-u" and "-N") allow providing the initial user ID and to
    disable the passphrase at command line. Moreover, since this release
    dkg-timestamp and dkg-timestamp-verify require a special key usage flag
    from recent RFC 4880bis draft to select so-called timestamping keys.
    Finally, the synchronization time of the internally used broadcast
    protocol was reduced to a more reasonable amount and in dkg-decrypt the
    detection of end of data for message and decryption shares was changed.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559476800">- Update to version 1.1.2:
    This release adds a lot of features to some programs: two new options
    ("-K" and "-f") allow dkg-keysign to read the certification key from a
    keyring instead of a single key block file. Moreover, with option "-a"
    an interactive confirmation by the user is required for each signature.
    Passive support of V5 keys (cf. draft RFC 4880bis) has been added for
    all programs, however, dkg-generate still generates V4 keys only,
    because this new feature of the draft is not widely spread. There is
    also a new encryption capability: an empty KEYSPEC tells dkg-encrypt to
    create a symmetric-key encrypted session key, i.e., the user has to
    supply a passphrase for encryption and decryption without any public-key
    cryptography involved. Last but not least, two bugs have been fixed:
    First, dkg-decrypt failed on many ZIP-compressed OpenPGP messages with
    "ZLIB ERROR: -3 invalid block type" due to a bug in decompression logic.
    Second, dkg-decrypt failed in a special case of symmetric-key encrypted
    session keys. Finally, the non-installing program dkg-fuzzer (generates
    fuzzy samples of somehow corrupted OpenPGP stuctures) has been added.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1563796800">- Update to version 1.1.3:
    This is a bugfix release that includes only three minor improvements: a
    direct-key signature (0x1f) for the primary key is added by default such
    that restricting key servers (e.g. keys.openpgp.org) can deliver a
    cryptographically checkable key without verification of any included
    user ID or without appended subkey. The command line interface of
    dkg-decrypt has been improved in order to give users an easy access to
    the symmetric-key decryption mode. An additional option ("-5") for
    dkg-sign allows to generate V5 signatures (cf. draft RFC 4880bis).</changelog>
</package>
<package pkgid="eb8ff0198619245c36ae8a6be85374d52d21ae647a828cd0d3b0ba43fc32f6b6" name="dmidecode" arch="i586">
  <version epoch="0" ver="3.2" rel="lp151.4.3.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
</package>
<package pkgid="2546e3f5de65c21c58feb8bb11725c5887716eaa797275139ab59b7aadfa3fe5" name="dmidecode" arch="src">
  <version epoch="0" ver="3.2" rel="lp151.4.3.1"/>
  <changelog author="jdelvare@suse.de" date="1302696000">- dmidecode-add-SMBIOS-2_7_1-support.patch: Add enumerated values
  from SMBIOS 2.7.1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jdelvare@suse.de" date="1366804800">- Update to upstream version 2.12:
  * Adds support for SMBIOS 2.8. This includes new enumerated
    values for recent hardware.
  * Obsoletes dmidecode-add-SMBIOS-2_7_1-support.patch and
    dmidecode-fix-memory-array-location-overrun.patch.
  * Various minor fixes and clean-ups.
- dmidecode-1.173-drop-cast.patch: Drop unneeded and possibly
  dangerous cast.
- dmidecode-1.175-fix-SMBIOS-2.8.0.patch: Fix support for new
  processor upgrade types (DMI type 4) and new memory device type
  (DMI type 17.)</changelog>
  <changelog author="guillaume@opensuse.org" date="1366977600">- Enable build for ARM</changelog>
  <changelog author="jdelvare@suse.de" date="1389614400">- dmidecode-1.176-SMBIOS-2.8-is-supported.patch: Bump
  SUPPORTED_SMBIOS_VER so that SMBIOS 2.8 implementations don't
  trigger a warning.
- dmidecode-1.177-decode-pcie3-slot-id.patch: Decode ID of PCI
  Express 3 slots (DMI type 9.)
  https://savannah.nongnu.org/bugs/?40178</changelog>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
</package>
<package pkgid="4b2d6a0971e5a689d4b3d88a5abaeb98f627ce70009eda5e3227b85839e7ec06" name="dmidecode" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp151.4.3.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
</package>
<package pkgid="fe27dc42ed59f0dbf542843c345b420a427a9d52aa45421e6b227f19e8689e5d" name="dmidecode" arch="i586">
  <version epoch="0" ver="3.2" rel="lp151.4.6.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
</package>
<package pkgid="bfdb70b354300cd4e41b3278db571455316e66a48b527f7860dc3c34d7a5e5a5" name="dmidecode" arch="src">
  <version epoch="0" ver="3.2" rel="lp151.4.6.1"/>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jdelvare@suse.de" date="1366804800">- Update to upstream version 2.12:
  * Adds support for SMBIOS 2.8. This includes new enumerated
    values for recent hardware.
  * Obsoletes dmidecode-add-SMBIOS-2_7_1-support.patch and
    dmidecode-fix-memory-array-location-overrun.patch.
  * Various minor fixes and clean-ups.
- dmidecode-1.173-drop-cast.patch: Drop unneeded and possibly
  dangerous cast.
- dmidecode-1.175-fix-SMBIOS-2.8.0.patch: Fix support for new
  processor upgrade types (DMI type 4) and new memory device type
  (DMI type 17.)</changelog>
  <changelog author="guillaume@opensuse.org" date="1366977600">- Enable build for ARM</changelog>
  <changelog author="jdelvare@suse.de" date="1389614400">- dmidecode-1.176-SMBIOS-2.8-is-supported.patch: Bump
  SUPPORTED_SMBIOS_VER so that SMBIOS 2.8 implementations don't
  trigger a warning.
- dmidecode-1.177-decode-pcie3-slot-id.patch: Decode ID of PCI
  Express 3 slots (DMI type 9.)
  https://savannah.nongnu.org/bugs/?40178</changelog>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
</package>
<package pkgid="df9d3772c2cfb7edb610bea162b671260f3e895622a2dd29d2fe94a5ca915859" name="dmidecode" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp151.4.6.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
</package>
<package pkgid="76c57ad2a9d004a76a32f3cae0928a962627a03fefd01715476f01fde5b1f1c7" name="dnf-plugins-core" arch="noarch">
  <version epoch="0" ver="4.0.7" rel="lp151.3.3.1"/>
  <changelog author="ngompa13@gmail.com" date="1502625600">- Initial package based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1507636800">- Update to version 2.1.5:
  + Fix issues with the '--arch' in 'dnf download' (rh#1476834)
  + Fix 'dnf repoclosure' when used with '--check' and '--best'
  + Use preconfigure hook from DNF for 'local' plugin
- Split lang data into lang subpackage</changelog>
  <changelog author="ngompa13@gmail.com" date="1516449600">- Fix build-time detection of Python 2
  * Add patch: dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1524484800">- Enable COPR plugin with openSUSE support backported (rh#1570418)
  * Add patch: 0001-copr-Add-openSUSE-support.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549540800">- Rebase to version 4.0.3:
  + Compatible with DNF 4.0.0+
  + Reworked COPR plugin
  + New changelogs and repodiff plugins/subcommands
- Drop Python 2 subpackages
- Drop unneeded patches:
  * 0001-copr-Add-openSUSE-support.patch
  * dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch
- Backport fixes from upstream to build and run plugins
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549886400">- Temporarily drop needs-restarting files from dnf-utils until
  zypper splits them out into zypper-needs-restarting subpackage
  (gh#openSUSE/zypper#254)
- Add conflicts to yum-changelog and zypper-needs-restarting to
  dnf-utils</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Update to version 4.0.6
  + [download] Do not download src without ``--source`` (rh#1666648)
  + Use improved config parser that preserves order of data
  + [leaves] Show multiply satisfied dependencies as leaves
  + [download] Fix downloading an rpm from a URL (rh#1678582)
  + [download] Fix problem with downloading src pkgs (rh#1649627)
- Drop backported fixes that are part of this release
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch
- Restore needs-restarting files to the dnf-utils package
- Add conflicts to zypper &lt; 1.14.26 to dnf-utils package to prevent file conflicts</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556280000">- Backport fix for copr disable command traceback (rh#1693551)
  * Patch: 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
- Backport doc fix to state repoid as repo identifier for config-manager (rh#1686779)
  * Patch: 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Update to version 4.0.7
  + Fix: copr disable command traceback (rh#1693551)
  + [doc] state repoid as repo identifier of config-manager (rh#1686779)
  + Fix download of src when not the latest requested (rh#1649627)
- Add missing dependencies on dateutil and distro Python modules (boo#1141374)
- Drop backported fixes that are part of this release
  * 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
  * 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
</package>
<package pkgid="b032f61a624231c7b3f3dbf9899eb284675454a470621727eedc7388b55e36d5" name="dnf-plugins-core" arch="src">
  <version epoch="0" ver="4.0.7" rel="lp151.3.3.1"/>
  <changelog author="ngompa13@gmail.com" date="1502625600">- Initial package based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1507636800">- Update to version 2.1.5:
  + Fix issues with the '--arch' in 'dnf download' (rh#1476834)
  + Fix 'dnf repoclosure' when used with '--check' and '--best'
  + Use preconfigure hook from DNF for 'local' plugin
- Split lang data into lang subpackage</changelog>
  <changelog author="ngompa13@gmail.com" date="1516449600">- Fix build-time detection of Python 2
  * Add patch: dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1524484800">- Enable COPR plugin with openSUSE support backported (rh#1570418)
  * Add patch: 0001-copr-Add-openSUSE-support.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549540800">- Rebase to version 4.0.3:
  + Compatible with DNF 4.0.0+
  + Reworked COPR plugin
  + New changelogs and repodiff plugins/subcommands
- Drop Python 2 subpackages
- Drop unneeded patches:
  * 0001-copr-Add-openSUSE-support.patch
  * dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch
- Backport fixes from upstream to build and run plugins
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549886400">- Temporarily drop needs-restarting files from dnf-utils until
  zypper splits them out into zypper-needs-restarting subpackage
  (gh#openSUSE/zypper#254)
- Add conflicts to yum-changelog and zypper-needs-restarting to
  dnf-utils</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Update to version 4.0.6
  + [download] Do not download src without ``--source`` (rh#1666648)
  + Use improved config parser that preserves order of data
  + [leaves] Show multiply satisfied dependencies as leaves
  + [download] Fix downloading an rpm from a URL (rh#1678582)
  + [download] Fix problem with downloading src pkgs (rh#1649627)
- Drop backported fixes that are part of this release
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch
- Restore needs-restarting files to the dnf-utils package
- Add conflicts to zypper &lt; 1.14.26 to dnf-utils package to prevent file conflicts</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556280000">- Backport fix for copr disable command traceback (rh#1693551)
  * Patch: 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
- Backport doc fix to state repoid as repo identifier for config-manager (rh#1686779)
  * Patch: 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Update to version 4.0.7
  + Fix: copr disable command traceback (rh#1693551)
  + [doc] state repoid as repo identifier of config-manager (rh#1686779)
  + Fix download of src when not the latest requested (rh#1649627)
- Add missing dependencies on dateutil and distro Python modules (boo#1141374)
- Drop backported fixes that are part of this release
  * 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
  * 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
</package>
<package pkgid="c95304495f05e19542ce1c4d4803b20db02b1072fb5aa4ed79de6b17d67ae759" name="dnf-plugins-core" arch="noarch">
  <version epoch="0" ver="4.0.7" rel="lp151.3.6.1"/>
  <changelog author="ngompa13@gmail.com" date="1502625600">- Initial package based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1507636800">- Update to version 2.1.5:
  + Fix issues with the '--arch' in 'dnf download' (rh#1476834)
  + Fix 'dnf repoclosure' when used with '--check' and '--best'
  + Use preconfigure hook from DNF for 'local' plugin
- Split lang data into lang subpackage</changelog>
  <changelog author="ngompa13@gmail.com" date="1516449600">- Fix build-time detection of Python 2
  * Add patch: dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1524484800">- Enable COPR plugin with openSUSE support backported (rh#1570418)
  * Add patch: 0001-copr-Add-openSUSE-support.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549540800">- Rebase to version 4.0.3:
  + Compatible with DNF 4.0.0+
  + Reworked COPR plugin
  + New changelogs and repodiff plugins/subcommands
- Drop Python 2 subpackages
- Drop unneeded patches:
  * 0001-copr-Add-openSUSE-support.patch
  * dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch
- Backport fixes from upstream to build and run plugins
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549886400">- Temporarily drop needs-restarting files from dnf-utils until
  zypper splits them out into zypper-needs-restarting subpackage
  (gh#openSUSE/zypper#254)
- Add conflicts to yum-changelog and zypper-needs-restarting to
  dnf-utils</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Update to version 4.0.6
  + [download] Do not download src without ``--source`` (rh#1666648)
  + Use improved config parser that preserves order of data
  + [leaves] Show multiply satisfied dependencies as leaves
  + [download] Fix downloading an rpm from a URL (rh#1678582)
  + [download] Fix problem with downloading src pkgs (rh#1649627)
- Drop backported fixes that are part of this release
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch
- Restore needs-restarting files to the dnf-utils package
- Add conflicts to zypper &lt; 1.14.26 to dnf-utils package to prevent file conflicts</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556280000">- Backport fix for copr disable command traceback (rh#1693551)
  * Patch: 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
- Backport doc fix to state repoid as repo identifier for config-manager (rh#1686779)
  * Patch: 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Update to version 4.0.7
  + Fix: copr disable command traceback (rh#1693551)
  + [doc] state repoid as repo identifier of config-manager (rh#1686779)
  + Fix download of src when not the latest requested (rh#1649627)
- Add missing dependencies on dateutil and distro Python modules (boo#1141374)
- Drop backported fixes that are part of this release
  * 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
  * 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Deconflict with zypper-needs-restarting on SLE to unblock PackageHub updates</changelog>
</package>
<package pkgid="1fc93123ea003df47bdd7407f6c92b0c7ef8fa7aaa5a1c147243532716f55c36" name="dnf-plugins-core" arch="src">
  <version epoch="0" ver="4.0.7" rel="lp151.3.6.1"/>
  <changelog author="ngompa13@gmail.com" date="1502625600">- Initial package based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1507636800">- Update to version 2.1.5:
  + Fix issues with the '--arch' in 'dnf download' (rh#1476834)
  + Fix 'dnf repoclosure' when used with '--check' and '--best'
  + Use preconfigure hook from DNF for 'local' plugin
- Split lang data into lang subpackage</changelog>
  <changelog author="ngompa13@gmail.com" date="1516449600">- Fix build-time detection of Python 2
  * Add patch: dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1524484800">- Enable COPR plugin with openSUSE support backported (rh#1570418)
  * Add patch: 0001-copr-Add-openSUSE-support.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549540800">- Rebase to version 4.0.3:
  + Compatible with DNF 4.0.0+
  + Reworked COPR plugin
  + New changelogs and repodiff plugins/subcommands
- Drop Python 2 subpackages
- Drop unneeded patches:
  * 0001-copr-Add-openSUSE-support.patch
  * dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch
- Backport fixes from upstream to build and run plugins
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549886400">- Temporarily drop needs-restarting files from dnf-utils until
  zypper splits them out into zypper-needs-restarting subpackage
  (gh#openSUSE/zypper#254)
- Add conflicts to yum-changelog and zypper-needs-restarting to
  dnf-utils</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Update to version 4.0.6
  + [download] Do not download src without ``--source`` (rh#1666648)
  + Use improved config parser that preserves order of data
  + [leaves] Show multiply satisfied dependencies as leaves
  + [download] Fix downloading an rpm from a URL (rh#1678582)
  + [download] Fix problem with downloading src pkgs (rh#1649627)
- Drop backported fixes that are part of this release
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch
- Restore needs-restarting files to the dnf-utils package
- Add conflicts to zypper &lt; 1.14.26 to dnf-utils package to prevent file conflicts</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556280000">- Backport fix for copr disable command traceback (rh#1693551)
  * Patch: 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
- Backport doc fix to state repoid as repo identifier for config-manager (rh#1686779)
  * Patch: 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Update to version 4.0.7
  + Fix: copr disable command traceback (rh#1693551)
  + [doc] state repoid as repo identifier of config-manager (rh#1686779)
  + Fix download of src when not the latest requested (rh#1649627)
- Add missing dependencies on dateutil and distro Python modules (boo#1141374)
- Drop backported fixes that are part of this release
  * 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
  * 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Deconflict with zypper-needs-restarting on SLE to unblock PackageHub updates</changelog>
</package>
<package pkgid="2b75173193118790f4c5960f6247e4d943933442ae56237c5e560e6b1b92430f" name="dnf-plugins-core-lang" arch="noarch">
  <version epoch="0" ver="4.0.7" rel="lp151.3.3.1"/>
  <changelog author="ngompa13@gmail.com" date="1502625600">- Initial package based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1507636800">- Update to version 2.1.5:
  + Fix issues with the '--arch' in 'dnf download' (rh#1476834)
  + Fix 'dnf repoclosure' when used with '--check' and '--best'
  + Use preconfigure hook from DNF for 'local' plugin
- Split lang data into lang subpackage</changelog>
  <changelog author="ngompa13@gmail.com" date="1516449600">- Fix build-time detection of Python 2
  * Add patch: dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1524484800">- Enable COPR plugin with openSUSE support backported (rh#1570418)
  * Add patch: 0001-copr-Add-openSUSE-support.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549540800">- Rebase to version 4.0.3:
  + Compatible with DNF 4.0.0+
  + Reworked COPR plugin
  + New changelogs and repodiff plugins/subcommands
- Drop Python 2 subpackages
- Drop unneeded patches:
  * 0001-copr-Add-openSUSE-support.patch
  * dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch
- Backport fixes from upstream to build and run plugins
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549886400">- Temporarily drop needs-restarting files from dnf-utils until
  zypper splits them out into zypper-needs-restarting subpackage
  (gh#openSUSE/zypper#254)
- Add conflicts to yum-changelog and zypper-needs-restarting to
  dnf-utils</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Update to version 4.0.6
  + [download] Do not download src without ``--source`` (rh#1666648)
  + Use improved config parser that preserves order of data
  + [leaves] Show multiply satisfied dependencies as leaves
  + [download] Fix downloading an rpm from a URL (rh#1678582)
  + [download] Fix problem with downloading src pkgs (rh#1649627)
- Drop backported fixes that are part of this release
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch
- Restore needs-restarting files to the dnf-utils package
- Add conflicts to zypper &lt; 1.14.26 to dnf-utils package to prevent file conflicts</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556280000">- Backport fix for copr disable command traceback (rh#1693551)
  * Patch: 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
- Backport doc fix to state repoid as repo identifier for config-manager (rh#1686779)
  * Patch: 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Update to version 4.0.7
  + Fix: copr disable command traceback (rh#1693551)
  + [doc] state repoid as repo identifier of config-manager (rh#1686779)
  + Fix download of src when not the latest requested (rh#1649627)
- Add missing dependencies on dateutil and distro Python modules (boo#1141374)
- Drop backported fixes that are part of this release
  * 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
  * 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
</package>
<package pkgid="6263c59a01809462c11c5be8897e777c2ab860f5e650624da1d785271cf35055" name="dnf-plugins-core-lang" arch="noarch">
  <version epoch="0" ver="4.0.7" rel="lp151.3.6.1"/>
  <changelog author="ngompa13@gmail.com" date="1502625600">- Initial package based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1507636800">- Update to version 2.1.5:
  + Fix issues with the '--arch' in 'dnf download' (rh#1476834)
  + Fix 'dnf repoclosure' when used with '--check' and '--best'
  + Use preconfigure hook from DNF for 'local' plugin
- Split lang data into lang subpackage</changelog>
  <changelog author="ngompa13@gmail.com" date="1516449600">- Fix build-time detection of Python 2
  * Add patch: dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1524484800">- Enable COPR plugin with openSUSE support backported (rh#1570418)
  * Add patch: 0001-copr-Add-openSUSE-support.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549540800">- Rebase to version 4.0.3:
  + Compatible with DNF 4.0.0+
  + Reworked COPR plugin
  + New changelogs and repodiff plugins/subcommands
- Drop Python 2 subpackages
- Drop unneeded patches:
  * 0001-copr-Add-openSUSE-support.patch
  * dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch
- Backport fixes from upstream to build and run plugins
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549886400">- Temporarily drop needs-restarting files from dnf-utils until
  zypper splits them out into zypper-needs-restarting subpackage
  (gh#openSUSE/zypper#254)
- Add conflicts to yum-changelog and zypper-needs-restarting to
  dnf-utils</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Update to version 4.0.6
  + [download] Do not download src without ``--source`` (rh#1666648)
  + Use improved config parser that preserves order of data
  + [leaves] Show multiply satisfied dependencies as leaves
  + [download] Fix downloading an rpm from a URL (rh#1678582)
  + [download] Fix problem with downloading src pkgs (rh#1649627)
- Drop backported fixes that are part of this release
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch
- Restore needs-restarting files to the dnf-utils package
- Add conflicts to zypper &lt; 1.14.26 to dnf-utils package to prevent file conflicts</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556280000">- Backport fix for copr disable command traceback (rh#1693551)
  * Patch: 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
- Backport doc fix to state repoid as repo identifier for config-manager (rh#1686779)
  * Patch: 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Update to version 4.0.7
  + Fix: copr disable command traceback (rh#1693551)
  + [doc] state repoid as repo identifier of config-manager (rh#1686779)
  + Fix download of src when not the latest requested (rh#1649627)
- Add missing dependencies on dateutil and distro Python modules (boo#1141374)
- Drop backported fixes that are part of this release
  * 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
  * 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Deconflict with zypper-needs-restarting on SLE to unblock PackageHub updates</changelog>
</package>
<package pkgid="ccf8ddc0ec6d0c5d7379b3550f8d501296f3eb4df3163281da4fac312a965ad7" name="dnf-utils" arch="noarch">
  <version epoch="0" ver="4.0.7" rel="lp151.3.3.1"/>
  <changelog author="ngompa13@gmail.com" date="1502625600">- Initial package based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1507636800">- Update to version 2.1.5:
  + Fix issues with the '--arch' in 'dnf download' (rh#1476834)
  + Fix 'dnf repoclosure' when used with '--check' and '--best'
  + Use preconfigure hook from DNF for 'local' plugin
- Split lang data into lang subpackage</changelog>
  <changelog author="ngompa13@gmail.com" date="1516449600">- Fix build-time detection of Python 2
  * Add patch: dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1524484800">- Enable COPR plugin with openSUSE support backported (rh#1570418)
  * Add patch: 0001-copr-Add-openSUSE-support.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549540800">- Rebase to version 4.0.3:
  + Compatible with DNF 4.0.0+
  + Reworked COPR plugin
  + New changelogs and repodiff plugins/subcommands
- Drop Python 2 subpackages
- Drop unneeded patches:
  * 0001-copr-Add-openSUSE-support.patch
  * dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch
- Backport fixes from upstream to build and run plugins
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549886400">- Temporarily drop needs-restarting files from dnf-utils until
  zypper splits them out into zypper-needs-restarting subpackage
  (gh#openSUSE/zypper#254)
- Add conflicts to yum-changelog and zypper-needs-restarting to
  dnf-utils</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Update to version 4.0.6
  + [download] Do not download src without ``--source`` (rh#1666648)
  + Use improved config parser that preserves order of data
  + [leaves] Show multiply satisfied dependencies as leaves
  + [download] Fix downloading an rpm from a URL (rh#1678582)
  + [download] Fix problem with downloading src pkgs (rh#1649627)
- Drop backported fixes that are part of this release
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch
- Restore needs-restarting files to the dnf-utils package
- Add conflicts to zypper &lt; 1.14.26 to dnf-utils package to prevent file conflicts</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556280000">- Backport fix for copr disable command traceback (rh#1693551)
  * Patch: 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
- Backport doc fix to state repoid as repo identifier for config-manager (rh#1686779)
  * Patch: 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Update to version 4.0.7
  + Fix: copr disable command traceback (rh#1693551)
  + [doc] state repoid as repo identifier of config-manager (rh#1686779)
  + Fix download of src when not the latest requested (rh#1649627)
- Add missing dependencies on dateutil and distro Python modules (boo#1141374)
- Drop backported fixes that are part of this release
  * 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
  * 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
</package>
<package pkgid="41e69cbc06f6bfec63b6e6a3ecf4ba05e8d9d64e6d876cf6991e122517577e3c" name="dnf-utils" arch="noarch">
  <version epoch="0" ver="4.0.7" rel="lp151.3.6.1"/>
  <changelog author="ngompa13@gmail.com" date="1502625600">- Initial package based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1507636800">- Update to version 2.1.5:
  + Fix issues with the '--arch' in 'dnf download' (rh#1476834)
  + Fix 'dnf repoclosure' when used with '--check' and '--best'
  + Use preconfigure hook from DNF for 'local' plugin
- Split lang data into lang subpackage</changelog>
  <changelog author="ngompa13@gmail.com" date="1516449600">- Fix build-time detection of Python 2
  * Add patch: dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1524484800">- Enable COPR plugin with openSUSE support backported (rh#1570418)
  * Add patch: 0001-copr-Add-openSUSE-support.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549540800">- Rebase to version 4.0.3:
  + Compatible with DNF 4.0.0+
  + Reworked COPR plugin
  + New changelogs and repodiff plugins/subcommands
- Drop Python 2 subpackages
- Drop unneeded patches:
  * 0001-copr-Add-openSUSE-support.patch
  * dnf-plugins-core-2.1.5-Fix-detection-of-Python-2.patch
- Backport fixes from upstream to build and run plugins
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549886400">- Temporarily drop needs-restarting files from dnf-utils until
  zypper splits them out into zypper-needs-restarting subpackage
  (gh#openSUSE/zypper#254)
- Add conflicts to yum-changelog and zypper-needs-restarting to
  dnf-utils</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Update to version 4.0.6
  + [download] Do not download src without ``--source`` (rh#1666648)
  + Use improved config parser that preserves order of data
  + [leaves] Show multiply satisfied dependencies as leaves
  + [download] Fix downloading an rpm from a URL (rh#1678582)
  + [download] Fix problem with downloading src pkgs (rh#1649627)
- Drop backported fixes that are part of this release
  * 0001-Fix-traceback-when-local-rpm-url-is-passed.patch
  * 0002-reposync-fix-up-path-traversal-prevention.patch
  * 0003-doc-Use-the-correct-sphinx-build-binary-for-Python-2.patch
- Restore needs-restarting files to the dnf-utils package
- Add conflicts to zypper &lt; 1.14.26 to dnf-utils package to prevent file conflicts</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556280000">- Backport fix for copr disable command traceback (rh#1693551)
  * Patch: 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
- Backport doc fix to state repoid as repo identifier for config-manager (rh#1686779)
  * Patch: 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Update to version 4.0.7
  + Fix: copr disable command traceback (rh#1693551)
  + [doc] state repoid as repo identifier of config-manager (rh#1686779)
  + Fix download of src when not the latest requested (rh#1649627)
- Add missing dependencies on dateutil and distro Python modules (boo#1141374)
- Drop backported fixes that are part of this release
  * 0001-Fix-copr-disable-command-traceback-RhBug-1693551.patch
  * 0002-doc-state-repoid-as-repo-identifier-of-config-manage.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Deconflict with zypper-needs-restarting on SLE to unblock PackageHub updates</changelog>
</package>
<package pkgid="78dbb6945a4bba9ec1e0e88ce4ef4580f43647e89a2c979ac0fa052110dea6f4" name="dnsmasq" arch="i586">
  <version epoch="0" ver="2.78" rel="lp151.5.3.1"/>
  <changelog author="nemysis@gmx.ch" date="1419508800">- Remove from spec group_and_isc.patch, forgotten in previous commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1419854400">- Fix symlink of rcFOO to /usr/sbin/service, resolving a dangling
  symlink lint warning (and remove the same from rpmlintrc).</changelog>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
</package>
<package pkgid="d44819c6277fe2f7f877561b874a0357a4785921264de201ef5dcbe2582c5661" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.78" rel="lp151.5.3.1"/>
  <changelog author="nemysis@gmx.ch" date="1419508800">- Remove from spec group_and_isc.patch, forgotten in previous commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1419854400">- Fix symlink of rcFOO to /usr/sbin/service, resolving a dangling
  symlink lint warning (and remove the same from rpmlintrc).</changelog>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
</package>
<package pkgid="480bfe6bf4d74dead465bd7099ade8e7b4d7ac9497c9d34d9144eba3b92dd29b" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.78" rel="lp151.5.3.1"/>
  <changelog author="nemysis@gmx.ch" date="1419508800">- Remove from spec group_and_isc.patch, forgotten in previous commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1419854400">- Fix symlink of rcFOO to /usr/sbin/service, resolving a dangling
  symlink lint warning (and remove the same from rpmlintrc).</changelog>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
</package>
<package pkgid="1f59052ac2defc7cc0d46a4f91b881c72b4d32046771cbebc1c5260f5be5bc41" name="dnsmasq-utils" arch="i586">
  <version epoch="0" ver="2.78" rel="lp151.5.3.1"/>
  <changelog author="nemysis@gmx.ch" date="1419508800">- Remove from spec group_and_isc.patch, forgotten in previous commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1419854400">- Fix symlink of rcFOO to /usr/sbin/service, resolving a dangling
  symlink lint warning (and remove the same from rpmlintrc).</changelog>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
</package>
<package pkgid="4d031638bf74ee6e0629f703680d19034e110dc02626f88cedc117613d7768a6" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.78" rel="lp151.5.3.1"/>
  <changelog author="nemysis@gmx.ch" date="1419508800">- Remove from spec group_and_isc.patch, forgotten in previous commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1419854400">- Fix symlink of rcFOO to /usr/sbin/service, resolving a dangling
  symlink lint warning (and remove the same from rpmlintrc).</changelog>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
</package>
<package pkgid="18b5dfd97cd8414985376ca23fb7e2d526e1916ba712dc115ddff96dc23198ec" name="docker" arch="src">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="ae464162ac1c4b139a8368d6390e603edc021c95a5db712218251e091e1c02e8" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="971c0b04f6e7fe4743b3bb2a06029527b7732776498fd8b1d528ccd437c30229" name="docker" arch="src">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="aeaf421d4ba86d85af77294e08bb469a703d85a036691e5e94be546229c47c8f" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="4f3dc473aec2503cf26c60a61530e977fdc03606e5d78526f1cd03d1cc96b104" name="docker" arch="src">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.9.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="f7462a0dafb42a814547c28bdd0942efad6b5cadbf64e734bd901665be3c52a3" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.9.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="7bcacc11bc5c857db9eac23f344bd9f4868db93fd3cdafd8417421eca9ab8319" name="docker" arch="src">
  <version epoch="0" ver="19.03.11_ce" rel="lp151.2.18.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
  * Includes fixes for CVE-2019-13509 bsc#1142160.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
</package>
<package pkgid="6afa03b0fc3f295d180be8276c5108c7dbde0f478b95624cfc38ec118832e0b4" name="docker" arch="x86_64">
  <version epoch="0" ver="19.03.11_ce" rel="lp151.2.18.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
  * Includes fixes for CVE-2019-13509 bsc#1142160.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
</package>
<package pkgid="9b0f37a24a9e0a0aaec26986dc87ef733830f29e1bd8074da4e6031885b900ea" name="docker" arch="src">
  <version epoch="0" ver="19.03.1_ce" rel="lp151.2.12.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="0a26347528f185221d44ed3f044edc108307f150e294ed422c608f7fd80d8729" name="docker" arch="x86_64">
  <version epoch="0" ver="19.03.1_ce" rel="lp151.2.12.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="a89e8edbfee8f0daeb1c54a073cd8cada999f5f915bbea1d7a98052f8a5eb919" name="docker" arch="src">
  <version epoch="0" ver="19.03.5_ce" rel="lp151.2.15.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
  * Includes fixes for CVE-2019-13509 bsc#1142160.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
</package>
<package pkgid="4d171e67192c0c7092863fecb67d88ccccb6d4043edf250ec9635830e292d861" name="docker" arch="x86_64">
  <version epoch="0" ver="19.03.5_ce" rel="lp151.2.15.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
  * Includes fixes for CVE-2019-13509 bsc#1142160.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
</package>
<package pkgid="ae23dc0311ce52a33e58273be1c5b646e97a91d74c99599ae3871df22ced9f13" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="ed0f5ac636d5d02222e3b60b9455164a20e0387fef33a008a22d4bf9dd0a0a42" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="381279a0d3cc437f2ce5d553f2b39119bf215cf956552c2e35b90816ed76f8b5" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.9.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="81ac80f80410f8954df6c2abda4c668a9b35cf0c45c562ffe02a7c6ce7e078bd" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="19.03.11_ce" rel="lp151.2.18.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
  * Includes fixes for CVE-2019-13509 bsc#1142160.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
</package>
<package pkgid="fc5af47166213926cb820e14a187bbff30a82ad954c2e34094a5c5d33ff6b84e" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="19.03.1_ce" rel="lp151.2.12.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="53f3b3fa5a7e3b3ba18d88ec39660710affe87d9b66f6dbcdbf31a1d1c4d0e26" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="19.03.5_ce" rel="lp151.2.15.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
  * Includes fixes for CVE-2019-13509 bsc#1142160.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
</package>
<package pkgid="9909c0c404ee00f47495a49a7f5b74868b1ad45e8766c1a69b9e82e3659e819d" name="docker-compose" arch="noarch">
  <version epoch="0" ver="1.17.0" rel="lp151.4.3.1"/>
  <changelog author="fcastelli@suse.com" date="1429272000">- Update to version 1.2.0</changelog>
  <changelog author="fcastelli@suse.com" date="1432900800">- Add README.SUSE</changelog>
  <changelog author="fcastelli@suse.com" date="1436529600">- Added fix_requires.patch: required to have docker-compose running</changelog>
  <changelog author="fcastelli@suse.com" date="1437480000">- Updated fix_requires.patch: required to fix docker-compose on Factory</changelog>
  <changelog author="hvogel@suse.com" date="1437998400">- Update to version 1.3.2</changelog>
  <changelog author="fcastelli@suse.com" date="1438084800">- Fix python-request requirement
  Updated fix_requires.patch: required to fix docker-compose on Factory</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1447588800">- Update to docker-compose 1.5.1
  Remove fix_requires.patch because latest version requires different
  versions of the previous packages
  Changelog: https://github.com/docker/compose/blob/1.5.1/CHANGELOG.md</changelog>
  <changelog author="fcastelli@suse.com" date="1447934400">- Add fix-requirements.patch: require the version of python-enum34
  shipped with SLE and openSUSE. The original version is not really
  needed.
- Downgraded python-enum34 requirement to suit what is already shipped
  with SLE/openSUSE</changelog>
  <changelog author="fcastelli@suse.com" date="1450699200">- Update to version 1.5.2:
  * Fixed a bug which broke the use of environment and env_file with extends,
    and caused environment keys without values to have a None value, instead of
    a value from the host environment.
  * Fixed a regression in 1.5.1 that caused a warning about volumes to be
    raised incorrectly when containers were recreated.
  * Fixed a bug which prevented building a Dockerfile that used ADD &lt;url&gt;
  * Fixed a bug with docker-compose restart which prevented it from starting
    stopped containers.
  * Fixed handling of SIGTERM and SIGINT to properly stop containers
  * Add support for using a url as the value of build
  * Improved the validation of the expose option</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458216000">- Update to version 1.6.2:
  + Add failing test for --abort-on-container-exit
  + Stop other containers if the flag is set.
  + Revert "Change special case from '_', None to ()"
  + Make environment variables without a value the same as docker-cli.
  + Updating Dockerfile
  + Bump 1.6.1
  + Update docker-py version in requirements to 1.7.2
  + Bump 1.6.2
- add cached-property requirement
- review version requirements so we don't have surprises if python
  packages are updated
- fix fix-requirements.patch based on versions in Factory
  This fixes bsc#954145, docker-compose provided by tumbleweed does not run</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1469188800">- update python-request requirement to &lt;= 1.11 because in Factory there is 1.10</changelog>
  <changelog author="tboerger@suse.com" date="1469448000">- Updated fix-requirements.patch for new code base
- Update to version 1.7.1
  * 1.7.1
    + Fixed a bug where the output of docker-compose config for v1 files would
    be an invalid configuration file.
    + Fixed a bug where docker-compose config would not check the validity of
    links.
    + Fixed an issue where docker-compose help would not output a list of
    available commands and generic options as expected.
    + Fixed an issue where filtering by service when using docker-compose logs
    would not apply for newly created services.
    + Fixed a bug where unchanged services would sometimes be recreated in in
    the up phase when using Compose with Python 3.
    + Fixed an issue where API errors encountered during the up phase would not
    be recognized as a failure state by Compose.
    + Fixed a bug where Compose would raise a NameError because of an undefined
    exception name on non-Windows platforms.
    + Fixed a bug where the wrong version of docker-py would sometimes be
    installed alongside Compose.
    + Fixed a bug where the host value output by docker-machine config default
    would not be recognized as valid options by the docker-compose command line.
    + Fixed an issue where Compose would sometimes exit unexpectedly while
    reading events broadcasted by a Swarm cluster.
    + Corrected a statement in the docs about the location of the .env file,
    which is indeed read from the current directory, instead of in the same location as the Compose file.
  * 1.7.0
    + docker-compose logs no longer follows log output by default. It now
    matches the behaviour of docker logs and exits after the current logs are
    printed. Use -f to get the old default behaviour.
    + Booleans are no longer allows as values for mappings in the Compose file
    (for keys environment, labels and extra_hosts). Previously this was a
    warning. Boolean values should be quoted so they become string values.
    + Compose now looks for a .env file in the directory where it's run and
    reads any environment variables defined inside, if they're not already set
    in the shell environment. This lets you easily set defaults for variables
    used in the Compose file, or for any of the COMPOSE_* or DOCKER_*
    variables.
    + Added a --remove-orphans flag to both docker-compose up and docker-compose
    down to remove containers for services that were removed from the Compose
    file.
    + Added a --all flag to docker-compose rm to include containers created by
    docker-compose run. This will become the default behavior in the next
    version of Compose.
    + Added support for all the same TLS configuration flags used by the docker
    client: --tls, --tlscert, --tlskey, etc.
    + Compose files now support the tmpfs and shm_size options.
    + Added the --workdir flag to docker-compose run
    + docker-compose logs now shows logs for new containers that are created
    after it starts.
    + The COMPOSE_FILE environment variable can now contain multiple files,
    separated by the host system's standard path separator (: on Mac/Linux, ;
    on Windows).
    + You can now specify a static IP address when connecting a service to a
    network with the ipv4_address and ipv6_address options.
    + Added --follow, --timestamp, and --tail flags to the docker-compose logs
    command.
    + docker-compose up, and docker-compose start will now start containers in
    parallel where possible.
    + docker-compose stop now stops containers in reverse dependency order
    instead of all at once.
    + Added the --build flag to docker-compose up to force it to build a new
    image. It now shows a warning if an image is automatically built when the
    flag is not used.
    + Added the docker-compose exec command for executing a process in a running
    container.
    + docker-compose down now removes containers created by docker-compose run.
    + A more appropriate error is shown when a timeout is hit during up when
    using a tty.
    + Fixed a bug in docker-compose down where it would abort if some resources
    had already been removed.
    + Fixed a bug where changes to network aliases would not trigger a service
    to be recreated.
    + Fix a bug where a log message was printed about creating a new volume when
    it already existed.
    + Fixed a bug where interrupting up would not always shut down containers.
    + Fixed a bug where log_opt and log_driver were not properly carried over
    when extending services in the v1 Compose file format.
    + Fixed a bug where empty values for build args would cause file validation
    to fail.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1470830400">- add python as a requirement, otherwise python is not installed
  and then you get the error
    AttributeError: 'module' object has no attribute 'ssl'</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1473940800">- Remove the conflict with python-requests
  I am tired of this kind of errors. I am relaxing this requirement.
  fix bsc#997918: TW 20160901: unable to dup since docker-compose
  conflicts with python-requests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1477310400">- Update to version 1.8.1 to be in sync with latest docker (bsc#1004927):
  * Remove surrounding quotes from TLS paths, if present
  * Fix command hint in bundle to pull services instead of images
  * Improve volumespec parsing on windows platforms
  * Update docker-py dependency to latest release
  * Catch APIError while printing container logs
  * Only allow log streaming if logdriver is json-file or journald
  * Fix integration test on Docker for Mac
  * Force default host on windows to the default TCP host (instead of npipe)
  * Bump docker-py dependency
  * Bump 1.8.1</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1477310401">- fix-requirements.patch: update this patch</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1508068800">- Rename python-docker-py requirement to python-docker. (bsc#1062084)</changelog>
  <changelog author="cobexer@gmail.com" date="1509710400">- Update to version 1.17.0:
  * Bump 1.17.0
  * Miscellaneous test fixes
  * Add flake8 to dev requirements
  * flake8 error on master branch (fixes #5298)
  * Add bash completion for `up --no-start`
  * Bump 1.17.0-rc1
  * flake8
  * Add check_duplicate=True when creating network
  * Add specific handling for pywintypes.error
  * Config command generates invalid volumes (fixes #5176)</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1513944000">- Fix requirement of python-texttable (boo#1072403)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1584273600">- removed the upper limit on py Yaml (bsc#1165620)</changelog>
</package>
<package pkgid="df897f17e49e3fbe44bab2962c2f07110aefe5886cab5751ba8ab4adf669c9f0" name="docker-compose" arch="src">
  <version epoch="0" ver="1.17.0" rel="lp151.4.3.1"/>
  <changelog author="fcastelli@suse.com" date="1429272000">- Update to version 1.2.0</changelog>
  <changelog author="fcastelli@suse.com" date="1432900800">- Add README.SUSE</changelog>
  <changelog author="fcastelli@suse.com" date="1436529600">- Added fix_requires.patch: required to have docker-compose running</changelog>
  <changelog author="fcastelli@suse.com" date="1437480000">- Updated fix_requires.patch: required to fix docker-compose on Factory</changelog>
  <changelog author="hvogel@suse.com" date="1437998400">- Update to version 1.3.2</changelog>
  <changelog author="fcastelli@suse.com" date="1438084800">- Fix python-request requirement
  Updated fix_requires.patch: required to fix docker-compose on Factory</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1447588800">- Update to docker-compose 1.5.1
  Remove fix_requires.patch because latest version requires different
  versions of the previous packages
  Changelog: https://github.com/docker/compose/blob/1.5.1/CHANGELOG.md</changelog>
  <changelog author="fcastelli@suse.com" date="1447934400">- Add fix-requirements.patch: require the version of python-enum34
  shipped with SLE and openSUSE. The original version is not really
  needed.
- Downgraded python-enum34 requirement to suit what is already shipped
  with SLE/openSUSE</changelog>
  <changelog author="fcastelli@suse.com" date="1450699200">- Update to version 1.5.2:
  * Fixed a bug which broke the use of environment and env_file with extends,
    and caused environment keys without values to have a None value, instead of
    a value from the host environment.
  * Fixed a regression in 1.5.1 that caused a warning about volumes to be
    raised incorrectly when containers were recreated.
  * Fixed a bug which prevented building a Dockerfile that used ADD &lt;url&gt;
  * Fixed a bug with docker-compose restart which prevented it from starting
    stopped containers.
  * Fixed handling of SIGTERM and SIGINT to properly stop containers
  * Add support for using a url as the value of build
  * Improved the validation of the expose option</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458216000">- Update to version 1.6.2:
  + Add failing test for --abort-on-container-exit
  + Stop other containers if the flag is set.
  + Revert "Change special case from '_', None to ()"
  + Make environment variables without a value the same as docker-cli.
  + Updating Dockerfile
  + Bump 1.6.1
  + Update docker-py version in requirements to 1.7.2
  + Bump 1.6.2
- add cached-property requirement
- review version requirements so we don't have surprises if python
  packages are updated
- fix fix-requirements.patch based on versions in Factory
  This fixes bsc#954145, docker-compose provided by tumbleweed does not run</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1469188800">- update python-request requirement to &lt;= 1.11 because in Factory there is 1.10</changelog>
  <changelog author="tboerger@suse.com" date="1469448000">- Updated fix-requirements.patch for new code base
- Update to version 1.7.1
  * 1.7.1
    + Fixed a bug where the output of docker-compose config for v1 files would
    be an invalid configuration file.
    + Fixed a bug where docker-compose config would not check the validity of
    links.
    + Fixed an issue where docker-compose help would not output a list of
    available commands and generic options as expected.
    + Fixed an issue where filtering by service when using docker-compose logs
    would not apply for newly created services.
    + Fixed a bug where unchanged services would sometimes be recreated in in
    the up phase when using Compose with Python 3.
    + Fixed an issue where API errors encountered during the up phase would not
    be recognized as a failure state by Compose.
    + Fixed a bug where Compose would raise a NameError because of an undefined
    exception name on non-Windows platforms.
    + Fixed a bug where the wrong version of docker-py would sometimes be
    installed alongside Compose.
    + Fixed a bug where the host value output by docker-machine config default
    would not be recognized as valid options by the docker-compose command line.
    + Fixed an issue where Compose would sometimes exit unexpectedly while
    reading events broadcasted by a Swarm cluster.
    + Corrected a statement in the docs about the location of the .env file,
    which is indeed read from the current directory, instead of in the same location as the Compose file.
  * 1.7.0
    + docker-compose logs no longer follows log output by default. It now
    matches the behaviour of docker logs and exits after the current logs are
    printed. Use -f to get the old default behaviour.
    + Booleans are no longer allows as values for mappings in the Compose file
    (for keys environment, labels and extra_hosts). Previously this was a
    warning. Boolean values should be quoted so they become string values.
    + Compose now looks for a .env file in the directory where it's run and
    reads any environment variables defined inside, if they're not already set
    in the shell environment. This lets you easily set defaults for variables
    used in the Compose file, or for any of the COMPOSE_* or DOCKER_*
    variables.
    + Added a --remove-orphans flag to both docker-compose up and docker-compose
    down to remove containers for services that were removed from the Compose
    file.
    + Added a --all flag to docker-compose rm to include containers created by
    docker-compose run. This will become the default behavior in the next
    version of Compose.
    + Added support for all the same TLS configuration flags used by the docker
    client: --tls, --tlscert, --tlskey, etc.
    + Compose files now support the tmpfs and shm_size options.
    + Added the --workdir flag to docker-compose run
    + docker-compose logs now shows logs for new containers that are created
    after it starts.
    + The COMPOSE_FILE environment variable can now contain multiple files,
    separated by the host system's standard path separator (: on Mac/Linux, ;
    on Windows).
    + You can now specify a static IP address when connecting a service to a
    network with the ipv4_address and ipv6_address options.
    + Added --follow, --timestamp, and --tail flags to the docker-compose logs
    command.
    + docker-compose up, and docker-compose start will now start containers in
    parallel where possible.
    + docker-compose stop now stops containers in reverse dependency order
    instead of all at once.
    + Added the --build flag to docker-compose up to force it to build a new
    image. It now shows a warning if an image is automatically built when the
    flag is not used.
    + Added the docker-compose exec command for executing a process in a running
    container.
    + docker-compose down now removes containers created by docker-compose run.
    + A more appropriate error is shown when a timeout is hit during up when
    using a tty.
    + Fixed a bug in docker-compose down where it would abort if some resources
    had already been removed.
    + Fixed a bug where changes to network aliases would not trigger a service
    to be recreated.
    + Fix a bug where a log message was printed about creating a new volume when
    it already existed.
    + Fixed a bug where interrupting up would not always shut down containers.
    + Fixed a bug where log_opt and log_driver were not properly carried over
    when extending services in the v1 Compose file format.
    + Fixed a bug where empty values for build args would cause file validation
    to fail.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1470830400">- add python as a requirement, otherwise python is not installed
  and then you get the error
    AttributeError: 'module' object has no attribute 'ssl'</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1473940800">- Remove the conflict with python-requests
  I am tired of this kind of errors. I am relaxing this requirement.
  fix bsc#997918: TW 20160901: unable to dup since docker-compose
  conflicts with python-requests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1477310400">- Update to version 1.8.1 to be in sync with latest docker (bsc#1004927):
  * Remove surrounding quotes from TLS paths, if present
  * Fix command hint in bundle to pull services instead of images
  * Improve volumespec parsing on windows platforms
  * Update docker-py dependency to latest release
  * Catch APIError while printing container logs
  * Only allow log streaming if logdriver is json-file or journald
  * Fix integration test on Docker for Mac
  * Force default host on windows to the default TCP host (instead of npipe)
  * Bump docker-py dependency
  * Bump 1.8.1</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1477310401">- fix-requirements.patch: update this patch</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1508068800">- Rename python-docker-py requirement to python-docker. (bsc#1062084)</changelog>
  <changelog author="cobexer@gmail.com" date="1509710400">- Update to version 1.17.0:
  * Bump 1.17.0
  * Miscellaneous test fixes
  * Add flake8 to dev requirements
  * flake8 error on master branch (fixes #5298)
  * Add bash completion for `up --no-start`
  * Bump 1.17.0-rc1
  * flake8
  * Add check_duplicate=True when creating network
  * Add specific handling for pywintypes.error
  * Config command generates invalid volumes (fixes #5176)</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1513944000">- Fix requirement of python-texttable (boo#1072403)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1584273600">- removed the upper limit on py Yaml (bsc#1165620)</changelog>
</package>
<package pkgid="b3cfb64600b9e4d33e968b88bf64b02bee6fb135957c4a23c35597828a2ecd1d" name="docker-compose" arch="noarch">
  <version epoch="0" ver="1.17.0" rel="lp151.4.6.1"/>
  <changelog author="fcastelli@suse.com" date="1432900800">- Add README.SUSE</changelog>
  <changelog author="fcastelli@suse.com" date="1436529600">- Added fix_requires.patch: required to have docker-compose running</changelog>
  <changelog author="fcastelli@suse.com" date="1437480000">- Updated fix_requires.patch: required to fix docker-compose on Factory</changelog>
  <changelog author="hvogel@suse.com" date="1437998400">- Update to version 1.3.2</changelog>
  <changelog author="fcastelli@suse.com" date="1438084800">- Fix python-request requirement
  Updated fix_requires.patch: required to fix docker-compose on Factory</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1447588800">- Update to docker-compose 1.5.1
  Remove fix_requires.patch because latest version requires different
  versions of the previous packages
  Changelog: https://github.com/docker/compose/blob/1.5.1/CHANGELOG.md</changelog>
  <changelog author="fcastelli@suse.com" date="1447934400">- Add fix-requirements.patch: require the version of python-enum34
  shipped with SLE and openSUSE. The original version is not really
  needed.
- Downgraded python-enum34 requirement to suit what is already shipped
  with SLE/openSUSE</changelog>
  <changelog author="fcastelli@suse.com" date="1450699200">- Update to version 1.5.2:
  * Fixed a bug which broke the use of environment and env_file with extends,
    and caused environment keys without values to have a None value, instead of
    a value from the host environment.
  * Fixed a regression in 1.5.1 that caused a warning about volumes to be
    raised incorrectly when containers were recreated.
  * Fixed a bug which prevented building a Dockerfile that used ADD &lt;url&gt;
  * Fixed a bug with docker-compose restart which prevented it from starting
    stopped containers.
  * Fixed handling of SIGTERM and SIGINT to properly stop containers
  * Add support for using a url as the value of build
  * Improved the validation of the expose option</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458216000">- Update to version 1.6.2:
  + Add failing test for --abort-on-container-exit
  + Stop other containers if the flag is set.
  + Revert "Change special case from '_', None to ()"
  + Make environment variables without a value the same as docker-cli.
  + Updating Dockerfile
  + Bump 1.6.1
  + Update docker-py version in requirements to 1.7.2
  + Bump 1.6.2
- add cached-property requirement
- review version requirements so we don't have surprises if python
  packages are updated
- fix fix-requirements.patch based on versions in Factory
  This fixes bsc#954145, docker-compose provided by tumbleweed does not run</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1469188800">- update python-request requirement to &lt;= 1.11 because in Factory there is 1.10</changelog>
  <changelog author="tboerger@suse.com" date="1469448000">- Updated fix-requirements.patch for new code base
- Update to version 1.7.1
  * 1.7.1
    + Fixed a bug where the output of docker-compose config for v1 files would
    be an invalid configuration file.
    + Fixed a bug where docker-compose config would not check the validity of
    links.
    + Fixed an issue where docker-compose help would not output a list of
    available commands and generic options as expected.
    + Fixed an issue where filtering by service when using docker-compose logs
    would not apply for newly created services.
    + Fixed a bug where unchanged services would sometimes be recreated in in
    the up phase when using Compose with Python 3.
    + Fixed an issue where API errors encountered during the up phase would not
    be recognized as a failure state by Compose.
    + Fixed a bug where Compose would raise a NameError because of an undefined
    exception name on non-Windows platforms.
    + Fixed a bug where the wrong version of docker-py would sometimes be
    installed alongside Compose.
    + Fixed a bug where the host value output by docker-machine config default
    would not be recognized as valid options by the docker-compose command line.
    + Fixed an issue where Compose would sometimes exit unexpectedly while
    reading events broadcasted by a Swarm cluster.
    + Corrected a statement in the docs about the location of the .env file,
    which is indeed read from the current directory, instead of in the same location as the Compose file.
  * 1.7.0
    + docker-compose logs no longer follows log output by default. It now
    matches the behaviour of docker logs and exits after the current logs are
    printed. Use -f to get the old default behaviour.
    + Booleans are no longer allows as values for mappings in the Compose file
    (for keys environment, labels and extra_hosts). Previously this was a
    warning. Boolean values should be quoted so they become string values.
    + Compose now looks for a .env file in the directory where it's run and
    reads any environment variables defined inside, if they're not already set
    in the shell environment. This lets you easily set defaults for variables
    used in the Compose file, or for any of the COMPOSE_* or DOCKER_*
    variables.
    + Added a --remove-orphans flag to both docker-compose up and docker-compose
    down to remove containers for services that were removed from the Compose
    file.
    + Added a --all flag to docker-compose rm to include containers created by
    docker-compose run. This will become the default behavior in the next
    version of Compose.
    + Added support for all the same TLS configuration flags used by the docker
    client: --tls, --tlscert, --tlskey, etc.
    + Compose files now support the tmpfs and shm_size options.
    + Added the --workdir flag to docker-compose run
    + docker-compose logs now shows logs for new containers that are created
    after it starts.
    + The COMPOSE_FILE environment variable can now contain multiple files,
    separated by the host system's standard path separator (: on Mac/Linux, ;
    on Windows).
    + You can now specify a static IP address when connecting a service to a
    network with the ipv4_address and ipv6_address options.
    + Added --follow, --timestamp, and --tail flags to the docker-compose logs
    command.
    + docker-compose up, and docker-compose start will now start containers in
    parallel where possible.
    + docker-compose stop now stops containers in reverse dependency order
    instead of all at once.
    + Added the --build flag to docker-compose up to force it to build a new
    image. It now shows a warning if an image is automatically built when the
    flag is not used.
    + Added the docker-compose exec command for executing a process in a running
    container.
    + docker-compose down now removes containers created by docker-compose run.
    + A more appropriate error is shown when a timeout is hit during up when
    using a tty.
    + Fixed a bug in docker-compose down where it would abort if some resources
    had already been removed.
    + Fixed a bug where changes to network aliases would not trigger a service
    to be recreated.
    + Fix a bug where a log message was printed about creating a new volume when
    it already existed.
    + Fixed a bug where interrupting up would not always shut down containers.
    + Fixed a bug where log_opt and log_driver were not properly carried over
    when extending services in the v1 Compose file format.
    + Fixed a bug where empty values for build args would cause file validation
    to fail.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1470830400">- add python as a requirement, otherwise python is not installed
  and then you get the error
    AttributeError: 'module' object has no attribute 'ssl'</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1473940800">- Remove the conflict with python-requests
  I am tired of this kind of errors. I am relaxing this requirement.
  fix bsc#997918: TW 20160901: unable to dup since docker-compose
  conflicts with python-requests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1477310400">- Update to version 1.8.1 to be in sync with latest docker (bsc#1004927):
  * Remove surrounding quotes from TLS paths, if present
  * Fix command hint in bundle to pull services instead of images
  * Improve volumespec parsing on windows platforms
  * Update docker-py dependency to latest release
  * Catch APIError while printing container logs
  * Only allow log streaming if logdriver is json-file or journald
  * Fix integration test on Docker for Mac
  * Force default host on windows to the default TCP host (instead of npipe)
  * Bump docker-py dependency
  * Bump 1.8.1</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1477310401">- fix-requirements.patch: update this patch</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1508068800">- Rename python-docker-py requirement to python-docker. (bsc#1062084)</changelog>
  <changelog author="cobexer@gmail.com" date="1509710400">- Update to version 1.17.0:
  * Bump 1.17.0
  * Miscellaneous test fixes
  * Add flake8 to dev requirements
  * flake8 error on master branch (fixes #5298)
  * Add bash completion for `up --no-start`
  * Bump 1.17.0-rc1
  * flake8
  * Add check_duplicate=True when creating network
  * Add specific handling for pywintypes.error
  * Config command generates invalid volumes (fixes #5176)</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1513944000">- Fix requirement of python-texttable (boo#1072403)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1584273600">- removed the upper limit on py Yaml (bsc#1165620)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1584619200">- follow up fix for the upper PyYAML limit (bsc#1165620)</changelog>
</package>
<package pkgid="2b2acefde87f9510fc14a28449dba2db7c9de5ec07019da1000699aabeb8608c" name="docker-compose" arch="src">
  <version epoch="0" ver="1.17.0" rel="lp151.4.6.1"/>
  <changelog author="fcastelli@suse.com" date="1432900800">- Add README.SUSE</changelog>
  <changelog author="fcastelli@suse.com" date="1436529600">- Added fix_requires.patch: required to have docker-compose running</changelog>
  <changelog author="fcastelli@suse.com" date="1437480000">- Updated fix_requires.patch: required to fix docker-compose on Factory</changelog>
  <changelog author="hvogel@suse.com" date="1437998400">- Update to version 1.3.2</changelog>
  <changelog author="fcastelli@suse.com" date="1438084800">- Fix python-request requirement
  Updated fix_requires.patch: required to fix docker-compose on Factory</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1447588800">- Update to docker-compose 1.5.1
  Remove fix_requires.patch because latest version requires different
  versions of the previous packages
  Changelog: https://github.com/docker/compose/blob/1.5.1/CHANGELOG.md</changelog>
  <changelog author="fcastelli@suse.com" date="1447934400">- Add fix-requirements.patch: require the version of python-enum34
  shipped with SLE and openSUSE. The original version is not really
  needed.
- Downgraded python-enum34 requirement to suit what is already shipped
  with SLE/openSUSE</changelog>
  <changelog author="fcastelli@suse.com" date="1450699200">- Update to version 1.5.2:
  * Fixed a bug which broke the use of environment and env_file with extends,
    and caused environment keys without values to have a None value, instead of
    a value from the host environment.
  * Fixed a regression in 1.5.1 that caused a warning about volumes to be
    raised incorrectly when containers were recreated.
  * Fixed a bug which prevented building a Dockerfile that used ADD &lt;url&gt;
  * Fixed a bug with docker-compose restart which prevented it from starting
    stopped containers.
  * Fixed handling of SIGTERM and SIGINT to properly stop containers
  * Add support for using a url as the value of build
  * Improved the validation of the expose option</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458216000">- Update to version 1.6.2:
  + Add failing test for --abort-on-container-exit
  + Stop other containers if the flag is set.
  + Revert "Change special case from '_', None to ()"
  + Make environment variables without a value the same as docker-cli.
  + Updating Dockerfile
  + Bump 1.6.1
  + Update docker-py version in requirements to 1.7.2
  + Bump 1.6.2
- add cached-property requirement
- review version requirements so we don't have surprises if python
  packages are updated
- fix fix-requirements.patch based on versions in Factory
  This fixes bsc#954145, docker-compose provided by tumbleweed does not run</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1469188800">- update python-request requirement to &lt;= 1.11 because in Factory there is 1.10</changelog>
  <changelog author="tboerger@suse.com" date="1469448000">- Updated fix-requirements.patch for new code base
- Update to version 1.7.1
  * 1.7.1
    + Fixed a bug where the output of docker-compose config for v1 files would
    be an invalid configuration file.
    + Fixed a bug where docker-compose config would not check the validity of
    links.
    + Fixed an issue where docker-compose help would not output a list of
    available commands and generic options as expected.
    + Fixed an issue where filtering by service when using docker-compose logs
    would not apply for newly created services.
    + Fixed a bug where unchanged services would sometimes be recreated in in
    the up phase when using Compose with Python 3.
    + Fixed an issue where API errors encountered during the up phase would not
    be recognized as a failure state by Compose.
    + Fixed a bug where Compose would raise a NameError because of an undefined
    exception name on non-Windows platforms.
    + Fixed a bug where the wrong version of docker-py would sometimes be
    installed alongside Compose.
    + Fixed a bug where the host value output by docker-machine config default
    would not be recognized as valid options by the docker-compose command line.
    + Fixed an issue where Compose would sometimes exit unexpectedly while
    reading events broadcasted by a Swarm cluster.
    + Corrected a statement in the docs about the location of the .env file,
    which is indeed read from the current directory, instead of in the same location as the Compose file.
  * 1.7.0
    + docker-compose logs no longer follows log output by default. It now
    matches the behaviour of docker logs and exits after the current logs are
    printed. Use -f to get the old default behaviour.
    + Booleans are no longer allows as values for mappings in the Compose file
    (for keys environment, labels and extra_hosts). Previously this was a
    warning. Boolean values should be quoted so they become string values.
    + Compose now looks for a .env file in the directory where it's run and
    reads any environment variables defined inside, if they're not already set
    in the shell environment. This lets you easily set defaults for variables
    used in the Compose file, or for any of the COMPOSE_* or DOCKER_*
    variables.
    + Added a --remove-orphans flag to both docker-compose up and docker-compose
    down to remove containers for services that were removed from the Compose
    file.
    + Added a --all flag to docker-compose rm to include containers created by
    docker-compose run. This will become the default behavior in the next
    version of Compose.
    + Added support for all the same TLS configuration flags used by the docker
    client: --tls, --tlscert, --tlskey, etc.
    + Compose files now support the tmpfs and shm_size options.
    + Added the --workdir flag to docker-compose run
    + docker-compose logs now shows logs for new containers that are created
    after it starts.
    + The COMPOSE_FILE environment variable can now contain multiple files,
    separated by the host system's standard path separator (: on Mac/Linux, ;
    on Windows).
    + You can now specify a static IP address when connecting a service to a
    network with the ipv4_address and ipv6_address options.
    + Added --follow, --timestamp, and --tail flags to the docker-compose logs
    command.
    + docker-compose up, and docker-compose start will now start containers in
    parallel where possible.
    + docker-compose stop now stops containers in reverse dependency order
    instead of all at once.
    + Added the --build flag to docker-compose up to force it to build a new
    image. It now shows a warning if an image is automatically built when the
    flag is not used.
    + Added the docker-compose exec command for executing a process in a running
    container.
    + docker-compose down now removes containers created by docker-compose run.
    + A more appropriate error is shown when a timeout is hit during up when
    using a tty.
    + Fixed a bug in docker-compose down where it would abort if some resources
    had already been removed.
    + Fixed a bug where changes to network aliases would not trigger a service
    to be recreated.
    + Fix a bug where a log message was printed about creating a new volume when
    it already existed.
    + Fixed a bug where interrupting up would not always shut down containers.
    + Fixed a bug where log_opt and log_driver were not properly carried over
    when extending services in the v1 Compose file format.
    + Fixed a bug where empty values for build args would cause file validation
    to fail.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1470830400">- add python as a requirement, otherwise python is not installed
  and then you get the error
    AttributeError: 'module' object has no attribute 'ssl'</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1473940800">- Remove the conflict with python-requests
  I am tired of this kind of errors. I am relaxing this requirement.
  fix bsc#997918: TW 20160901: unable to dup since docker-compose
  conflicts with python-requests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1477310400">- Update to version 1.8.1 to be in sync with latest docker (bsc#1004927):
  * Remove surrounding quotes from TLS paths, if present
  * Fix command hint in bundle to pull services instead of images
  * Improve volumespec parsing on windows platforms
  * Update docker-py dependency to latest release
  * Catch APIError while printing container logs
  * Only allow log streaming if logdriver is json-file or journald
  * Fix integration test on Docker for Mac
  * Force default host on windows to the default TCP host (instead of npipe)
  * Bump docker-py dependency
  * Bump 1.8.1</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1477310401">- fix-requirements.patch: update this patch</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1508068800">- Rename python-docker-py requirement to python-docker. (bsc#1062084)</changelog>
  <changelog author="cobexer@gmail.com" date="1509710400">- Update to version 1.17.0:
  * Bump 1.17.0
  * Miscellaneous test fixes
  * Add flake8 to dev requirements
  * flake8 error on master branch (fixes #5298)
  * Add bash completion for `up --no-start`
  * Bump 1.17.0-rc1
  * flake8
  * Add check_duplicate=True when creating network
  * Add specific handling for pywintypes.error
  * Config command generates invalid volumes (fixes #5176)</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1513944000">- Fix requirement of python-texttable (boo#1072403)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1584273600">- removed the upper limit on py Yaml (bsc#1165620)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1584619200">- follow up fix for the upper PyYAML limit (bsc#1165620)</changelog>
</package>
<package pkgid="c0e544f0b37f73e5afc2e8516a28f816b86b80f7b2459fc70d212d0d92dfb6dd" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2726_872f0a83c98a" rel="lp151.2.3.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
</package>
<package pkgid="d8ac432f82691b4a7bb29f7ce8ed6bbb8d4c7f5db643f3e5242a679a81bbed0f" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2800_fc5a7d91d54c" rel="lp151.2.6.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
</package>
<package pkgid="a9962d7a71db455ed75a7ade90a0986db9950554539518e045d0f2ec131c4353" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2877_3eb39382bfa6" rel="lp151.2.9.1"/>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to libnetwork 45c710223c5f, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1572004800">- Update to libnetwork 3eb39382bfa6, which is required for Docker 19.03.4-ce.
  bsc#1158590</changelog>
</package>
<package pkgid="f1fc179a935db585609b80839265c23dd68300d26ed32145707952ae7e1c10e6" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2902_153d0769a118" rel="lp151.2.12.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to libnetwork 45c710223c5f, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1572004800">- Update to libnetwork 3eb39382bfa6, which is required for Docker 19.03.4-ce.
  bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to libnetwork 153d0769a118, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
</package>
<package pkgid="5aa11d95aa52cc7f360c3c16aacab36ac71ec84193ee2ac1597af1c7624132a0" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc10+gitr3981_dc9208a3303f" rel="lp151.3.21.1"/>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to runc 3e425f80a8c9, which is required for Docker 19.03.3-ce.
  bsc#1153367
- Rebase CVE-2019-16884 fix (3e425f80a8c9 doesn't contain the entire fix).
  bsc#1152308
  - CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579003200">- Add backported fix for CVE-2019-19921. bsc#1160452
  + CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579262400">- Update CVE-2019-19921 patch to match upstream PR.
  * CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to runc v1.0.0-rc10, which is required for Docker 19.03.11-ce.
  bsc#1172377
- Remove upstreamed patches:
  - CVE-2019-16884.patch
  - CVE-2019-19921.patch
- Synchronise patches with 'runc' package:
  + bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  * bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
</package>
<package pkgid="6f9ed67e2cbb5e541775e9ffe7e0eed12743f8dd712bac861efff627c7ed88ab" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc10+gitr3981_dc9208a3303f" rel="lp151.3.21.1"/>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to runc 3e425f80a8c9, which is required for Docker 19.03.3-ce.
  bsc#1153367
- Rebase CVE-2019-16884 fix (3e425f80a8c9 doesn't contain the entire fix).
  bsc#1152308
  - CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579003200">- Add backported fix for CVE-2019-19921. bsc#1160452
  + CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579262400">- Update CVE-2019-19921 patch to match upstream PR.
  * CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to runc v1.0.0-rc10, which is required for Docker 19.03.11-ce.
  bsc#1172377
- Remove upstreamed patches:
  - CVE-2019-16884.patch
  - CVE-2019-19921.patch
- Synchronise patches with 'runc' package:
  + bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  * bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
</package>
<package pkgid="d2f0a42e19a86998f6d02c718ec832dd5057c98a996a9aff43d0f94cf8686a96" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc6+gitr3804_2b18fe1d885e" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="949beae7caacee1b66f0ec4818e5a2dad5ebb2b8709c5b43a919e106ed18c5d7" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc6+gitr3804_2b18fe1d885e" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="a30f4fb67075e268095dbf6df3e98719b0ea7f5d54fab16fcaf67cc1e8cfe4c3" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc8+gitr3826_425e105d5a03" rel="lp151.3.6.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="e5d85bda96eb986a15e2f9ad8b01d9cfc6d1ea3bb38f6a48d49e4527f51d9c8c" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc8+gitr3826_425e105d5a03" rel="lp151.3.6.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="6ae8d7059e767b254f12773fad5500303962ca6ebfb34eaa527157d25fa52c6a" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc8+gitr3826_425e105d5a03" rel="lp151.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
</package>
<package pkgid="fdc413ff64ee9063562f22e4cd772fc475eb0cac68c803ae05d4b9755365b8ca" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc8+gitr3826_425e105d5a03" rel="lp151.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
</package>
<package pkgid="f20f33a2aaff5637198d5c316d347e00fbb973f70cf0a6e2d8c6b0129472cdc2" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc8+gitr3917_3e425f80a8c9" rel="lp151.3.12.1"/>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to runc 3e425f80a8c9, which is required for Docker 19.03.3-ce.
  bsc#1153367
- Rebase CVE-2019-16884 fix (3e425f80a8c9 doesn't contain the entire fix).
  bsc#1152308
  - CVE-2019-16884.patch</changelog>
</package>
<package pkgid="bac8b61e3e9fe20bcf25bf3b6146ed0f43557ea97d5647cfac07e572cb2aba2e" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc8+gitr3917_3e425f80a8c9" rel="lp151.3.12.1"/>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to runc 3e425f80a8c9, which is required for Docker 19.03.3-ce.
  bsc#1153367
- Rebase CVE-2019-16884 fix (3e425f80a8c9 doesn't contain the entire fix).
  bsc#1152308
  - CVE-2019-16884.patch</changelog>
</package>
<package pkgid="83a17ebce5441222b896d514a6926ad59950befce94ca1ed78f4f071568ad3fa" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc8+gitr3917_3e425f80a8c9" rel="lp151.3.15.1"/>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to runc 3e425f80a8c9, which is required for Docker 19.03.3-ce.
  bsc#1153367
- Rebase CVE-2019-16884 fix (3e425f80a8c9 doesn't contain the entire fix).
  bsc#1152308
  - CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579003200">- Add backported fix for CVE-2019-19921. bsc#1160452
  + CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579262400">- Update CVE-2019-19921 patch to match upstream PR.
  * CVE-2019-19921.patch</changelog>
</package>
<package pkgid="09d5b4928c9fbbc634090ddac2112bf8ad11f4b1754b1f3bec7a751e35889eef" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc8+gitr3917_3e425f80a8c9" rel="lp151.3.15.1"/>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to runc 3e425f80a8c9, which is required for Docker 19.03.3-ce.
  bsc#1153367
- Rebase CVE-2019-16884 fix (3e425f80a8c9 doesn't contain the entire fix).
  bsc#1152308
  - CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579003200">- Add backported fix for CVE-2019-19921. bsc#1160452
  + CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579262400">- Update CVE-2019-19921 patch to match upstream PR.
  * CVE-2019-19921.patch</changelog>
</package>
<package pkgid="c50387b40cd2d647a25cd18cb91ee2bc4e944143ed0d65cf0fa81cd96ec70c8a" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc8+gitr3917_3e425f80a8c9" rel="lp151.3.18.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to runc 3e425f80a8c9, which is required for Docker 19.03.3-ce.
  bsc#1153367
- Rebase CVE-2019-16884 fix (3e425f80a8c9 doesn't contain the entire fix).
  bsc#1152308
  - CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579003200">- Add backported fix for CVE-2019-19921. bsc#1160452
  + CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579262400">- Update CVE-2019-19921 patch to match upstream PR.
  * CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
</package>
<package pkgid="e6b21274719068c3e849efe2e467adde398b64a8af33b4ed95a8e5fc2b78917e" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc8+gitr3917_3e425f80a8c9" rel="lp151.3.18.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to runc 3e425f80a8c9, which is required for Docker 19.03.3-ce.
  bsc#1153367
- Rebase CVE-2019-16884 fix (3e425f80a8c9 doesn't contain the entire fix).
  bsc#1152308
  - CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579003200">- Add backported fix for CVE-2019-19921. bsc#1160452
  + CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579262400">- Update CVE-2019-19921 patch to match upstream PR.
  * CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
</package>
<package pkgid="4bd501d52ef5e29b1eceeb0523391970b3c4fda2a00e7d42ac7c0b0e7de853c7" name="docker-runc-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc6+gitr3804_2b18fe1d885e" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="5c8e260a360e7f9ff9d6292f1cbaa2b17cd483af3aa1cca6c97b47d705f214d3" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="bf5a79d7bc25ad8752f12752b41335bd770f50fd9656031c9195d0c1567c0084" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="7bf0400b8c2f151f70228260eca2f12fc11c037b90cf5c6c7284e35a7fadabc5" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.9.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="affd74139b927e4530ed0e3474d0c5c342139d714c6584d7b7c2337a24c4f121" name="docker-test" arch="x86_64">
  <version epoch="0" ver="19.03.11_ce" rel="lp151.2.18.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
  * Includes fixes for CVE-2019-13509 bsc#1142160.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
</package>
<package pkgid="548b37c884130d5b4bd0bed97bdbfc30232c5efd32be78b3a87368d92a5801c8" name="docker-test" arch="x86_64">
  <version epoch="0" ver="19.03.1_ce" rel="lp151.2.12.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="7d15525e8dc7c12a36ff60d39d356a7c05bd0c95fbce45cb5ee90242136b7821" name="docker-test" arch="x86_64">
  <version epoch="0" ver="19.03.5_ce" rel="lp151.2.15.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
  * Includes fixes for CVE-2019-13509 bsc#1142160.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
</package>
<package pkgid="963c48b2514a739206431fb90dcdf3e524c7aa26d655e81e095e91ff08b161a6" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="f85abf6b36344d026a40a856365b16a8237e503cc9e9ecb72e7cc43a8cb7ea12" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="b5a04bfc9fe83274e327885d3f68e0e9818fcef0f0aa8fc3419610b1aa222cd0" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.9.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="20a7152b1242a6851fc6fc4669028a5b6875d00c39859c7a723352c6e9551acb" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="19.03.11_ce" rel="lp151.2.18.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
  * Includes fixes for CVE-2019-13509 bsc#1142160.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
</package>
<package pkgid="b7f15ce4ebb74dac5d2e08798be8940f1328e363a889de19086e9b06688e3afe" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="19.03.1_ce" rel="lp151.2.12.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="e9c6eeb73fe5823c3e9ab89b89375da880a9cd4ae649adfc65f6a94583ea28f6" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="19.03.5_ce" rel="lp151.2.15.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
  * Includes fixes for CVE-2019-13509 bsc#1142160.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
</package>
<package pkgid="1c31ee887d556e61183671dcb940d7afda0e7bd6c1d4d8aabd5b8b449df8b85c" name="dolphin" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="9ac027357bd64ca0bc63021e821dced3364b0352b01b4043ed4fdaa5c2fe4f37" name="dolphin" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="c08695f4caf251672431b777785a7c397ab8a1914df3a12f9e40711c7e9caef0" name="dolphin-devel" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="59693897581c1d7c6a3d576cb7498a3f0e0a3c228a7958f0e5e69209e30fb55a" name="dolphin-part" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="91939757316edbaa82589a0b41cef9d41498833f2af931feaf927d9a8c75ccbd" name="dolphin-part-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="5999a44207dbe567740c89600585ffa64572351381e482dd8d9bf22e7729331b" name="dom4j" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp151.6.3.1"/>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="C&#xE9;dric Bosdonnat &lt;cbosdonnat@suse.com&gt;" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch
- Use fdupes for documentation files</changelog>
</package>
<package pkgid="2c8097d94da0287806e5d702e86fbeab3ae16ee986ddb8ffb6c54f9d34c6c5c3" name="dom4j" arch="src">
  <version epoch="0" ver="1.6.1" rel="lp151.6.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="C&#xE9;dric Bosdonnat &lt;cbosdonnat@suse.com&gt;" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch
- Use fdupes for documentation files</changelog>
</package>
<package pkgid="30ee5d8ac0d810952463c4dc5125fde81ca340f661917b8add9445189618ba34" name="dom4j-demo" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp151.6.3.1"/>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="C&#xE9;dric Bosdonnat &lt;cbosdonnat@suse.com&gt;" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch
- Use fdupes for documentation files</changelog>
</package>
<package pkgid="e1e290fe7b566bd37c28d18ae1479c02f2d592a7937a60c22dce525a9d6b31c6" name="dom4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp151.6.3.1"/>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="C&#xE9;dric Bosdonnat &lt;cbosdonnat@suse.com&gt;" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch
- Use fdupes for documentation files</changelog>
</package>
<package pkgid="72e743aa725193ba1fb427410d8d4982481e4193bbbf8de358389b0a93a9ee32" name="dom4j-manual" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp151.6.3.1"/>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="C&#xE9;dric Bosdonnat &lt;cbosdonnat@suse.com&gt;" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch
- Use fdupes for documentation files</changelog>
</package>
<package pkgid="175f1122d735a46f47d76245559734e1af9ae9707681d41d83f9f4e52dcf21f8" name="dosbox" arch="src">
  <version epoch="0" ver="0.74.3" rel="lp151.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1180094400">- dont rm -rf %buildroot in %prep</changelog>
  <changelog author="lnussel@suse.de" date="1185796800">- new version 0.71
  * Added a new recompiling cpu core which is easier to port!
  * Added a x86_64 and a mipsel_32 recompiling core.
  * Fixed hangups on certain platforms after long gameplay of
    several games.
  * Fix several joystick bugs.
  * Improved cdrom support. (fixes for audio, iso and detection.)
  * Improved SVGA and VESA. (detection and display)
  * Fixed a few textmodes and improved ansi emulation a bit.
  * Fixed pcspeaker and certain types of soundeffects.
  * Added undocumented mousebackdoor.
  * Made mount and imgmount a bit easier to use. (ioctl by default,
    support for ~ and ~username, auto size guessing for images)
  * Fix a few compilation problems on various hosts and a general
    code cleanup.
  * Several small fixes that improve compatibility.</changelog>
  <changelog author="lnussel@suse.de" date="1188302400">- new version 0.72
  * Fixed unitialized variable in joystick. (Fixes crashes on Vista and
    Mac OS X)
  * Some bugfixes and speedups to the 64 bit recompiling core.
  * Fixed sign flag on soundblaster dma transfers (Space Quest 6 intro)
  * Fixed a bug in keyboard layout processing code and fixed certain
    layouts.
  * Fixed Dreamweb.
  * Improved speed unlocking when running cycles=max.
  * Fixed a crash related to the tab completion in the shell.
  * Improved aspect correction code. Should now be like how a real monitor
    handles it.
  * Fixed a bug in the xms status report code. (Blake Stone 1.0 shareware)
  * Added a lot more keyboard layouts.
  * Fix crash related to changing the scaler before a screen was created.
  * Hopefully fixed compilation on *bsd.
  * Enabled auto cpu core selection for recompiling core as well.
  * Made the used joystick selectable when 4axis is specified.
  * Added some hints for inexperienced DOS users to the shell.</changelog>
  <changelog author="lnussel@suse.de" date="1192449600">- fix build with gcc 4.3</changelog>
  <changelog author="lnussel@suse.de" date="1196769600">- fix wrong use of strncat</changelog>
  <changelog author="lnussel@suse.de" date="1243512000">- new version 0.73
  * Support for more graphics modes and cards.
  * Improved Vista support.
  * New OPL emulation cores.
  * Sound fixes and improvements for Mac OS X.
  * Lots of compatibility fixes.
  * Lots of cdrom detection improvements.
  * Lots of memory (EMS/XMS) improvements.
  * Various fixes and enhancements for the recompiling core.
  * Support for evdev.
  * Lots of DOS fixes.
  * Slightly faster!
  * More stable.</changelog>
  <changelog author="lnussel@suse.de" date="1274270400">- new version 0.74
  * Several small game specific fixes/hacks/support. (Offensive, Roadhog, GTA
    installer, Kingdom O' Magic soundcard detection, Pirate booter, Armored
    Fist installer)
  * Add the S3-specific 640x480 256 color mode. (fixes regression in "Wooden
    Ships and Iron Men" and "I Have No Mouth And I Must Scream")
  * Fix a stack overflow that could crash DOSBox.
  * Add fake microphone input. (fixes Talking Parrot)
  * Modify adlib turn off code, so that it doesn't turn off in cases where the
    same sound is repeated over and over again.
  * Several small fixes to the CDROM audio code.(HOMM2, Redneck Rampage and
    others)
  * Several improvements to the CDROM emulation code. (fixes Alpha Storm and GT
    Racing 97)
  * Some small CPU fixes that might fix something.
  * Handle opcode 0xff subcode 7 as invalid instruction. (fixes dif-2 &amp; others)
  * Some hercules fixes. (Testdrive)
  * Improve support for blanked parts that wrap around to the start of the
    screen. (fixes Magic Circle demo and Sid&amp;Al)
  * Remove old OPL cores as the new ones seem to work very nicely.
  * Modify movie recording code so that the movies aren't corrupt when you exit
    dosbox without stopping the movie.
  * Change RGB3x scaler to look more pretty.
  * Improve initial register values compatility of the GUS.
  * Added autodetection for Gameblaster. (games can find it now)
  * Change render preferences a bit to be more compatible with Windows 7.
  * Add DOS fixes to terminate program. (fixes Fortune Teller)
  * Add FFREEP. (fixes Trucks)
  * Improve FPU ST80 in C mode when writing zero. (fixes Antigok)
  * Add special int10 scanline function. (fixes mz700 and probably lots of
    games that mess with them)
  * Fix scrolling in rarely used video modes. (fixes Orphee)
  * Modify game specific hacks a bit so that Kick off 3 works again.
  * Lots of fixes to the INT10 video parameter table. (Seven spirits of ra and
    others)
  * Add VGA blanking in machine=vgaonly. (used by Alien Carnage)
  * CGA, PCJr, Tandy: Add video blanking, change display start latch timing,
    sync pulse width correction.
  * PCJr, Tandy: implement vertical retrace interrupt.
  * PCJr, CGA: line-by-line video emulation.
  * PCJr: support on-screen change of color modes 4medium to 16low. (used by
    Ghostbusters booter)
  * Hercules: Add green and amber monochrome support.
  * All machines: only update the video timing when needed. (Jungle Hunt,
    others that synchronize to the video screen might profit)
  * Several small DOS fixes.
  * Some UMB related fixes. (The Legacy without UMB)
  * Fix version number of DSP for SB 1.5. (fixes a few games)
  * Several VGA emulation improvements. (Allertone football manager)
  * Some Tandy fixes. (Mech Warrior)
  * Small improvements and fixes to the OPL emulation.
  * Add low level Tandy DAC emulation.
  * Some EMS fixes. (fixes Mortal Kombat and others)
  * Change SoundBlaster DSP reset mechanism, add sb irq acknowledge logic.
    (fixes stmik*based applications)
  * Some interrupt pointer location modifications. (fixes Tinker Tales)
  * Some fixes to the BOOT code. (fixes Last Mission)
  * Respect write-only file information. (fixes Champions of Zulala)
  * Some RTC fix. (fixes Tully Bodine and others)
  * Improve mouse emulation to work better with Water World.
  * Hopefully fix the translation of the configuration file.
  * Speed up and fixes for the recompiler core. (pitfall2 pcjr)
  * Change memory start location. (fixes 7th Guest installer)
  * Several fixes to the batch file handling. (Shift and use the typed first %0
    instead of the parsed %0)
  * Improve file redirection and redirected line ends. (fixes Phantasmagoria 2
    DOS installer)
  * Fix compilation with new MAC os X version.
  * Add 16C550A FIFO support to the serial port emulation.
  * Improve modem emulation to get higher speeds.
  * Change default samplerates to 44100, blocksize to 1024 and prebuffer to 20,
    so that hopefully certain soundcards produce more fluent sound playback.
  * Add some rarely used, but for some games critical flags to the internal
    commands.
  * Add -userconf flag, so that the userspecific configuration can easily be
    used together with *conf configfile.
  * Improve internal timing with repeating timers (especially with the dynamic
    core).</changelog>
  <changelog author="ismail@namtrac.org" date="1300276800">- Fix compilation with gcc 4.6</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="idonmez@suse.com" date="1348228800">- Add explicit glu dependency</changelog>
  <changelog author="matthias@mailaender.name" date="1349697600">- improved dosbox icon, from wikipedia entry.
- use pkgconfig(sdl) instead of SDL-devel buildrequires</changelog>
  <changelog author="martin.jakl@qbicon.cz" date="1387281600">- added missing alsa dependency for midi support (bnc#855514)</changelog>
  <changelog author="lnussel@suse.de" date="1486987200">- add patches from Fedora
  * 0001-Apply-patch-by-gulikoza-to-add-support-for-absolute-.patch
  * 0001-update-64bit-recompiler-core-to-handle-OSX-memory-ad.patch
  * 0001-Workaround-clang-confusing-itself-compile-error-resu.patch
  * dosbox-0.74-formatsecurity.patch
  * dosbox-0.74-init-crash.patch</changelog>
  <changelog author="lnussel@suse.de" date="1503921600">- Fix desktop file category to sort below Game (boo#1055340)
- directly use desktop-file-install instead of the old macro</changelog>
  <changelog author="meissner@suse.com" date="1536321600">- updated to 0.74-2
  - Windows: Fix auto/max cycles algorithm on Windows 7, which helps with stuttering audio.
  - Mac OS X: Bring a 64 bit version and improve performance.
  - Linux: Fix the 64bit dynrec cpu core and a lot of compilation problems. Add patches for the WINE Team.
- dosbox-0.74-init-crash.patch: solved differently upstream
- dosbox-0.74-formatsecurity.patch: is upstream
- 0001-Apply-patch-by-gulikoza-to-add-support-for-absolute-.patch: upstream
- 0001-Workaround-clang-confusing-itself-compile-error-resu.patch: upstream
- 0001-update-64bit-recompiler-core-to-handle-OSX-memory-ad.patch: upstream
- gcc46.patch: upstream</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use simpler Sourceforge download URLs</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1536926400">- Run spec-cleaner
- Drop support for SLE10
- Add GPL-3.0 as license too due to src/libs/gui_tk/gui_tk.*</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1537272000">- Set CFLAGS with export so as to override the implicit
  export of %configure. Use %make_install.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1561636800">- update to 0.74-3 (boo#1140254)
  * Some fixes to the OpenGL rendering.
  * Several other fixes for out of bounds access and buffer overflows.
  * Fixed that a very long line inside a bat file would overflow
    the parsing buffer. CVE-2019-7165
  * Added a basic permission system so that a program running inside DOSBox
    can't access the contents of /proc (e.g. /proc/self/mem) when / or /proc
    were (to be) mounted. CVE-2019-12594</changelog>
</package>
<package pkgid="e897e0d9174d4157e1cdc5ba0f5075e2006caa97d65ea4b5f4458436f059282d" name="dosbox" arch="x86_64">
  <version epoch="0" ver="0.74.3" rel="lp151.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1348228800">- Add explicit glu dependency</changelog>
  <changelog author="matthias@mailaender.name" date="1349697600">- improved dosbox icon, from wikipedia entry.
- use pkgconfig(sdl) instead of SDL-devel buildrequires</changelog>
  <changelog author="martin.jakl@qbicon.cz" date="1387281600">- added missing alsa dependency for midi support (bnc#855514)</changelog>
  <changelog author="lnussel@suse.de" date="1486987200">- add patches from Fedora
  * 0001-Apply-patch-by-gulikoza-to-add-support-for-absolute-.patch
  * 0001-update-64bit-recompiler-core-to-handle-OSX-memory-ad.patch
  * 0001-Workaround-clang-confusing-itself-compile-error-resu.patch
  * dosbox-0.74-formatsecurity.patch
  * dosbox-0.74-init-crash.patch</changelog>
  <changelog author="lnussel@suse.de" date="1503921600">- Fix desktop file category to sort below Game (boo#1055340)
- directly use desktop-file-install instead of the old macro</changelog>
  <changelog author="meissner@suse.com" date="1536321600">- updated to 0.74-2
  - Windows: Fix auto/max cycles algorithm on Windows 7, which helps with stuttering audio.
  - Mac OS X: Bring a 64 bit version and improve performance.
  - Linux: Fix the 64bit dynrec cpu core and a lot of compilation problems. Add patches for the WINE Team.
- dosbox-0.74-init-crash.patch: solved differently upstream
- dosbox-0.74-formatsecurity.patch: is upstream
- 0001-Apply-patch-by-gulikoza-to-add-support-for-absolute-.patch: upstream
- 0001-Workaround-clang-confusing-itself-compile-error-resu.patch: upstream
- 0001-update-64bit-recompiler-core-to-handle-OSX-memory-ad.patch: upstream
- gcc46.patch: upstream</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use simpler Sourceforge download URLs</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1536926400">- Run spec-cleaner
- Drop support for SLE10
- Add GPL-3.0 as license too due to src/libs/gui_tk/gui_tk.*</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1537272000">- Set CFLAGS with export so as to override the implicit
  export of %configure. Use %make_install.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1561636800">- update to 0.74-3 (boo#1140254)
  * Some fixes to the OpenGL rendering.
  * Several other fixes for out of bounds access and buffer overflows.
  * Fixed that a very long line inside a bat file would overflow
    the parsing buffer. CVE-2019-7165
  * Added a basic permission system so that a program running inside DOSBox
    can't access the contents of /proc (e.g. /proc/self/mem) when / or /proc
    were (to be) mounted. CVE-2019-12594</changelog>
</package>
<package pkgid="c27b83333852e5e276466c53740793a4c70190997758c53dedb287315372465f" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.10" rel="lp151.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="2181d9cfb1c0e3c81517f944226dcd0a7e38c3e25c5150a9f44fa30b2e714ed2" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="f34bced281cbc9878fac567b8bd5baffd6f2396bed708c75cfbb87a9a4aa16fe" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.10" rel="lp151.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
</package>
<package pkgid="ff3eebbceaae7f054c7c02ef8c998de7cc4ae3fa698a868739d73a7392c6dddd" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
</package>
<package pkgid="06b407dc0885d4f309b6fcca9522ad45624ce426f40b60adccee3b169b3c49c4" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="cad1872f7c6e10bab20e8c53cea6ef025a117090c23997330e3ee080588f7f3e" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="46353770d5309b486e4141aca4a5d8269059c1784ad955442aa2ee9eea4199e1" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="02c86dfc9bfcc519ecc9b55fb28f7bdc9b6d98db22dfac55cbe82b6db484276e" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="f410d91d8abcbbf0943611021cdc026ac95bac5c89e38106ddc61852e52fb194" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="fb18b6973aa910233409dfbee65eb3de759ac49474532488313d5b34ba4210dd" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
</package>
<package pkgid="61f3ab47bd07ab7e00b00e94fd90a7c49fe5fe2317a4d814ee8d3a099a689e13" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="ead71171a4998c880726fd227ed0dd3a0bef45affe6522c5952ac3edb9aa154b" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="549835dbf2f6efd8d5233aa295d7855e30316d61ee097d2914318467cfe2caff" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="c1aac1200459be66c06f7156ba97409b8b95c0b237a6602ad9a824e4f7c6f587" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
</package>
<package pkgid="c70fcebd74d871a368432ea7184cd92ec7d6b8aa4f5839bfc81278889bd3f9dc" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="9e75d9afbd247a483030aeea773b700a3179a135103109b035d2dc72ffe1f452" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="77785865b816e8acd6e0fad14be611bfb75be9d9adf1485aa5a13e11c86b0d96" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="89cf2ac0fbbc9bf2f4e86f676a442b3f08b01dd90cfe6697adddd6e984ed4c2e" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
</package>
<package pkgid="a2f4a1945a706c78b98d5a8b8c710f96431e8a37c66cd839833fff39fc8ff5b6" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="1c982d0076018861dc842f0a7221e0b224b93cecc83cde7acaae08e4f4f7e05b" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="948fc4ccea926e060e920ff3dcfa6c42de0b50c0a23884d92be06390f2156bbb" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="2e46ce74d62d50fc8d511db37e53c85ee5fde735d53c485ad9fac1c28ef90f2e" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
</package>
<package pkgid="ee7402846b8aa3e769e0c961358d7337067966227fbb2814cc82a22cbf8b34f0" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="b378e35ae81a30c4e16cbbb3a34feeea6ec5ff99275cde2c410ed642f9e0f0ff" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="47fc8fb41f00a174a8e5ac073d0a9f7fd139c477ef99dcf6d2603420bdb4c536" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="f5a2a836080e67d993a3a1c98955165ca68896462447f7ca1d0351686a3aca92" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
</package>
<package pkgid="5a5b8190f279c51fd82e10b424aee7e5b0845cf4da376179f5e912fa5f84ca1b" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="489a096a9f0dd8a04c539a5d9e5c5d490ca93157a6cc06f7203c8ab8191d9153" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="3058d10374cd605b21ebc94d47e9645356aaaa1041e173f06791db7ccc23544f" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="e9b87559d39a66d4d4dd6cc1809814bc877ae627a5302342163e5d8533953800" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
</package>
<package pkgid="45381c7af86b152bcb4cd949c60802be82d85cc2a23ef74f978417d4cbba56b0" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="c48968682e2169374c3125da3bb866823e5a3f182039e528999b176fd5918421" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="a64e54737d1c2ecfa7df8f3c2113f129688d1aa53e9b7115d6844040a507e969" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="9e036eae972d1fc9574fc0f6b66bf0227431b73319fdc0ec726e0c6c92a75b7c" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
</package>
<package pkgid="2f7673ef2f024842a82fb5ca3887c3c53e9f328ecb9294e8e2efbee639e89b8a" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="487bec5d64dccb148aff454676abb0a81f64a4adbfa6db1cf1c8be8d872bf1d1" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="6667418d35c98f43652537dee29b144b3350f7362348de1e3a78f70873a4bbae" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="d32a0f9fe6fcd4010a913e157af0585ed943ccf4d4d08b4e1583fdea86ebdcab" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp151.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
</package>
<package pkgid="7d3158a2294752d565e628d85411febea3d02c5b1613132148d981725b9df0f0" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="bc51e4a9e5d02d5590f353ec3a1a0fb2a1b2096fa3990decd215a8c2151cb41b" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="5bf3864de5a950a97ea6b4f376c5ba8d72b1a7dbbdd51728a24bd91d0969b75d" name="dpdk" arch="src">
  <version epoch="0" ver="18.11.3" rel="lp151.3.4.1"/>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
</package>
<package pkgid="d51e5e947d7bf2e52a4bcf38fb71236c6ae765bbef44013201e650d1ad04432b" name="dpdk" arch="x86_64">
  <version epoch="0" ver="18.11.3" rel="lp151.3.4.1"/>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
</package>
<package pkgid="60c398e144fac59843b3c76a62e3b7f3e396dac12c3f8dda9cfb45ccc242538a" name="dpdk" arch="src">
  <version epoch="0" ver="18.11.9" rel="lp151.3.8.1"/>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600689600">- Update to 18.11.9. For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590):
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Removed patches that no longer apply to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-vhost-fix-vring-index-check.patch</changelog>
</package>
<package pkgid="06543c70b5477d92d93333e86970c7756e2c291837162b8eed16b56a14fef3cb" name="dpdk" arch="x86_64">
  <version epoch="0" ver="18.11.9" rel="lp151.3.8.1"/>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600689600">- Update to 18.11.9. For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590):
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Removed patches that no longer apply to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-vhost-fix-vring-index-check.patch</changelog>
</package>
<package pkgid="29ad8f34a739276de96283ff5a9795a155beca87b289c91b8605b7f95efcb8d4" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="18.11.3" rel="lp151.3.4.1"/>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
</package>
<package pkgid="2017b4145a1fb48fa8b52382507c72ea41d86c0ad233e85238791a37f93aefd1" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="18.11.9" rel="lp151.3.8.1"/>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600689600">- Update to 18.11.9. For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590):
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Removed patches that no longer apply to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-vhost-fix-vring-index-check.patch</changelog>
</package>
<package pkgid="4c4e0ef708fb78d72f3afb0133b518bf7d72c08c1f763492058158f84baf800d" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="18.11.3" rel="lp151.3.4.1"/>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
</package>
<package pkgid="a8d88d19ef07f239e302444f8df3eeab27a3271ac2ca63e202acd98d15129d4c" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="18.11.9" rel="lp151.3.8.1"/>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600689600">- Update to 18.11.9. For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590):
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Removed patches that no longer apply to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-vhost-fix-vring-index-check.patch</changelog>
</package>
<package pkgid="b180883cf7f8b66bf523e1df1aee0fb396141a67a8d13a653b2913ec5eefbffd" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="18.11.3" rel="lp151.3.4.1"/>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
</package>
<package pkgid="1b1e8ab913d70f85565144b4f4b5c29434ff7d4b5f2fafd7f275151310fe7409" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="18.11.9" rel="lp151.3.8.1"/>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600689600">- Update to 18.11.9. For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590):
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Removed patches that no longer apply to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-vhost-fix-vring-index-check.patch</changelog>
</package>
<package pkgid="2f6de19b335ab18903525f75e3a4f3919d0b6382c252132c738a08bf529cb104" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="18.11.3_k4.12.14_lp151.28.48" rel="lp151.3.4.1"/>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
</package>
<package pkgid="5ca613ed98041441979618afde9c644f8c35148e90138eac16c49ef02f58817e" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="18.11.9_k4.12.14_lp151.28.67" rel="lp151.3.8.1"/>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600689600">- Update to 18.11.9. For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590):
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Removed patches that no longer apply to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-vhost-fix-vring-index-check.patch</changelog>
</package>
<package pkgid="f9a25428da0eb656db25404eefe0da8a13699f98ef38c7d74f40c72fc7ffc658" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="18.11.3" rel="lp151.3.4.1"/>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
</package>
<package pkgid="cd29a858524ddaab99abd687242bb9c65636a771c357fcd5af7d84cc7953e96f" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="18.11.9" rel="lp151.3.8.1"/>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1524571200">- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526040000">- use gcc-7 to remove EXTRA_CFLAGS hack that was required for gcc-6
  in the previous change(bsc#1090668)</changelog>
  <changelog author="ndas@suse.de" date="1526299200">- Sync dpdk for SLE15 with SLE12-SP4(fate#324872)</changelog>
  <changelog author="msuchanek@suse.com" date="1526472000">- workaround kernelrelease error</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992):
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch,
  - - 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1550664000">- Added 0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961)</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1580126400">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Changed to multibuild (bsc#1151455).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589284800">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600689600">- Update to 18.11.9. For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590):
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch
- Removed patches that no longer apply to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-vhost-fix-vring-index-check.patch</changelog>
</package>
<package pkgid="b18e989a3efcf1e709a23c35479c4e5ce6f63a18ea36c9c291d23b132834fc51" name="dracut" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.12.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
</package>
<package pkgid="bbb3a1526992ef90bb34e797960cdad0e403d218014a153b524a7f9fbf8544b7" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp151.2.12.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
</package>
<package pkgid="2b9aed73db6bfaf340cceb5be2490022e3a4c6ac135f8e6c6359a8337f9b54d0" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.12.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
</package>
<package pkgid="b69860c9420d75d5e2a5d10df563c0e9f6fcbf81dab41055bcc29947302312c2" name="dracut" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.15.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
</package>
<package pkgid="e64852853e502e48817ee7f9f6fbe925ede627ddeb9054e2f8208718a83fac93" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp151.2.15.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
</package>
<package pkgid="d467215ddcf01dddefe1b6c8096b8b767820e0dad9979d59db07ab8ac8028cf3" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.15.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
</package>
<package pkgid="5669d4fc94aef1d0165e6d2a7488f72e7d859e18e4c35cf525d0ca9c01686590" name="dracut" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.18.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
</package>
<package pkgid="acc49dc30d10d324098ce74084334df87cedbb0569cb0983d7ab3e503544b6a7" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp151.2.18.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
</package>
<package pkgid="2472e4c5ffb5ae5bd4bbbedff3b323d353a912421a58b69e77e047a279b2bd76" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.18.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
</package>
<package pkgid="56c810a24d1b17ede149890661850bb1d457d8d0c210558f3724d8ee53d613c9" name="dracut" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.21.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
</package>
<package pkgid="0d37b21210fa6f91e7c0b1c062cf68fd9932c2fecfb7b162a6e74b8cce2aa724" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp151.2.21.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
</package>
<package pkgid="6cbddb513f168de874c8cc07c71002ec61f2777b21c6dcd53cce156c2d71e90c" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.21.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
</package>
<package pkgid="37a184342a6b163f3551a9b8413f770405cb1f5e3187801b06c6d98f4b9c0b4f" name="dracut" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.24.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
</package>
<package pkgid="68e6f3c8b51c1c267e8589a9d2d905f97d1e2e94414936b0317ee35169056c1b" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp151.2.24.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
</package>
<package pkgid="6020c68e92aa6db6bdbca5aae82bc7e672e95ad238cee0708556c4074b9d1835" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.24.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
</package>
<package pkgid="a3c2c0c202fb402ecdbc9b59f889043994acc42a14bce83b19771908094e1431" name="dracut" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.27.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1596196800">- 40network: fix typo in did setup conditional (bsc#1172807)
  * add 0627-40network-fix-typo-in-did-setup-conditional.patch</changelog>
</package>
<package pkgid="cd5c0b01a2b9b204292e1ed515863579c8e371eda59c6a0e96ad13562efc583d" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp151.2.27.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1596196800">- 40network: fix typo in did setup conditional (bsc#1172807)
  * add 0627-40network-fix-typo-in-did-setup-conditional.patch</changelog>
</package>
<package pkgid="2b91b689e52d81cddb64511f153d7b7b90a665e07345492938967e6136277922" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.27.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1596196800">- 40network: fix typo in did setup conditional (bsc#1172807)
  * add 0627-40network-fix-typo-in-did-setup-conditional.patch</changelog>
</package>
<package pkgid="031ec75d2ce5f34c57cc4eb9b259e008087c494a5156d086fbf1fb5ac76b82e0" name="dracut" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="841d21ae2a1e9c81472e12adacc2514294e47b22590ef5a46dd5fb2a97b33294" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="f37eec0aae61e3dbc07e1324f6e5e434db1045e80f831d82c6080b2a64704def" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="32eb099c140397e1d7b2c9837a6493fe6146ec5c1e356a36fe8f2de97833fd4c" name="dracut" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="93919681b308d2fd1a57e9ac85772d190a1cbdade145f22c4d0efa18ca4896dd" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="34fe8836b28cf74b92d5d93c83c151eef786fea115defe5a7973d7614baf7de7" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="a441ff4c3671ff9a82d7561772969e112b5fc06e7de313d7e18f6a7098a3f0df" name="dracut" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="354d76fc84d67e23d89b785aa008a6d33af6633cd25b76751a4c18a9c965576b" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="61a25c329606a50d3da7b745f4b065e7bb7fb485e4d9199b40df3c50327df354" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="9623f9073b448eb153ee057a4e48b9d61fa60c6f8168679d943c240371011a56" name="dracut-fips" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.12.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
</package>
<package pkgid="97aed15d29d47671f7faa7efd5452d5434e2e037bdeac1029b7aa7b15a877d9a" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.12.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
</package>
<package pkgid="14e0196cf253445868422a2d1ca93d98b28b8ff33d5f87ea1ccff2047e10c925" name="dracut-fips" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.15.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
</package>
<package pkgid="053b0df3e68ec309bb8839c305cb096b5d95567b0f3b9fb1351a7eda5698b4ba" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.15.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
</package>
<package pkgid="33c8a8ddb05a84bb971682cd5b84f46f75e3ada0d788780c6d6d85533bbc06ae" name="dracut-fips" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.18.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
</package>
<package pkgid="14b607f62cab1e86f685ef4ebaab9e4284a028e634c0d91037a57b56e1e12971" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.18.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
</package>
<package pkgid="97b47aeab8217389aa831044a9affc953156955475a97a474720380e61f10113" name="dracut-fips" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.21.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
</package>
<package pkgid="d31421de224435317f7695a6d068621ee932af4356c943ad0508c2ca6ba8345a" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.21.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
</package>
<package pkgid="2690f1254d975c90217a2423550d64024da7e477e783db00037228bde379143d" name="dracut-fips" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.24.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
</package>
<package pkgid="a5597d49958c97350da8b7122e4bb712efed2a9f2fb4c7873695bf281022fd77" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.24.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
</package>
<package pkgid="0396049d713aeb26df3cbd867854bb4147cbc736b0ec6aff03d81aad7a66e95e" name="dracut-fips" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.27.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1596196800">- 40network: fix typo in did setup conditional (bsc#1172807)
  * add 0627-40network-fix-typo-in-did-setup-conditional.patch</changelog>
</package>
<package pkgid="c7e205a3a6e5e7a7a5cd2b4c7edd191aac6d835eec59db1f1338b8b53ebb757b" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.27.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1596196800">- 40network: fix typo in did setup conditional (bsc#1172807)
  * add 0627-40network-fix-typo-in-did-setup-conditional.patch</changelog>
</package>
<package pkgid="1339e665e4c22bf2684083d8c2ee59c64ea988df013fb8ee4165d37df968c017" name="dracut-fips" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="98e149c9362c45d8084eb918f1ed164071f6adaefa97327a532e1dc61e5fd33f" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="9a92f99e6c9001123d294be72a859b9cf9c0008c7a6c9b1bd497fec28d4b1d52" name="dracut-fips" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="2e559452254e9d4197696b687724783a7dfe7fd679f055f5472ec64f42bdbe5d" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="3435f33dc2545a7ecf3e3c3ab6b243344c6b56498252be7e2aa3f8f3fb336b84" name="dracut-fips" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="9f302cf2add69acca6abaf4dcae0d4b1c0c65c3a2fc8b912cab24cb8796917fa" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="416ce54ae1784d8132f4b110436b2aa33beae8945491a0fae2ab15378b159c2d" name="dracut-ima" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.12.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
</package>
<package pkgid="9fa1ab1074aa20f2d2d15d2ca673ddab341cb2b3be8fca759975c98cd12883cc" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.12.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
</package>
<package pkgid="d2fb186fc2c554c9d5295a9044b7672504332283a03c649b53c5f287e7680fe3" name="dracut-ima" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.15.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
</package>
<package pkgid="034cdd6ffbf881f9c1d921a2c0ce54cea91036735539426056617bde8269a896" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.15.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
</package>
<package pkgid="eab0e9528ec1e3e1ad2bbaca9c111f43253628632c52f5bfd588599b22a89042" name="dracut-ima" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.18.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
</package>
<package pkgid="a3745abb084d4e231fc468f9682abbb59ac830723e5dcab14dba9fbbe88bbff0" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.18.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
</package>
<package pkgid="eb02f33ff6ce43b2d1f62d22fe011a9bca4f3c599a283061700effbd5909709f" name="dracut-ima" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.21.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
</package>
<package pkgid="99c4337d44a0da5cc65c65ccf32725661b11889b9274fe00ceb7cdfb8e473fdb" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.21.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
</package>
<package pkgid="c2c2f9fb4135d89571daae6a1980f2d517ff6a9fbed5ea79f88a514a8176b08a" name="dracut-ima" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.24.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
</package>
<package pkgid="bea88695ab3d25e5bb872829c0eb984985c3c8bd8fd4f4e683d69ff81fe746f0" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.24.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
</package>
<package pkgid="2ec26c73b1c3f5cbbf29e14312af8f6afc666df79bf634f1502e88c6b1b90757" name="dracut-ima" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.27.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1596196800">- 40network: fix typo in did setup conditional (bsc#1172807)
  * add 0627-40network-fix-typo-in-did-setup-conditional.patch</changelog>
</package>
<package pkgid="09e8b918fb146102c127ba9f322f897de3c330fb6fd9ac00ac42d3939cd49dd6" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.27.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1596196800">- 40network: fix typo in did setup conditional (bsc#1172807)
  * add 0627-40network-fix-typo-in-did-setup-conditional.patch</changelog>
</package>
<package pkgid="cf64cb6574e1b4efa531e5110cd5083a3f8432c50d11d058c2908ed9a252364e" name="dracut-ima" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="450df1dffc3f935ffab1345b845ce9a3d6709b82aecdcfbd1e48d7d71d1b9f02" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="9c2328b27a72ccacf40d43435272708975b19d4b2d6e34643ae36332acc632b5" name="dracut-ima" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="83e075f8908ecff8d4d9d7ea4a06d3508f963c17fea470b795a71bf2f82ad99f" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="57d9aab579ec9e35463f6fbf4c006b8aee5f6cd432bfcd8a47f9f89ed2dc4a1a" name="dracut-ima" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="89510ab91931c4dd93a668826c50c187c88a2c2740eee81a0b4b4aa26d87dddb" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="5df3c667443ff0d998e2c083157fa2ddb60d0caa4b166f15d5371259cd158cd1" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="d9379467db00b3e327b17a1eaa3b8dbe1807a9d28fb6aee2f694f30f9f69ab81" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="aa71a5e77a4cb9e5215f18de56318a737b0cd42083178193479adee4a4c7abb0" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="758b1b8af0fbb03d5dcbfdb9faed2cfc503d7045ae37d686a40508553819b63d" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="1e1bebd88f63715c6592da82b557d9f029650bb2bf1d3ca9b2c952fd41056fda" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp151.2.10.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="42b8ea07899c8484f3ac7dd0eb7c03ea4236481d877f2aad6d935b7bbb31f0c3" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp151.2.10.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="31962b2fa943e1992e9752c8fa35701dd3845a196ab2cd9d51240cf37cc7fa3d" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp151.2.18.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="258566c5ee196a0f40dc983f946ccdad77a486b5e6c35ce6e97cce6c0b04d0ef" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp151.2.18.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="660c41422c7b0beff91981a8ac45e53eff1d33f7b9e474674160b613ae62baa4" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.21.7" rel="lp151.2.14.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="44b9614206a8d843d8be1a6ffa57820af058823803f1a50fc40ea50b600037e1" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.21.7" rel="lp151.2.14.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="84aed104731d4693217f88b4cf4684298a4bc28b2cd56f1c41c64cd0df6065d7" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="0d6e202140654999d2f6ea69b092e745e970500510fed22296621446ab3e4b30" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="1a3e1c8f06b160c85b698c0d6526199e2366832a130c4cd6ac37d0764008873b" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="fc5a7258027ac2213f0f0eab660932c25ac321dc1c26a88866177c3311905d63" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="ec095e0c355bf0b35438e96e34dcbdb534b549cf1e596cc685cc23d29129411c" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp151.2.10.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="1b724f236caed5768c228899d3c9708670022a1152d4c36015a444f3a0705099" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp151.2.10.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="97a6df0a59fbbeb6ca4fed7c07406cd0fe7734ba1e161e770a3877428cbec30e" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp151.2.18.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="8c6d0af6a25fd29dd374642153bc1dbd92158a99e08a4f84b9da5e050ffeca93" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp151.2.18.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="96ebf554dea22012cfa2cf69452cd15f5c857d6c7600f141666dd4015c126590" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.21.7" rel="lp151.2.14.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="c896ec7483febb41295109c28559cd1c42d558a733d36ee8035d15b036e96544" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.21.7" rel="lp151.2.14.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="71d0e7ee84ebc003e21bceef4a6473f6c080afdfa3c97fbaf5550c9d0e92c315" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="65a110c0fadc017d86e01dbc414c47a7a832f5d41a36b6ed030abd9e54670ce2" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="af045794bd530bdbb58947deb5b985540a299974081bf1ba2781cfb7363070a6" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="cccfe198acfa080fd28e018eeb1ff562fb47402ab3309aac762b12ae43a03423" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="25f60d7c604150067507b878f43012e727a1fdecbe759fe968290afcd4d4474a" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp151.2.10.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="3ef0808a870427472b2e480c9435660868ced09e23dee676144bb6e1a65b1bf0" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp151.2.10.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="2234624118b89b4979d5a2d8a6c915ce825f030ee01a61f44e0377eb1987b535" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp151.2.18.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="8bbedc01874fb9c2103f616c0f98d9a5828cf2ce5bf78c30ca992e9a61e6dc0e" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp151.2.18.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="4612f41d9b65e34166140460452962f6668f50edb7e475629cb390facb62aedc" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.21.7" rel="lp151.2.14.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="9637e23511415169060d77fd1d2857eaff314b821ed0fdc3097e28deaa0a6475" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.21.7" rel="lp151.2.14.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="4ac52301128950054db89c7aba747a3d1db9b9ff47adb2adfa983fa379510e00" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="294d6dffa459742e1da0218fa0f80c651b9d33a2519a50b0d0fb588d98f1af34" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="c8a6da23bd8fdeb213281322c00df4d4a5d02dd926a10224a4270d7bf847d58c" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="95fda659b0a098e98721c3064041002c42f271a70fc577a223e86104513ad631" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="a2d186272f31f8bb74f33851c07dae4cc229a18a016f5172f1ea63cb49336440" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp151.2.10.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="6bfa120ecd4eb345050966ba837dc0e757660e521b47572a57c4277e7f07727a" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp151.2.10.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="a7048d8ea99bbca10ffc385715a36ce58794545bc334a57868805d88d8679f4b" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp151.2.18.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="d5fff15b64c62ffea8407b3c833ff43dbb3d343bf1ec60cdd08ff2205bcde1cd" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp151.2.18.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="d91df09595f3c5d8df38c4007248ef742e143ae6ca6e82177b4d75e63e06ed5a" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.21.7" rel="lp151.2.14.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="f7e3763c14fcc4baac3e889d6662b34f11885a6295c2ceb2c54f357f474aeef2" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.21.7" rel="lp151.2.14.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="76b35dfc856a838dc5c105fbe5c918535e3c6ea6ce60567c470ad2f71394a9c5" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="088ed5cef33bd1fc70bd4d55cad0b8d30ce0425e3f33e5a2587ee4a73b80c98f" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="f48bae1bc33a7d64ded6828b2aabbfde02b26472ef5121ff767529968bdb53c7" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="32bad182a87e467d9310aa6046fca75a8eb55dc43f1634d8f053aafd6bcc76a1" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="85ae9f7533ef7a762b2db3b4a3939d425df0dd6e7568c68c2bfd08521b0e5b93" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp151.2.10.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="6606e8d8720c4828c6b7704d7d329f771ce39c7168dc413cb614db6507eda5ab" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp151.2.10.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="40b6167dc2c4ba20ae77e91f816f713b0201addf493f5ec02e49cb08bbcfd651" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp151.2.18.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="8320b4496efb600392078d90d1a90b5003c9ed257812520bf6d39e5c3fd68d43" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp151.2.18.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="cf3dfd98c89bbc1bd4155967ea58b3baa83b0e0ecf0a16dd0cbb69e682609233" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.21.7" rel="lp151.2.14.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="0be97e4efead484411981b0176726c3f1dc495e8f21095292b1527cb5cfa6b23" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.21.7" rel="lp151.2.14.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="f309d5c643dc8209bd0512391c689f309a61f3e332544dbdd518035a31cc32bb" name="dracut-tools" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.12.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
</package>
<package pkgid="a63d8ede7f0b2c1df69e08e01580af4a61f30f4fa01ed999c6df9caba2806971" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.12.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
</package>
<package pkgid="bcdc2a69cf0456b59eb2883bb5f22cd2589db959cdd6afddd396fb6f9bd7a637" name="dracut-tools" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.15.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
</package>
<package pkgid="254955f10a026ec96f26f27f26b74e408decce246c798f4ea2f2c60755d8e660" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.15.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
</package>
<package pkgid="f131f64283c81a50f7db587a622ec474e925ceb234531ae3e54d8ad0a82d7357" name="dracut-tools" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.18.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
</package>
<package pkgid="59400e120aac38281d5eeb5a0a8f8643dc204ec24054041a09b4fb590a3da2ec" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.18.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
</package>
<package pkgid="0d075f7aedc0fb031f50c2025a02fa97352887fd1fdc57d267b1004f3182ba75" name="dracut-tools" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.21.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
</package>
<package pkgid="a1440c2d5811dd1d2f9cb93893eaf8133cadea9c2979532ddf2ffb7a31ad7134" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.21.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
</package>
<package pkgid="5487f90a7e9e9faa4bee551ba3461217aa7f0ee3e5a19d4f755da5b137182f90" name="dracut-tools" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.24.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
</package>
<package pkgid="3dd9e66c6156883d28518965b1090802a7f76033117afd5a13d8f19ea64cba98" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.24.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
</package>
<package pkgid="04e36ddb0dbe764827b0cc7ea5e5a7a4c1a07dad52aa26a24ba8f4add06d927a" name="dracut-tools" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.27.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1596196800">- 40network: fix typo in did setup conditional (bsc#1172807)
  * add 0627-40network-fix-typo-in-did-setup-conditional.patch</changelog>
</package>
<package pkgid="ff122ee814a575ecb77afdb0721ad982858aa91a585f422fb3040cefc7df8f2e" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.27.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1573473600">- suppress error in %post when vconsole.conf is not present (bsc#1154043)</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1574942400">- fix DM_MULTIPATH_DEVICE_PATH in udev rules (bsc#1157795)
  * add 0618-modules.d-fix-udev-rules-detection-of-multipath-devi.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1582804800">- 01fips: Use correct kernel image name for more platforms (bsc#1164076)
  * Added 0619-01fips-Use-correct-kernel-image-name-for-more-platfo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1583236800">- 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * add 0620-01fips-handle-SHA1-on-machines-without-AVX.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902400">- dracut-init: downgrade module load failure to warning (bsc#1169997)
  * add 0621-dracut-init-downgrade-module-load-failure-to-warning.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587902401">- Backport - shutdown: guard against read-only /run (bsc#1167656)
  * add 0622-shutdown-guard-against-read-only-run.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587988800">- Backport upstream typo fix in dmsquash-live-root.sh so that
  FSIMG variable is correctly set (bsc#1165024)
  * add 0623-dmsquash-live-dmsquash-live-root.sh-fixed-typo.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1590494400">- 95iscsi&gt; handle not having a boot target (fixes boo#975267, resurfaced
  as bsc#1171388)
  * add 0624-Dracut-handle-not-having-a-boot-target.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1592481600">- fix dracut timeout on missing root device (bsc#1161573)
  add 0625-99base-enable-the-initqueue-in-both-dracut-add-devic.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594296000">- 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)
  * add 0626-35network-legacy-correct-conditional-for-creating-di.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1596196800">- 40network: fix typo in did setup conditional (bsc#1172807)
  * add 0627-40network-fix-typo-in-did-setup-conditional.patch</changelog>
</package>
<package pkgid="3b246bb3957c72b1bf34ea7b5714f79c2d0cc6c900abc04d53a88f7f9c6b4d28" name="dracut-tools" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="81ce445a5e17cc5075d009834e6ebe1ca57552d56a6999adac4fc0100e6706e7" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="58bbc2359b73397b2d62d054b4c54c4bdce5e8fbedf951829557750ad8c8bd36" name="dracut-tools" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="f19fc90316be861d52379ebdb3a7998ba09b237d2ec204d19a1fc85686ce5a31" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="ed519bd0ca09a28450bc1a93462fb432938ae901e323e97c63c4166e1b0e7dfd" name="dracut-tools" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="a684792393099e5855c19d0d375abdc1b45a572cbe327f94cbef07d3895cf603" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="ffcb00d250f47a9cfa44bd052e69e1b8a50657714d590ff362b92db950480d4a" name="drbd" arch="src">
  <version epoch="0" ver="9.0.16+git.ab9777df" rel="lp151.5.12.1"/>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1574683200">- bsc#1154084, backport fix of double call drbd_backing_device
  Add patch fix-potential-double-call-of-drbd_backing_devic.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582718400">- bsc#1164833, backport fix of spinlock deadlock of dev al
  Add patch spinlock_deadlock_dev_al_lock.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599480000">- bsc#1174783, backport fix of GFP flag to alloc memory(58dd62ef8)
  Add patch fix-GFP-flags-to-alloc-mem.patch</changelog>
</package>
<package pkgid="33203484fd3410e2429143e9506c3815b565c362f83d05a07b24d43c4771d3ac" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.16+git.ab9777df" rel="lp151.5.12.1"/>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1574683200">- bsc#1154084, backport fix of double call drbd_backing_device
  Add patch fix-potential-double-call-of-drbd_backing_devic.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582718400">- bsc#1164833, backport fix of spinlock deadlock of dev al
  Add patch spinlock_deadlock_dev_al_lock.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599480000">- bsc#1174783, backport fix of GFP flag to alloc memory(58dd62ef8)
  Add patch fix-GFP-flags-to-alloc-mem.patch</changelog>
</package>
<package pkgid="5736724149970582d249aef7c47d71806b207eb7f6f2f681a63ba7b3107db97d" name="drbd" arch="src">
  <version epoch="0" ver="9.0.16+git.ab9777df" rel="lp151.5.15.1"/>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1574683200">- bsc#1154084, backport fix of double call drbd_backing_device
  Add patch fix-potential-double-call-of-drbd_backing_devic.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582718400">- bsc#1164833, backport fix of spinlock deadlock of dev al
  Add patch spinlock_deadlock_dev_al_lock.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599480000">- bsc#1174783, backport fix of GFP flag to alloc memory(58dd62ef8)
  Add patch fix-GFP-flags-to-alloc-mem.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="4f002bb3558de33f6cb3fb7246cb9f62a400dacfd235dabcf711b010fcff2d40" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.16+git.ab9777df" rel="lp151.5.15.1"/>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1574683200">- bsc#1154084, backport fix of double call drbd_backing_device
  Add patch fix-potential-double-call-of-drbd_backing_devic.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582718400">- bsc#1164833, backport fix of spinlock deadlock of dev al
  Add patch spinlock_deadlock_dev_al_lock.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599480000">- bsc#1174783, backport fix of GFP flag to alloc memory(58dd62ef8)
  Add patch fix-GFP-flags-to-alloc-mem.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="afeb83fc4b8e8dca08d2cbc8ce87a46a4506d573d2fb6031597bd98f0ae89e55" name="drbd" arch="src">
  <version epoch="0" ver="9.0.16+git.ab9777df" rel="lp151.5.3.1"/>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
</package>
<package pkgid="533dc6e1dee7863297698474b13bd040538a5a2a4abbb8561cc9e46a1977f9c7" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.16+git.ab9777df" rel="lp151.5.3.1"/>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
</package>
<package pkgid="fc4917efa6675f699d8fde32f2db85c3cc5a35950e1ae486e7aff21d3da81345" name="drbd" arch="src">
  <version epoch="0" ver="9.0.16+git.ab9777df" rel="lp151.5.6.1"/>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1574683200">- bsc#1154084, backport fix of double call drbd_backing_device
  Add patch fix-potential-double-call-of-drbd_backing_devic.patch</changelog>
</package>
<package pkgid="846c041ade81a1ee3cfbca3d599af53964d8f7bc59d383464634a6ad5447938d" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.16+git.ab9777df" rel="lp151.5.6.1"/>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1574683200">- bsc#1154084, backport fix of double call drbd_backing_device
  Add patch fix-potential-double-call-of-drbd_backing_devic.patch</changelog>
</package>
<package pkgid="13762081ee6c8a0e1504837a8cbe9aa38cbb94483a81315879d5ff5e9e93632d" name="drbd" arch="src">
  <version epoch="0" ver="9.0.16+git.ab9777df" rel="lp151.5.9.1"/>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1574683200">- bsc#1154084, backport fix of double call drbd_backing_device
  Add patch fix-potential-double-call-of-drbd_backing_devic.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582718400">- bsc#1164833, backport fix of spinlock deadlock of dev al
  Add patch spinlock_deadlock_dev_al_lock.patch</changelog>
</package>
<package pkgid="92f9afc4b219ec197a370ff00725ad2fed6eb993b42c7ff974d493e9cf34173e" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.16+git.ab9777df" rel="lp151.5.9.1"/>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1574683200">- bsc#1154084, backport fix of double call drbd_backing_device
  Add patch fix-potential-double-call-of-drbd_backing_devic.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582718400">- bsc#1164833, backport fix of spinlock deadlock of dev al
  Add patch spinlock_deadlock_dev_al_lock.patch</changelog>
</package>
<package pkgid="982f730f879cf4563f04f364e5058301fa557a070aecaebd298f27a44fb19a3b" name="drbd-formula" arch="noarch">
  <version epoch="0" ver="0.3.7" rel="lp151.2.1"/>
  <changelog author="nwang@suse.com" date="1557748800">- Initial version</changelog>
  <changelog author="nwang@suse.com" date="1557921600">- Version 0.2.0
  * Add description in pillar.example.
  * Support more parameters in global_common.conf
  * Fix bugs in initial sync.
  * Add promote/demote state.
  * Use grains['host'] for primary node.
- Basic manual test PASSED</changelog>
  <changelog author="nwang@suse.com" date="1559736000">- Version 0.2.1
  * Polish the README
  * Add travis file for auto package to obs
  * Change node names in example
  * Modify state ID to avoid conflict of other formulas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1561377600">- Version 0.2.2
  * Support make file system after initialization
  * Support mount to specific folder
  * Add habootstrap-formula pillar/tempalte</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1562587200">- Version 0.3.0, jsc#SLE-6970
  * Move to SUSE org
  * Add SUSE manager support</changelog>
  <changelog author="Diego Akechi &lt;dakechi@suse.com&gt;" date="1563796800">- Version 0.3.1
  * Change the requires to salt-formulas-configuration as this is
    the virtual "provides" shared by salt and SUMA to guarantee that
    the formula works integrated with both (not at the same time).
    (boo#1142306)
  * Change the directory permission to avoid file conflicts with
    SUMA.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1564056000">- Version 0.3.2, boo#1142762
  * Restructure the deploy and examples directories
  * Add examples of using NFS formula
  * Fix the issue of mkfs and mount NFS share
  * Polish the form.yml based on SUMA4.0, change some default values.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1565179200">- Version 0.3.3
  * Add prefix to ID to avoid conflicts
  * Install xfsprogs when need to format xfs</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
</package>
<package pkgid="1648f4d02a6166befe363cf2f338354b93a9eb3b52912d064d0bec4c602592f4" name="drbd-formula" arch="src">
  <version epoch="0" ver="0.3.7" rel="lp151.2.1"/>
  <changelog author="nwang@suse.com" date="1557748800">- Initial version</changelog>
  <changelog author="nwang@suse.com" date="1557921600">- Version 0.2.0
  * Add description in pillar.example.
  * Support more parameters in global_common.conf
  * Fix bugs in initial sync.
  * Add promote/demote state.
  * Use grains['host'] for primary node.
- Basic manual test PASSED</changelog>
  <changelog author="nwang@suse.com" date="1559736000">- Version 0.2.1
  * Polish the README
  * Add travis file for auto package to obs
  * Change node names in example
  * Modify state ID to avoid conflict of other formulas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1561377600">- Version 0.2.2
  * Support make file system after initialization
  * Support mount to specific folder
  * Add habootstrap-formula pillar/tempalte</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1562587200">- Version 0.3.0, jsc#SLE-6970
  * Move to SUSE org
  * Add SUSE manager support</changelog>
  <changelog author="Diego Akechi &lt;dakechi@suse.com&gt;" date="1563796800">- Version 0.3.1
  * Change the requires to salt-formulas-configuration as this is
    the virtual "provides" shared by salt and SUMA to guarantee that
    the formula works integrated with both (not at the same time).
    (boo#1142306)
  * Change the directory permission to avoid file conflicts with
    SUMA.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1564056000">- Version 0.3.2, boo#1142762
  * Restructure the deploy and examples directories
  * Add examples of using NFS formula
  * Fix the issue of mkfs and mount NFS share
  * Polish the form.yml based on SUMA4.0, change some default values.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1565179200">- Version 0.3.3
  * Add prefix to ID to avoid conflicts
  * Install xfsprogs when need to format xfs</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
</package>
<package pkgid="615d377dcdc5ea1efe87664526aad45460d4e908cbc779d2f420373a6b9ec580" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.16+git.ab9777df_k4.12.14_lp151.28.16" rel="lp151.5.3.1"/>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
</package>
<package pkgid="145074cad8767732f1db0e387b123b78d75e5f5884df6eabde4b73e8d6d6dc30" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.16+git.ab9777df_k4.12.14_lp151.28.36" rel="lp151.5.6.1"/>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1574683200">- bsc#1154084, backport fix of double call drbd_backing_device
  Add patch fix-potential-double-call-of-drbd_backing_devic.patch</changelog>
</package>
<package pkgid="28e206e610acb9742a0f35e15c239ed8159bcadaa7b2d3236f478fc95258bb0a" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.16+git.ab9777df_k4.12.14_lp151.28.36" rel="lp151.5.9.1"/>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1574683200">- bsc#1154084, backport fix of double call drbd_backing_device
  Add patch fix-potential-double-call-of-drbd_backing_devic.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582718400">- bsc#1164833, backport fix of spinlock deadlock of dev al
  Add patch spinlock_deadlock_dev_al_lock.patch</changelog>
</package>
<package pkgid="d1193cf7c3a272f843fae59f21ad6da5e1f539a383c29c3f212528ba2f545136" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.16+git.ab9777df_k4.12.14_lp151.28.67" rel="lp151.5.12.1"/>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1574683200">- bsc#1154084, backport fix of double call drbd_backing_device
  Add patch fix-potential-double-call-of-drbd_backing_devic.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582718400">- bsc#1164833, backport fix of spinlock deadlock of dev al
  Add patch spinlock_deadlock_dev_al_lock.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599480000">- bsc#1174783, backport fix of GFP flag to alloc memory(58dd62ef8)
  Add patch fix-GFP-flags-to-alloc-mem.patch</changelog>
</package>
<package pkgid="0c535b61827f1d031165053bfbb5d9dd8d4b7263e61023d4a3af222c3dc9413b" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.16+git.ab9777df_k4.12.14_lp151.28.79" rel="lp151.5.15.1"/>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1574683200">- bsc#1154084, backport fix of double call drbd_backing_device
  Add patch fix-potential-double-call-of-drbd_backing_devic.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582718400">- bsc#1164833, backport fix of spinlock deadlock of dev al
  Add patch spinlock_deadlock_dev_al_lock.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599480000">- bsc#1174783, backport fix of GFP flag to alloc memory(58dd62ef8)
  Add patch fix-GFP-flags-to-alloc-mem.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="fdd8a2783b141dd24d831e88906e26cc32087cee8a674aa05a2aef56fcef0037" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.6.0" rel="lp151.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1503662400">- fate#323392, enable drbdmon which imported in 8.9.10</changelog>
  <changelog author="nwang@suse.com" date="1504267200">- Update to 9.1.0
  * allow events2 --now polling
  * fix ambiguous inheritance for peer-device-options
  * fixup fallback path for BLKZEROOUT for older kernels
  * fix v9 proxy support
  * modernized XEN scripts
  * reproducible builds support
  * create-md --force for v8.4 (for compat to v9)
  * fix cstate output
  * resize: give resize more time (same as attach)
  * drbdmon: peer-device status, version info, node name
  * "drbdadm status" for v8.4
  * set peer-device-options only once
- Remove Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1508155200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.2.0
  * Japanese man pages
  * initial vertias cluster agent support
  * quorum integration (including agents)
  * improve drbd9 (mesh)/drbd-proxy integration
  * pull fixups from 9.1.1 branch
  * switch to github
  * drbdmon: page naviagation
  * debian: add mount as dependency</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
</package>
<package pkgid="e5fb0de387afa11bf4ad9585d9b199aef54585090cbedd35f257bb1d413112be" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.6.0" rel="lp151.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1503662400">- fate#323392, enable drbdmon which imported in 8.9.10</changelog>
  <changelog author="nwang@suse.com" date="1504267200">- Update to 9.1.0
  * allow events2 --now polling
  * fix ambiguous inheritance for peer-device-options
  * fixup fallback path for BLKZEROOUT for older kernels
  * fix v9 proxy support
  * modernized XEN scripts
  * reproducible builds support
  * create-md --force for v8.4 (for compat to v9)
  * fix cstate output
  * resize: give resize more time (same as attach)
  * drbdmon: peer-device status, version info, node name
  * "drbdadm status" for v8.4
  * set peer-device-options only once
- Remove Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1508155200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.2.0
  * Japanese man pages
  * initial vertias cluster agent support
  * quorum integration (including agents)
  * improve drbd9 (mesh)/drbd-proxy integration
  * pull fixups from 9.1.1 branch
  * switch to github
  * drbdmon: page naviagation
  * debian: add mount as dependency</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
</package>
<package pkgid="02c137d4fcc92dae4d8cf048b0487c7266794932078077939b5f9e0eb7b5291c" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.6.0" rel="lp151.2.6.1"/>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1503662400">- fate#323392, enable drbdmon which imported in 8.9.10</changelog>
  <changelog author="nwang@suse.com" date="1504267200">- Update to 9.1.0
  * allow events2 --now polling
  * fix ambiguous inheritance for peer-device-options
  * fixup fallback path for BLKZEROOUT for older kernels
  * fix v9 proxy support
  * modernized XEN scripts
  * reproducible builds support
  * create-md --force for v8.4 (for compat to v9)
  * fix cstate output
  * resize: give resize more time (same as attach)
  * drbdmon: peer-device status, version info, node name
  * "drbdadm status" for v8.4
  * set peer-device-options only once
- Remove Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1508155200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.2.0
  * Japanese man pages
  * initial vertias cluster agent support
  * quorum integration (including agents)
  * improve drbd9 (mesh)/drbd-proxy integration
  * pull fixups from 9.1.1 branch
  * switch to github
  * drbdmon: page naviagation
  * debian: add mount as dependency</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1584014400">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
  Add patch crm-fence-peer-pacemaker2.patch
  Modify patch cibadmin-return-code-convert.patch with upstream ver</changelog>
</package>
<package pkgid="72e4d86664dddff7fbb33bf84ba8401a9b04029e00db1e429b0410b30f958097" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.6.0" rel="lp151.2.6.1"/>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1503662400">- fate#323392, enable drbdmon which imported in 8.9.10</changelog>
  <changelog author="nwang@suse.com" date="1504267200">- Update to 9.1.0
  * allow events2 --now polling
  * fix ambiguous inheritance for peer-device-options
  * fixup fallback path for BLKZEROOUT for older kernels
  * fix v9 proxy support
  * modernized XEN scripts
  * reproducible builds support
  * create-md --force for v8.4 (for compat to v9)
  * fix cstate output
  * resize: give resize more time (same as attach)
  * drbdmon: peer-device status, version info, node name
  * "drbdadm status" for v8.4
  * set peer-device-options only once
- Remove Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1508155200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.2.0
  * Japanese man pages
  * initial vertias cluster agent support
  * quorum integration (including agents)
  * improve drbd9 (mesh)/drbd-proxy integration
  * pull fixups from 9.1.1 branch
  * switch to github
  * drbdmon: page naviagation
  * debian: add mount as dependency</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1584014400">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
  Add patch crm-fence-peer-pacemaker2.patch
  Modify patch cibadmin-return-code-convert.patch with upstream ver</changelog>
</package>
<package pkgid="0e5727b86044373a2be4f5cce95688b28421e514603feed5081b7d9165422ebf" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.6.0" rel="lp151.2.9.1"/>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1503662400">- fate#323392, enable drbdmon which imported in 8.9.10</changelog>
  <changelog author="nwang@suse.com" date="1504267200">- Update to 9.1.0
  * allow events2 --now polling
  * fix ambiguous inheritance for peer-device-options
  * fixup fallback path for BLKZEROOUT for older kernels
  * fix v9 proxy support
  * modernized XEN scripts
  * reproducible builds support
  * create-md --force for v8.4 (for compat to v9)
  * fix cstate output
  * resize: give resize more time (same as attach)
  * drbdmon: peer-device status, version info, node name
  * "drbdadm status" for v8.4
  * set peer-device-options only once
- Remove Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1508155200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.2.0
  * Japanese man pages
  * initial vertias cluster agent support
  * quorum integration (including agents)
  * improve drbd9 (mesh)/drbd-proxy integration
  * pull fixups from 9.1.1 branch
  * switch to github
  * drbdmon: page naviagation
  * debian: add mount as dependency</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1584014400">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
  Add patch crm-fence-peer-pacemaker2.patch
  Modify patch cibadmin-return-code-convert.patch with upstream ver</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
</package>
<package pkgid="d7734f9bf1c8c3da2452021d049b753fdff9beb802dbaf42136361b25b7ba84a" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.6.0" rel="lp151.2.9.1"/>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1503662400">- fate#323392, enable drbdmon which imported in 8.9.10</changelog>
  <changelog author="nwang@suse.com" date="1504267200">- Update to 9.1.0
  * allow events2 --now polling
  * fix ambiguous inheritance for peer-device-options
  * fixup fallback path for BLKZEROOUT for older kernels
  * fix v9 proxy support
  * modernized XEN scripts
  * reproducible builds support
  * create-md --force for v8.4 (for compat to v9)
  * fix cstate output
  * resize: give resize more time (same as attach)
  * drbdmon: peer-device status, version info, node name
  * "drbdadm status" for v8.4
  * set peer-device-options only once
- Remove Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1508155200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.2.0
  * Japanese man pages
  * initial vertias cluster agent support
  * quorum integration (including agents)
  * improve drbd9 (mesh)/drbd-proxy integration
  * pull fixups from 9.1.1 branch
  * switch to github
  * drbdmon: page naviagation
  * debian: add mount as dependency</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1584014400">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
  Add patch crm-fence-peer-pacemaker2.patch
  Modify patch cibadmin-return-code-convert.patch with upstream ver</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
</package>
<package pkgid="33918fbb0dccccd5793f0107c9cc0ddf00add18b8d294c9298b5b3504ccb1846" name="e2fsprogs" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.12.1"/>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
</package>
<package pkgid="98de8a4010c455d8e4c5aadae40a848393d481071547199be607acf473a438a5" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp151.5.12.1"/>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
</package>
<package pkgid="6babeab865a74ac50663585541871965d120908540ae863ca0454abcef9e4932" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.12.1"/>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
</package>
<package pkgid="b8e858aa409d16ad9658dcd257fbe8d7e12328bc2116a75caa270bfd392c37ec" name="e2fsprogs" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.15.1"/>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
</package>
<package pkgid="55e88e81ea9eac8804e9c3577f73055df5f06195b792ae5826f0ed3c850cc38a" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp151.5.15.1"/>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
</package>
<package pkgid="2fcc9126b357b5bde1d6b685fae2c3463ed7f97ab7d34f49f180c53a6b5dd953" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.15.1"/>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
</package>
<package pkgid="0849e3b51d934fd461b5023586d32326ac4ad2e16eec78b7382743c7446f79de" name="e2fsprogs" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.18.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="aefebb850f61077d1f8fa74c71617075374231f07ef43a5eff014e1e1df30eb5" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp151.5.18.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="89c259db14b291b35ce059f806f3d4620a814989e91368ce66bab8191285004a" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.18.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="8ea183d6ff57e9db780b302e644efd71dae6cd0b305a70b409392ce0213f6b7e" name="e2fsprogs" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="0137324c0c0cb10bdd0e9f8f6219cad68a3337d3d1b352a41d5d53c506ac6d86" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="c6da6575f7cab5f00095e85ae5d64f906ac29f372ff5900198b168d9d9596748" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="f9aa12a03eddc9c99ebada2471d1df15862f63a98dad05b7bb02bf50e6665372" name="e2fsprogs" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="08bbd4af46542ddb730e3950acf29dbdfc65d82c61384ce5e00bd862d1410ee9" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="fd34c8635c03a1d65d705ff22c578852ae50d4d18fa41aaf3388269d41119b94" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="5375db487457952e985e7625726d91f12f80447d6159ea93e27644b856954e3d" name="e2fsprogs" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
</package>
<package pkgid="5992d2c74c4798ae7543ad35733305b84e78c9bf2a7842fb167c7acd54e12b95" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp151.5.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
</package>
<package pkgid="2f1fc87e1c7c980827a0d2edbac83799bb814c6d6f6069693d83a6d851a92f98" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
</package>
<package pkgid="245c2987e2932e786574aacd3a3177cea434858beb3e3581149aacd25c2b7691" name="e2fsprogs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.12.1"/>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
</package>
<package pkgid="d125daaa1629df44679945cae93452137606b40e9d2df1ae1c75e50d324463d5" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.12.1"/>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
</package>
<package pkgid="7c21a6061eeccbdb1376edf35ef017dccbd75056a74de670827364b339b11e1c" name="e2fsprogs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.15.1"/>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
</package>
<package pkgid="5a882abab02a6b7c6eb7572881df5ba60bcc38ee7c18048d49ef1329cf038ec8" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.15.1"/>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
</package>
<package pkgid="3c2e9f6403eb97130ed6c7e27c0bb5e16856868f1cb7d608aacd5bdb85375ca2" name="e2fsprogs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.18.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="12ab46fe225cf2dd692f737e44fc0f9a0a4cbe6fdf07de7ab6953f80df14b146" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.18.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="61a074642fe64bf83214b8df9f05b7e452b64c7f77595f7306785e30b349bcfd" name="e2fsprogs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="eaa3e1b544ebfdce867e30d6a42acba50e22a3199553a5aa6d17f8484a84aad2" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="a4271f68e2b49c474a4965f603d41df763c4e28cb080cd580c82a58775b087f0" name="e2fsprogs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="67757929ac70c815959f6b905bdcc1fae17075eb0ee704fe35e4507d1bb475ab" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="4a78210110e41a96a9f1a9ac3aa9f9afe8b1af61071fd34505000499f6785851" name="e2fsprogs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
</package>
<package pkgid="0cc1ca5c3ea2f38f6681cab4d5d87674338342917594dcfc74055436b83e0e24" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
</package>
<package pkgid="af18f5171234f3706404f1ec75f5680985c65a8847a0be215605c3bdac7f81f8" name="ebook-tools" arch="i586">
  <version epoch="0" ver="0.2.2" rel="lp151.3.3.1"/>
  <changelog author="llunak@suse.cz" date="1248264000">- build fixes</changelog>
  <changelog author="ctrippe@gmx.net" date="1284120000">- update to new version 0.2.0
  This release contains major bug fixes.
  Among them crash bugs/security bugs.
  Update recommended</changelog>
  <changelog author="coolo@novell.com" date="1300881600">- update to 0.2.1:
  installs epub_version.h now
- fix build with libzip</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325160000">- Use GCC visibility, which shrinks the symbol table
  to less than a half of the actually size</changelog>
  <changelog author="tchvatal@suse.com" date="1373976000">- xz was added to buildrequires and it was formatted.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381579200">- Update to 0.2.2 (bnc#845629, kde#325909)
  * Bugfix release, no upstream changelog provided</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1401883200">- Add baselibs.conf</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1556625600">- Fix a crash when a navPoint in toc.ncx has no navLabel, see
  kde#406116 and https://sourceforge.net/p/ebook-tools/bugs/8/
  * add 0001-Avoid-crash-on-toc-navPoint-without-navLabel.patch
- specfile cleanup, remove %defattr, add LICENSE</changelog>
</package>
<package pkgid="b4de8d22f959adedba2f2ea9703e0ad7e687cc3b9314b97db7925d8c9c203dee" name="ebook-tools" arch="src">
  <version epoch="0" ver="0.2.2" rel="lp151.3.3.1"/>
  <changelog author="llunak@suse.cz" date="1248264000">- build fixes</changelog>
  <changelog author="ctrippe@gmx.net" date="1284120000">- update to new version 0.2.0
  This release contains major bug fixes.
  Among them crash bugs/security bugs.
  Update recommended</changelog>
  <changelog author="coolo@novell.com" date="1300881600">- update to 0.2.1:
  installs epub_version.h now
- fix build with libzip</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325160000">- Use GCC visibility, which shrinks the symbol table
  to less than a half of the actually size</changelog>
  <changelog author="tchvatal@suse.com" date="1373976000">- xz was added to buildrequires and it was formatted.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381579200">- Update to 0.2.2 (bnc#845629, kde#325909)
  * Bugfix release, no upstream changelog provided</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1401883200">- Add baselibs.conf</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1556625600">- Fix a crash when a navPoint in toc.ncx has no navLabel, see
  kde#406116 and https://sourceforge.net/p/ebook-tools/bugs/8/
  * add 0001-Avoid-crash-on-toc-navPoint-without-navLabel.patch
- specfile cleanup, remove %defattr, add LICENSE</changelog>
</package>
<package pkgid="052db716095391db3a40f5350920476479853854a7fd35c4658b4e6a5a20a70d" name="ebook-tools" arch="x86_64">
  <version epoch="0" ver="0.2.2" rel="lp151.3.3.1"/>
  <changelog author="llunak@suse.cz" date="1248264000">- build fixes</changelog>
  <changelog author="ctrippe@gmx.net" date="1284120000">- update to new version 0.2.0
  This release contains major bug fixes.
  Among them crash bugs/security bugs.
  Update recommended</changelog>
  <changelog author="coolo@novell.com" date="1300881600">- update to 0.2.1:
  installs epub_version.h now
- fix build with libzip</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325160000">- Use GCC visibility, which shrinks the symbol table
  to less than a half of the actually size</changelog>
  <changelog author="tchvatal@suse.com" date="1373976000">- xz was added to buildrequires and it was formatted.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381579200">- Update to 0.2.2 (bnc#845629, kde#325909)
  * Bugfix release, no upstream changelog provided</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1401883200">- Add baselibs.conf</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1556625600">- Fix a crash when a navPoint in toc.ncx has no navLabel, see
  kde#406116 and https://sourceforge.net/p/ebook-tools/bugs/8/
  * add 0001-Avoid-crash-on-toc-navPoint-without-navLabel.patch
- specfile cleanup, remove %defattr, add LICENSE</changelog>
</package>
<package pkgid="a79643bbb3d65497178e6b45f5f8a86cba3e135fdfb6ce1cb6d9edee017a419d" name="ebtables" arch="i586">
  <version epoch="0" ver="2.0.10.4" rel="lp151.5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
</package>
<package pkgid="8faf49d3bb80ad167448199e1e790892612eb4d5466732b6789ddac36b2edba8" name="ebtables" arch="src">
  <version epoch="0" ver="2.0.10.4" rel="lp151.5.3.1"/>
  <changelog author="lnussel@suse.de" date="1306843200">- cleanup up initscript
  * don't use /var/lock/subsys
  * read /etc/sysconfig/ebtables for setting and restore state from
    /etc/ebtables where the script actually saved the state to.</changelog>
  <changelog author="puzel@novell.com" date="1307361600">- update to 2.0.9-2
  * fix unwanted zeroing of counters in the last user-defined chain
  * fix hidden symbol compilation error when using ld directly
  * fix return value checking of creat to give a correct error
    message if the atomic file couldn't be created
  * correct info in INSTALL about compilation of ulog
- use spec-cleaner
- update ebtables-v2.0.8-makefile.diff
- license is GPLv2, not GPLv2+
- package COPYING and ChangeLog files</changelog>
  <changelog author="jengelh@medozas.de" date="1310299200">- update to 2.0.10.1
  * fix --among-dst-file, which translated to --among-src
  * Makefile: respect LDFLAGS during ebtables build
  * Makefile: create directories to avoid build failure when DESTDIR
  is supplied
  * incorporate fixes for possible issues found by Coverity analysis
  * extend ebt_ip6 to allow matching on ipv6-icmp types/codes
  * add --concurrent option, which enables using a file lock to
  support concurrent scripts updating the ebtables kernel tables
- run spec-beautifier over specfile</changelog>
  <changelog author="jengelh@medozas.de" date="1313064000">- Update to new upstream release 2.0.10.2
  * minor compilation fixes: respect LDFLAGS in Makefiles
- Remove obsolete ebtables-typepuns.diff patch (fixed upstream)</changelog>
  <changelog author="jengelh@medozas.de" date="1323000000">- Update to new upstream release 2.0.10.3
  * fix a counter setting bug</changelog>
  <changelog author="jengelh@medozas.de" date="1323950400">- Update to new upstream release 2.0.10.4
  * previous counter bug was still present and has been addressed now</changelog>
  <changelog author="jengelh@inai.de" date="1355918400">- Have build succeed on non-SUSE</changelog>
  <changelog author="vcizek@suse.com" date="1393588800">- add missing BuildRequires: sed (bnc#865848)</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Remove support for old distros from specfile
  (prjconf can do substitutions instead)</changelog>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
</package>
<package pkgid="940fad71e69e9ce7946ebd2a8b661915b3c215b51239153c082723bf88401701" name="ebtables" arch="x86_64">
  <version epoch="0" ver="2.0.10.4" rel="lp151.5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
</package>
<package pkgid="340980155eb5f21f49102c1ee90986ae2c1bafadc8044f3fdfc3c8bfabdf3e95" name="ebtables" arch="i586">
  <version epoch="0" ver="2.0.10.4" rel="lp151.5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1575979200">- Add upstream patches which improve handling stale locks.
  (boo#1126094)
  * 0001-Use-flock-for-concurrent-option.patch
  * 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch</changelog>
</package>
<package pkgid="574bc2e3e7750dda426a0168254b2520eaccde19e074cddb3c318005d6a6f441" name="ebtables" arch="src">
  <version epoch="0" ver="2.0.10.4" rel="lp151.5.6.1"/>
  <changelog author="puzel@novell.com" date="1307361600">- update to 2.0.9-2
  * fix unwanted zeroing of counters in the last user-defined chain
  * fix hidden symbol compilation error when using ld directly
  * fix return value checking of creat to give a correct error
    message if the atomic file couldn't be created
  * correct info in INSTALL about compilation of ulog
- use spec-cleaner
- update ebtables-v2.0.8-makefile.diff
- license is GPLv2, not GPLv2+
- package COPYING and ChangeLog files</changelog>
  <changelog author="jengelh@medozas.de" date="1310299200">- update to 2.0.10.1
  * fix --among-dst-file, which translated to --among-src
  * Makefile: respect LDFLAGS during ebtables build
  * Makefile: create directories to avoid build failure when DESTDIR
  is supplied
  * incorporate fixes for possible issues found by Coverity analysis
  * extend ebt_ip6 to allow matching on ipv6-icmp types/codes
  * add --concurrent option, which enables using a file lock to
  support concurrent scripts updating the ebtables kernel tables
- run spec-beautifier over specfile</changelog>
  <changelog author="jengelh@medozas.de" date="1313064000">- Update to new upstream release 2.0.10.2
  * minor compilation fixes: respect LDFLAGS in Makefiles
- Remove obsolete ebtables-typepuns.diff patch (fixed upstream)</changelog>
  <changelog author="jengelh@medozas.de" date="1323000000">- Update to new upstream release 2.0.10.3
  * fix a counter setting bug</changelog>
  <changelog author="jengelh@medozas.de" date="1323950400">- Update to new upstream release 2.0.10.4
  * previous counter bug was still present and has been addressed now</changelog>
  <changelog author="jengelh@inai.de" date="1355918400">- Have build succeed on non-SUSE</changelog>
  <changelog author="vcizek@suse.com" date="1393588800">- add missing BuildRequires: sed (bnc#865848)</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Remove support for old distros from specfile
  (prjconf can do substitutions instead)</changelog>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1575979200">- Add upstream patches which improve handling stale locks.
  (boo#1126094)
  * 0001-Use-flock-for-concurrent-option.patch
  * 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch</changelog>
</package>
<package pkgid="9208e3a7fbd027a5ee34025a3548205fcfa68682fb038ddb311c513c53aa2bc0" name="ebtables" arch="x86_64">
  <version epoch="0" ver="2.0.10.4" rel="lp151.5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1575979200">- Add upstream patches which improve handling stale locks.
  (boo#1126094)
  * 0001-Use-flock-for-concurrent-option.patch
  * 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch</changelog>
</package>
<package pkgid="d98e44cff1e60df0e1d67988ed32c14550be18f7eb7813d21e6752a184366c3d" name="editorconfig" arch="i586">
  <version epoch="0" ver="0.12.1" rel="lp151.4.3.1"/>
  <changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
  <changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1598616000">- Add patch to fix crash when parsing certain files (boo#1175824):
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
</package>
<package pkgid="b41d2f06104ba475eb629807f54e69639c5de047c126261e77cf1d9744c51be4" name="editorconfig" arch="x86_64">
  <version epoch="0" ver="0.12.1" rel="lp151.4.3.1"/>
  <changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
  <changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1598616000">- Add patch to fix crash when parsing certain files (boo#1175824):
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
</package>
<package pkgid="2cd75ae78db413afc5dab6bd3edfa62d13a7df7553ccd2ba90f898add3b0206d" name="editorconfig-core-c" arch="src">
  <version epoch="0" ver="0.12.1" rel="lp151.4.3.1"/>
  <changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
  <changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1598616000">- Add patch to fix crash when parsing certain files (boo#1175824):
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
</package>
<package pkgid="27f263c082163c46ff8753423d22bf2b4c5991f35d11cf77f1b0a9e799d00ce2" name="efivar" arch="i586">
  <version epoch="0" ver="37" rel="lp151.2.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
</package>
<package pkgid="cc6ca559dad30c687ecb6c7e263ac18d168b4664915ebee08a6321156116d559" name="efivar" arch="src">
  <version epoch="0" ver="37" rel="lp151.2.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
</package>
<package pkgid="fb8574cb2d16195e71e57624d7bfdb7a7d9d1ae0c0d08c4dd666450546b071c2" name="efivar" arch="x86_64">
  <version epoch="0" ver="37" rel="lp151.2.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
</package>
<package pkgid="e96dc0634dedc8aaf88706aebeb960eb8ed4b5081c5ead81945cac7cb39e39ed" name="efivar" arch="i586">
  <version epoch="0" ver="37" rel="lp151.2.6.1"/>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
</package>
<package pkgid="cb9e2b56468f79952cfa4ef7b66594d271c3059305f723566fe300e0fbf3254d" name="efivar" arch="src">
  <version epoch="0" ver="37" rel="lp151.2.6.1"/>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
</package>
<package pkgid="2e0e67998ac9da768ea4a361831525f4b778849c532a52b86a4128f84c8267f6" name="efivar" arch="x86_64">
  <version epoch="0" ver="37" rel="lp151.2.6.1"/>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
</package>
<package pkgid="782e9f9a8802a45fd9541b734ab619974f60e3932b06837478b39e00171d188a" name="efivar-devel" arch="i586">
  <version epoch="0" ver="37" rel="lp151.2.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
</package>
<package pkgid="1bb0184c0d8febada503fe7ea95aeecadca429e39e8d1557ff1e64c342f58ac0" name="efivar-devel" arch="x86_64">
  <version epoch="0" ver="37" rel="lp151.2.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
</package>
<package pkgid="3370041f7c39977125f5d850949df26aa4d261e23f672b615215e5ee4430287c" name="efivar-devel" arch="i586">
  <version epoch="0" ver="37" rel="lp151.2.6.1"/>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
</package>
<package pkgid="48c84a84b5585dde0979a27e607698f461b27fc39e64746456e4f28c80ac654c" name="efivar-devel" arch="x86_64">
  <version epoch="0" ver="37" rel="lp151.2.6.1"/>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
</package>
<package pkgid="1b6b890e18d1c015bdd5576e26952f7fea0a0158e65d839cafdfb4bdb9adf581" name="eiciel" arch="src">
  <version epoch="0" ver="0.9.12.1" rel="lp151.3.3.1"/>
  <changelog author="jpr@suse.de" date="1204632000">- Update to 0.9.5.1
  * Make help launching more robust</changelog>
  <changelog author="maw@suse.de" date="1221220800">- Update to version 0.9.6.1:
  + Minor bugfixes.</changelog>
  <changelog author="mauro@suse.de" date="1228564800">- Updated translations.</changelog>
  <changelog author="mauro@suse.de" date="1231761600">- Translations update.</changelog>
  <changelog author="vuntz@novell.com" date="1236600000">- Drop eiciel-gcc4.3-fixes.patch: it's not used, and if it's not
  needed anymore, we can drop it.
- Remove AutoReqProv: it's default now.
- Remove check for old version of openSUSE.
- Remove unneeded BuildRequires: gnome-desktop-devel, gnutls-devel,
  libglade2-devel, libgnomeprintui-devel, libwnck-devel,
  perl-XML-Parser, update-desktop-files.
- Add BuildRequires to fix build: libgnomeui-devel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1277121600">- Update to version 0.9.7:
  + This is a catch-up with all the Debian patches
  + Source code has been translated to english to facilitate the
    start for new contributors</changelog>
  <changelog author="dimstar@opensuse.org" date="1280923200">- Update to version 0.9.8:
  + Various bugfixes
  + Translation updates.
- Drop unused patch: eiciel-library-packaging.patch
- Supplement nautilus and eiciel with nautilus-eiciel.
- AUTHORS is non-executable.</changelog>
  <changelog author="vuntz@opensuse.org" date="1297598400">- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.
- Change Requires of lang subpackage to Recommends, since the
  english documentation is not there anymore.</changelog>
  <changelog author="sbrabec@suse.cz" date="1297684800">- Translations migrated to translation-update-upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1306065600">- Update to version 0.9.8.1:
  + Allow building against GNOME 3 libraries.
- Pass --disable-static to configure
- Remove --with-nautilus-extensions-dir from configure: it is
  correctly detected based on the libnautilus-extension.pc file.
- Build based on gtk2_favor either for gnome2 or for gnome3
- Add BuildRequires for gnome 3 build:
  + pkgconfig(gtkmm-3.0)
  + pkgconfig(libnautilus-extension) =&gt; 3.0.0
- Change BuildRequires for gnome2 build to pkgconfig()-style:
  + Old ones: gtkmm24-devel, libnautilus-devel
  + New ones: gtkmm-2.4, libnautilus.extension</changelog>
  <changelog author="vuntz@opensuse.org" date="1306929600">- Do not fail to build if %gtk2_favor is not defined: just use
  0%{?gtk2_favor}.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 0.9.8.2:
  + Fix for ineffective permissions not correctly rendered in
    GNOME 3.
- Remove hack to remove executable bit from Authors: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1407499200">- Update to version 0.9.8.3:
  + This version does not include any new feature but better
    integration with PackageKit.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 0.9.9:
  + A new filter box
  + Several changes in the UI to make it a bit more consistent with
    the GNOME HIG.
  + Help has been ported from DocBook to Mallard.</changelog>
  <changelog author="gour@atmarama.net" date="1444392000">- Update to version 0.9.11:
  + Updated translations.
- Changes from version 0.9.10:
  + Fixes a problem with GTK+3.14 where checkboxes in the Access
    Control List were not properly rendered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463054400">- Do not delete the .desktop file. It is needed for AppStream
  processes to have a valid reference.
- Add update-desktop-files BuildRequires.
- Change Categories of eiciel.desktop to System;Filesystem.</changelog>
  <changelog author="fcrozat@suse.com" date="1502452800">- Remove BuildRequires on libgnomeui-devel and conditional build
  against gtk2.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 0.9.12.1:
  + Fix desktop file.
- Changes from version 0.9.12:
  + Updates for better integration with AppStream.
- Adopt the use of %make_install rather than raw make command,
  following the best practices.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Conditionalize translation-update-upstream BuildRequires use as
  it's a SLE-only requirement.
- Drop intltool BuildRequires: since upstream migrated to Gettext
  it's no longer needed anymore.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587729600">- Enable translation-update-upstream for both SLE and openSUSE
  (bsc#1170756, jsc#SLE-11889).</changelog>
</package>
<package pkgid="37231b88b3478cba0739e3728de4770106f28261b5dcfb92f4daf48edc9339ee" name="eiciel" arch="x86_64">
  <version epoch="0" ver="0.9.12.1" rel="lp151.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1306929600">- Do not fail to build if %gtk2_favor is not defined: just use
  0%{?gtk2_favor}.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 0.9.8.2:
  + Fix for ineffective permissions not correctly rendered in
    GNOME 3.
- Remove hack to remove executable bit from Authors: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1407499200">- Update to version 0.9.8.3:
  + This version does not include any new feature but better
    integration with PackageKit.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 0.9.9:
  + A new filter box
  + Several changes in the UI to make it a bit more consistent with
    the GNOME HIG.
  + Help has been ported from DocBook to Mallard.</changelog>
  <changelog author="gour@atmarama.net" date="1444392000">- Update to version 0.9.11:
  + Updated translations.
- Changes from version 0.9.10:
  + Fixes a problem with GTK+3.14 where checkboxes in the Access
    Control List were not properly rendered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463054400">- Do not delete the .desktop file. It is needed for AppStream
  processes to have a valid reference.
- Add update-desktop-files BuildRequires.
- Change Categories of eiciel.desktop to System;Filesystem.</changelog>
  <changelog author="fcrozat@suse.com" date="1502452800">- Remove BuildRequires on libgnomeui-devel and conditional build
  against gtk2.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 0.9.12.1:
  + Fix desktop file.
- Changes from version 0.9.12:
  + Updates for better integration with AppStream.
- Adopt the use of %make_install rather than raw make command,
  following the best practices.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Conditionalize translation-update-upstream BuildRequires use as
  it's a SLE-only requirement.
- Drop intltool BuildRequires: since upstream migrated to Gettext
  it's no longer needed anymore.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587729600">- Enable translation-update-upstream for both SLE and openSUSE
  (bsc#1170756, jsc#SLE-11889).</changelog>
</package>
<package pkgid="ad6158fea93258fc563cb00251e72419bd813ce96ca1c0ac7e1e215052cccfca" name="eiciel-lang" arch="noarch">
  <version epoch="0" ver="0.9.12.1" rel="lp151.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1306929600">- Do not fail to build if %gtk2_favor is not defined: just use
  0%{?gtk2_favor}.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 0.9.8.2:
  + Fix for ineffective permissions not correctly rendered in
    GNOME 3.
- Remove hack to remove executable bit from Authors: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1407499200">- Update to version 0.9.8.3:
  + This version does not include any new feature but better
    integration with PackageKit.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 0.9.9:
  + A new filter box
  + Several changes in the UI to make it a bit more consistent with
    the GNOME HIG.
  + Help has been ported from DocBook to Mallard.</changelog>
  <changelog author="gour@atmarama.net" date="1444392000">- Update to version 0.9.11:
  + Updated translations.
- Changes from version 0.9.10:
  + Fixes a problem with GTK+3.14 where checkboxes in the Access
    Control List were not properly rendered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463054400">- Do not delete the .desktop file. It is needed for AppStream
  processes to have a valid reference.
- Add update-desktop-files BuildRequires.
- Change Categories of eiciel.desktop to System;Filesystem.</changelog>
  <changelog author="fcrozat@suse.com" date="1502452800">- Remove BuildRequires on libgnomeui-devel and conditional build
  against gtk2.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 0.9.12.1:
  + Fix desktop file.
- Changes from version 0.9.12:
  + Updates for better integration with AppStream.
- Adopt the use of %make_install rather than raw make command,
  following the best practices.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Conditionalize translation-update-upstream BuildRequires use as
  it's a SLE-only requirement.
- Drop intltool BuildRequires: since upstream migrated to Gettext
  it's no longer needed anymore.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587729600">- Enable translation-update-upstream for both SLE and openSUSE
  (bsc#1170756, jsc#SLE-11889).</changelog>
</package>
<package pkgid="c94226f4fa20fbf40f21089e3c5645d7aea96e725b84dfa40416b21f815dc968" name="eigen3" arch="src">
  <version epoch="0" ver="3.3.4" rel="lp151.4.3.1"/>
  <changelog author="spencerandrewjackson@yahoo.com" date="1360670400">- Add eigen-3.1.2-remove-include-of-removed-header-file.patch
  * Backport 6f233061d009cdb9e79a5201e02599a72ec249c1 from upstream
  * Allow SparseCore to be included without compiler error</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1368964800">- Update to version 3.1.3:
  * Bug 526 - Fix linear vectorized transversal in linspace.
  * Bug 551 - Fix compilation issue when using EIGEN_DEFAULT_DENSE_INDEX_TYPE.
  * Bug 533 - Fix some missing const qualifiers in Transpose
  * Fix a compilation with CGAL::Gmpq by adding explicit internal:: namespace
    when calling abs().
  * Fix computation of outer-stride when calling .real() or .imag().
  * Fix handmade_aligned_realloc (affected conservativeResize()).
  * Fix sparse vector assignment from a sparse matrix.
  * Fix log(0) with SSE.
  * Fix bug in aligned_free with windows CE.
  * Fix traits of Map&lt;Quaternion.
  * Fix a few warnings (507, 535, 581).
  * Enable SSE with ICC even when it mimics a gcc version lower than 4.2
  * Workaround gcc-4.7 bug #53900 (too aggressive optimization in our alignment
    check).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1376308800">- Update to version 3.2.0:
  * See http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.2.0 for
    changes.
- Removed eigen-3.1.2-remove-include-of-removed-header-file.patch (fixed
  upstream).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1397131200">- Update to version 3.2.1:
  * Eigen2 support is now deprecated and will be removed in version 3.3.
  Core:
  * Bug fix for Ref object containing a temporary matrix.
  * Bug 654: Allow construction of row vector from 1D array.
  * Bug 679: Support cwiseMin() and cwiseMax() on maps.
  * Support conservativeResize() on vectors.
  * Improve performance of vectorwise and replicate expressions.
  * Bug 642: Add vectorization of sqrt for doubles, and make sqrt really safe
    if EIGEN_FAST_MATH is disabled.
  * Bug 616: Try harder to align columns when printing matrices and arrays.
  * Bug 579: Add optional run-time parameter to fixed-size block methods.
  * Implement .all() and .any() for zero-sized objects
  * Bug 708: Add placement new and delete for arrays.
  * Bug 503: Better C++11 support.
  Dense linear algebra:
  * Bug 689: Speed up some matrix-vector products by using aligned loads if
    possible.
  * Make solve in FullPivHouseholderQR return least-square solution if there
    is no exact solution.
  * Bug 678: Fix fullPivHouseholderQR for rectangular matrices.
  * Fix a 0/0 issue in JacobiSVD.
  * Bug 736: Wrong result in LDLT::isPositiveDefinite() for semi-definite
    matrices.
  * Bug 740: Fix overflow issue in stableNorm().
  * Make pivoting HouseholderQR compatible with custom scalar types.
  Geometry:
  * Fix compilation of Transform * UniformScaling
  Sparse matrices:
  * Fix elimination tree and SparseQR for fat rectangular matrices.
  * Bug 635: add isCompressed to MappedSparseMatrix for compatibility.
  * Bug 664: Support iterators without operator&lt; in setFromTriplets().
  * Fixes in SparseLU: infinite loop, aliasing issue when solving, overflow in
    memory allocation, use exceptions only if enabled (bug 672).
  * Fixes in SparseQR: reduce explicit zero, assigning result to map, assert
    catching non-conforming sizes, memory leak.
  * Bug 681: Uninitialized value in CholmodSupport which may lead to incorrect
    results.
  * Fix some issues when using a non-standard index type (bug 665 and more)
  * Update constrained CG (unsupported module) to Eigen3.
  OS and build system:
  * MacOS put OpenGL header files somewhere else from where we expected it.
  * Do not assume that alloca() is 16-byte aligned on Windows.
  * Compilation fixes when using ICC with Visual Studio.
  * Fix Fortran compiler detection in CMake files.
  * Fix some of our tests (bugs 744 and 748 and more).
  * Fix a few compiler warnings (bug 317 and more).
  * Documentation fixes (bugs 609, 638 and 739 and more).
- Renamed the package from libeigen3-devel to eigen3. Added eigen3-devel
  subpackage with the necessary Provides/Obsoletes entries for libeigen3-devel.</changelog>
  <changelog author="dvaleev@suse.com" date="1406721600">- Disable altivec on ppc64le. eigen3 have no LE altivec inplemented
  yet.
- added patches:
  * 0001-Disable-Altivec-for-ppc64le.patch</changelog>
  <changelog author="dvaleev@suse.com" date="1406808000">- Allign the stack on powerpc
- added patches:
  * 0001-Do-stack-allignment-on-ppc.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407585600">- Update to version 3.2.2:
  Core:
  * Relax Ref such that Ref&lt;MatrixXf&gt; accepts a RowVectorXf which can be seen
    as a degenerate MatrixXf(1,N)
  * Fix performance regression for the vectorization of sub columns/rows of
    matrices.
  * EIGEN_STACK_ALLOCATION_LIMIT: Raise its default value to 128KB, make use
    of it to assert on maximal fixed size object, and allows it to be 0 to
    mean "no limit".
  * Bug 839: Fix 1x1 triangular matrix-vector product.
  * Bug 755: CommaInitializer produced wrong assertions in absence of
    Return-Value-Optimization.
  Dense solvers:
  * Add a rank() method with threshold control to JacobiSVD, and make solve
    uses it to return the minimal norm solution for rank-deficient problems.
  * Various numerical fixes in JacobiSVD, including:bug 843, and the move from
    Lapack to Matlab strategy for the default threshold.
  * Various numerical fixes in LDLT, including the case of semi-definite
    complex matrices.
  * Fix ColPivHouseholderQR::rank().
  * Bug 222: Make temporary matrix column-major independently of
    EIGEN_DEFAULT_TO_ROW_MAJOR in BlockHouseholder.
  Sparse:
  * http://eigen.tuxfamily.org/bz/show_bug.cgi?id=838 Bug 838]: Fix dense
  * sparse and sparse * dense outer products and detect outer products from
    either the lhs or rhs.
  * Make the ordering method of SimplicialL[D]LT configurable.
  * Fix regression in the restart mechanism of BiCGSTAB.
  * Bug 836: extend SparseQR to support more columns than rows.
  * Bug 808: Use double instead of float for the increasing size ratio in
    CompressedStorage::resize, fix implicit conversions from int/longint to
    float/double, and fix set_from_triplets temporary matrix type.
  * Bug 647: Use smart_copy instead of bitwise memcpy in CompressedStorage.
  * GMRES: Initialize essential Householder vector with correct dimension.
  Geometry:
  * Bug 807: Missing scalar type cast in umeyama()
  * Bug 806: Missing scalar type cast in Quaternion::setFromTwoVectors()
  * Bug 759: Removed hard-coded double-math from Quaternion::angularDistance.
  OS, build system and doc:
  * Fix compilation with Windows CE.
  * Fix some ICEs with VC11.
  * Check IMKL version for compatibility with Eigen
  * Bug 754: Only inserted (!defined(_WIN32_WCE)) analog to alloc and free
    implementation.
  * Bug 803: Avoid char* to int* conversion.
  * Bug 819: Include path of details.h file.
  * Bug 738: Use the "current" version of cmake project directories to ease
    the inclusion of Eigen within other projects.
  * Bug 815: Fix doc of FullPivLU wrt permutation matrices.
  * Bug 632: doc: Note that dm2 = sm1 + dm1 is not possible
  * Extend AsciiQuickReference (real, imag, conjugate, rot90)
- Added metis-devel build requirement for openSUSE &gt; 13.1.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1429704000">- Update to version 3.2.4:
  * Fix compilation regression in Rotation2D
  * Bug 920: fix compilation issue with MSVC 2015.
  * Bug 921: fix utilization of bitwise operation on enums in
    first_aligned.
  * Fix compilation with NEON on some platforms.
  From version 3.2.3:
  Core:
  * Enable Mx0 * 0xN matrix products.
  * Bug 859: fix returned values for vectorized versions of
    exp(NaN), log(NaN), sqrt(NaN) and sqrt(-1).
  * Bug 879: tri1 = mat * tri2 was compiling and running
    incorrectly if tri2 was not numerically triangular. Workaround
    the issue by evaluating mat*tri2 into a temporary.
  * Bug 854: fix numerical issue in
    SelfAdjointEigenSolver::computeDirect for 3x3 matrices.
  * Bug 884: make sure there no call to malloc for zero-sized
    matrices or for a Ref&lt;&gt; without temporaries.
  * Bug 890: fix aliasing detection when applying a permutation.
  * Bug 898: MSVC optimization by adding inline hint to
    const_cast_ptr.
  * Bug 853: remove enable_if&lt;&gt; in Ref&lt;&gt; ctor.
  Dense solvers:
  * Bug 894: fix the sign returned by LDLT for multiple calls to
    compute().
  * Fix JacobiSVD wrt underflow and overflow.
  * Bug 791: fix infinite loop in JacobiSVD in the presence of
    NaN.
  Sparse:
  * Fix out-of-bounds memory write when the product of two sparse
    matrices is completely dense and performed using pruning.
  * UmfPack support: fix redundant evaluation/copies when calling
    compute(), add support for generic expressions as input, and
    fix extraction of the L and U factors (Bug 911).
  * Improve SparseMatrix::block for const matrices (the generic
    path was used).
  * Fix memory pre-allocation when permuting inner vectors of a
    sparse matrix.
  * Fix SparseQR::rank for a completely empty matrix.
  * Fix SparseQR for row-major inputs.
  * Fix SparseLU::absDeterminant and add respective unit test.
  * BiCGSTAB: make sure that good initial guesses are not
    destroyed by a bad preconditioner.
  Geometry:
  * Fix Hyperplane::Through(a,b,c) when points are aligned or
    identical.
  * Fix linking issues in OpenGLSupport.
  OS, build system and doc:
  * Various compilation fixes including: bug 821, bug 822,
    bug 857, bug 871, bug 873.
  * Fix many compilation warnings produced by recent compilers
    including: bug 909.
  * Bug 861: enable posix_memalign with PGI.
  * Fix BiCGSTAB doc example.</changelog>
  <changelog author="mpluskal@suse.com" date="1441454400">- Update to 3.2.5
  * Changes with main impact:
    + Improve robustness of SimplicialLDLT to semidefinite problems
    by correctly handling structural zeros in AMD reordering
    + Re-enable supernodes in SparseLU (fix a performance
    regression in SparseLU)
    + Use zero guess in ConjugateGradients::solve
    + Add PermutationMatrix::determinant method
    + Fix SparseLU::signDeterminant() method, and add a
    SparseLU::determinant() method
    + Allows Lower|Upper as a template argument of CG and MINRES:
    in this case the full matrix will be considered
    + Bug 872: remove usage of std::bind* functions (deprecated in
    c++11)
  * Numerical robustness improvements:
    + Bug 1014: improve numerical robustness of the 3x3 direct
    eigenvalue solver
    + Bug 1013: fix 2x2 direct eigenvalue solver for identical
    eigenvalues
    + Bug 824: improve accuracy of Quaternion::angularDistance
    + Bug 941: fix an accuracy issue in ColPivHouseholderQR by
    continuing the decomposition on a small pivot
    + Bug 933: improve numerical robustness in RealSchur
    + Fix default threshold value in SPQR
  * Other changes:
    + Fix usage of EIGEN_NO_AUTOMATIC_RESIZING
    + Improved support for custom scalar types in SparseLU
    + Improve cygwin compatibility
    + Bug 650: fix an issue with sparse-dense product and
    rowmajor matrices
    + Bug 704: fix MKL support (HouseholderQR)
    + Bug 705: fix handling of Lapack potrf return code (LLT)
    + Bug 714: fix matrix product with OpenMP support
    + Bug 949: add static assertions for incompatible scalar
    types in many of the dense decompositions
    + Bugs 957, 1000: workaround MSVC/ICC compilation issues when
    using sparse blocks
    + Bug 969: fix ambiguous calls to Ref
    + Bugs 972, 986: add support for coefficient-based product
    with 0 depth
    + Bug 980: fix taking a row (resp. column) of a column-major
    (resp. row-major) sparse matrix
    + Bug 983: fix an alignement issue in Quaternion
    + Bug 985: fix RealQZ when either matrix had zero rows or
    columns
    + Bug 987: fix alignement guess in diagonal product
    + Bug 993: fix a pitfall with matrix.inverse()
    + Bugs 996, 1016: fix scalar conversions
    + Bug 1003: fix handling of pointers non aligned on scalar
    boundary in slice-vectorization
    + Bug 1010: fix member initialization in IncompleteLUT
    + Bug 1012: enable alloca on Mac OS or if alloca is defined
    as macro
    + Doc and build system: 733, 914, 952, 961, 999
- Use cmake macros
- Use url for source
- Cleanup spec file with spec-cleaner
- Remove conditional buildrequires for releases which did not
  build anyway</changelog>
  <changelog author="p.drouand@gmail.com" date="1447675200">- Update to version 3.2.7
  * Add support for dense.cwiseProduct(sparse).
  * Fix a regression regarding (dense*sparse).diagonal().
  * Make the IterativeLinearSolvers module compatible with MPL2-only
    mode by defaulting to COLAMDOrdering and NaturalOrdering for ILUT
    and ILLT respectively.
  * Bug 266: backport support for c++11 move semantic
  * operator/=(Scalar) now performs a true division (instead of mat*(1/s))
  * Improve numerical accuracy in LLT and triangular solve by using
    true scalar divisions (instead of mat * (1/s))
  * Bug 1092: fix iterative solver constructors for expressions as input
  * Bug 1088: fix setIdenity for non-compressed sparse-matrix
  * Bug 1086: add support for recent SuiteSparse versions
  * Add overloads for real-scalar times SparseMatrix&lt;complex&gt; operations.
    This avoids real to complex conversions, and also fixes a compilation
    issue with MSVC.
  * Use explicit Scalar types for AngleAxis initialization
  * Fix several shortcomings in cost computation (avoid multiple
    re-evaluation in some very rare cases).
  * Bug 1090: fix a shortcoming in redux logic for which
    slice-vectorization plus unrolling might happen.
  * Fix compilation issue with MSVC by backporting
    DenseStorage::operator= from devel branch.
  * Bug 1063: fix nesting of unsupported/AutoDiffScalar to prevent
    dead references when computing second-order derivatives
  * Bug 1100: remove explicit CMAKE_INSTALL_PREFIX prefix to conform
    to cmake install's DESTINATION parameter.
  * unsupported/ArpackSupport is now properly installed by make install.
  * Bug 1080: warning fixes
- Changes from version 3.2.6
  * fix some compilation issues with MSVC 2013, including bugs 1000 and 1057
  * SparseLU: fixes to support EIGEN_DEFAULT_TO_ROW_MAJOR (bug 1053), and
    for empty (bug 1026) and some structurally rank deficient matrices (bug 792)
  * Bug 1075: fix AlignedBox::sample() for Dynamic dimension
  * fix regression in AMD ordering when a column has only one off-diagonal
    non-zero (used in sparse Cholesky)
  * fix Jacobi preconditioner with zero diagonal entries
  * fix Quaternion identity initialization for non-implicitly convertible types
  * Bug 1059: fix predux_max&lt;Packet4i&gt; for NEON
  * Bug 1039: fix some issues when redefining EIGEN_DEFAULT_DENSE_INDEX_TYPE
  * Bug 1062: fix SelfAdjointEigenSolver for RowMajor matrices
  * MKL: fix support for the 11.2 version, and fix a naming conflict (bug 1067)
  * Bug 1033: explicit type conversion from 0 to RealScalar
-</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1448625600">- Specify eigen header install dir; otherwise the pkgconfig file
  defaults to -Iinclude/eigen3</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1467288000">- Update to version 3.2.8:
  Main fixes and improvements:
  * Make FullPivLU::solve use rank() instead of nonzeroPivots().
  * Add EIGEN_MAPBASE_PLUGIN
  * Bug 1166: fix issue in matrix-vector products when the
    destination is not a vector at compile-time.
  * Bug 1100: Improve cmake/pkg-config support.
  * Bug 1113: fix name conflict with C99's "I".
  * Add missing delete operator overloads in
    EIGEN_MAKE_ALIGNED_OPERATOR_NEW
  * Fix (A*B).maxCoeff(i) and similar.
  * Workaround an ICE with VC2015 Update1 x64.
  * Bug 1156: fix several function declarations whose arguments
    were passed by value instead of being passed by reference
  * Bug 1164: fix std::list and std::deque specializations such
    that our aligned allocator is automatically activatived only
    when the user did not specified an allocator (or specified the
    default std::allocator).
  Others:
  * Fix BLAS backend (aka MKL) for empty matrix products.
  * Bug 1134: fix JacobiSVD pre-allocation.
  * Bug 1111: fix infinite recursion in
    sparse-column-major.row(i).nonZeros() (it now produces a
    compilation error)
  * Bug 1106: workaround a compilation issue in Sparse module for
    msvc-icc combo
  * Bug 1153: remove the usage of __GXX_EXPERIMENTAL_CXX0X__ to
    detect C++11 support
  * Bug 1143: work-around gcc bug in COLAMD
  * Improve support for matrix products with empty factors.
  * Fix and clarify documentation of Transform wrt
    operator*(MatrixBase)
  * Add a matrix-free conjugate gradient example.
  * Fix cost computation in CwiseUnaryView (internal)
  * Remove custom unaligned loads for SSE.
  * Some warning fixes.
  * Several other documentation clarifications.
- Updated build requirement superlu to superlu-devel.
- Added a patch "eigen_pkgconfig.patch" to fix pkg-config file
  includedir (taken from Fedora).
- Added a patch "01_install_FindEigen3.patch" to install
  FindEigen3.cmake (taken from Fedora).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470571200">- Update to version 3.2.9:
  Main fixes and improvements:
  * Improve numerical robustness of JacobiSVD (backported from 3.3)
  * Bug 1017: prevents underflows in makeHouseholder
  * Fix numerical accuracy issue in the extraction of complex
    eigenvalue pairs in real generalized eigenvalue problems.
  * Fix support for vector.homogeneous().asDiagonal()
  * Bug 1238: fix SparseMatrix::sum() overload for un-compressed
    mode
  * Bug 1213: workaround gcc linking issue with anonymous enums.
  * Bug 1236: fix possible integer overflow in sparse-sparse
    product
  * Improve detection of identical matrices when applying a
    permutation (e.g., mat = perm * mat)
  * Fix usage of nesting type in blas_traits. In practice, this
    fixes compilation of expressions such as A*(A*A)^T
  * CMake: fixes support of Ninja generator
  * Add a StorageIndex typedef to sparse matrices and expressions
    to ease porting code to 3.3
    (see http://eigen.tuxfamily.org/index.php?title=3.3#Index_typedef)
  * Bug 1200: make aligned_allocator c++11 compatible (backported
    from 3.3)
  * Bug 1182: improve generality of abs2 (backported from 3.3)
  * Bug 537: fix compilation of Quaternion with Apples's compiler
  * Bug 1176: allow products between compatible scalar types
  * Bug 1172: make valuePtr and innerIndexPtr properly return null
    for empty sparse matrices.
  * Bug 1170: skip calls to memcpy/memmove for empty inputs.
  Others:
  * Bug 1242: fix comma initializer with empty matrices.
  * Improves support for MKL's PARDISO solver.
  * Fix a compilation issue with Pastix solver.
  * Add some missing explicit scalar conversions
  * Fix a compilation issue with matrix exponential (unsupported
    MatrixFunctions module).
  * Bug 734: fix a storage order issue in unsupported Spline module
  * Bug 1222: fix a compilation issue in AutoDiffScalar
  * Bug 1221: shutdown some GCC6's warnings.
  * Bug 1175: fix index type conversion warnings in sparse to dense
    conversion.
- Removed build requirements gnu-free-fonts and texlive-amsfonts
  (not needed anymore).</changelog>
  <changelog author="olaf@aepfle.de" date="1483531200">- Require texlive-dvips during build</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488888000">- Update to version 3.3.3:
  * Lots of changes. See
    http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.3.3
    for details.
- Added new build requirements libboost_headers-devel for
  Tumbleweed and boost-devel for openSUSE &lt;= 13.2.
- Rebased 0001-Disable-Altivec-for-ppc64le.patch and
  0001-Do-stack-allignment-on-ppc.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499256000">- Update to version 3.3.4:
  General:
  * Improve speed of Jacobi rotation when mixing complex and real
    types.
  * Bug 1405: enable StrictlyLower/StrictlyUpper triangularView as
    the destination of matrix*matrix products.
  * UmfPack support: enable changes in the control settings and add
    report functions.
  * Bug 1423: fix LSCG's Jacobi preconditioner for row-major
    matrices.
  * Bug 1424: fix compilation issue with abs and unsigned integers
    as scalar type.
  * Bug 1410: fix lvalue propagation of Array/Matrix-Wrapper with a
    const nested expression.
  * Bug 1403: fix several implicit scalar type conversion making
    SVD decompositions compatible with ceres::Jet.
  * Fix some real-to-scalar-to-real useless conversions in
    ColPivHouseholderQR.
  Regressions:
  * Fix dense * sparse-selfadjoint-view product.
  * Bug 1417: make LinSpace compatible with std::complex.
  * Bug 1400: fix stableNorm alignment issue with
    EIGEN_DONT_ALIGN_STATICALLY.
  * Bug 1411: fix alignment issue in Quaternion.
  * Fix compilation of operations between nested Arrays.
  * Bug 1435: fix aliasing issue in expressions like: A = C - B*A.
  Others:
  * Fix compilation with gcc 4.3 and ARM NEON.
  * Fix prefetches on ARM64 and ARM32.
  * Fix out-of-bounds check in COLAMD.
  * Few minor fixes regarding nvcc/CUDA support, including bug
    1396.
  * Improve cmake scripts for Pastix and BLAS detection.
  * Bug 1401: fix compilation of "cond ? x : -x" with x an
    AutoDiffScalar
  * Fix compilation of matrix log with Map as input.
  * Add specializations of std::numeric_limits for Eigen::half and
    and AutoDiffScalar
  * Fix compilation of streaming nested Array, i.e.,
    cout &lt;&lt; Array&lt;Array&lt;&gt;&gt;</changelog>
  <changelog author="cfeck@kde.org" date="1500379200">- Split documentation into its own -doc package due to size.</changelog>
  <changelog author="jengelh@inai.de" date="1502539200">- Use right RPM group.</changelog>
  <changelog author="alarrosa@suse.com" date="1510056000">- Remove libqt4 from BuildRequires since it's actually only required
  by some demos and tests which are simply not built when it's not
  available (except on Leap, where libqt4 is required)</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1570881600">- Added eigen3-3.3.1-fixcmake.patch (Fix double {prefix} as we use
  INCLUDE_INSTALL_DIR with {_includedir}. Fixes boo#1148642.</changelog>
</package>
<package pkgid="cd3c79ada62eed2ad4c9c48f8156d1a9caf1002112819d9fd2adc60b71a3ddfe" name="eigen3-devel" arch="noarch">
  <version epoch="0" ver="3.3.4" rel="lp151.4.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1429704000">- Update to version 3.2.4:
  * Fix compilation regression in Rotation2D
  * Bug 920: fix compilation issue with MSVC 2015.
  * Bug 921: fix utilization of bitwise operation on enums in
    first_aligned.
  * Fix compilation with NEON on some platforms.
  From version 3.2.3:
  Core:
  * Enable Mx0 * 0xN matrix products.
  * Bug 859: fix returned values for vectorized versions of
    exp(NaN), log(NaN), sqrt(NaN) and sqrt(-1).
  * Bug 879: tri1 = mat * tri2 was compiling and running
    incorrectly if tri2 was not numerically triangular. Workaround
    the issue by evaluating mat*tri2 into a temporary.
  * Bug 854: fix numerical issue in
    SelfAdjointEigenSolver::computeDirect for 3x3 matrices.
  * Bug 884: make sure there no call to malloc for zero-sized
    matrices or for a Ref&lt;&gt; without temporaries.
  * Bug 890: fix aliasing detection when applying a permutation.
  * Bug 898: MSVC optimization by adding inline hint to
    const_cast_ptr.
  * Bug 853: remove enable_if&lt;&gt; in Ref&lt;&gt; ctor.
  Dense solvers:
  * Bug 894: fix the sign returned by LDLT for multiple calls to
    compute().
  * Fix JacobiSVD wrt underflow and overflow.
  * Bug 791: fix infinite loop in JacobiSVD in the presence of
    NaN.
  Sparse:
  * Fix out-of-bounds memory write when the product of two sparse
    matrices is completely dense and performed using pruning.
  * UmfPack support: fix redundant evaluation/copies when calling
    compute(), add support for generic expressions as input, and
    fix extraction of the L and U factors (Bug 911).
  * Improve SparseMatrix::block for const matrices (the generic
    path was used).
  * Fix memory pre-allocation when permuting inner vectors of a
    sparse matrix.
  * Fix SparseQR::rank for a completely empty matrix.
  * Fix SparseQR for row-major inputs.
  * Fix SparseLU::absDeterminant and add respective unit test.
  * BiCGSTAB: make sure that good initial guesses are not
    destroyed by a bad preconditioner.
  Geometry:
  * Fix Hyperplane::Through(a,b,c) when points are aligned or
    identical.
  * Fix linking issues in OpenGLSupport.
  OS, build system and doc:
  * Various compilation fixes including: bug 821, bug 822,
    bug 857, bug 871, bug 873.
  * Fix many compilation warnings produced by recent compilers
    including: bug 909.
  * Bug 861: enable posix_memalign with PGI.
  * Fix BiCGSTAB doc example.</changelog>
  <changelog author="mpluskal@suse.com" date="1441454400">- Update to 3.2.5
  * Changes with main impact:
    + Improve robustness of SimplicialLDLT to semidefinite problems
    by correctly handling structural zeros in AMD reordering
    + Re-enable supernodes in SparseLU (fix a performance
    regression in SparseLU)
    + Use zero guess in ConjugateGradients::solve
    + Add PermutationMatrix::determinant method
    + Fix SparseLU::signDeterminant() method, and add a
    SparseLU::determinant() method
    + Allows Lower|Upper as a template argument of CG and MINRES:
    in this case the full matrix will be considered
    + Bug 872: remove usage of std::bind* functions (deprecated in
    c++11)
  * Numerical robustness improvements:
    + Bug 1014: improve numerical robustness of the 3x3 direct
    eigenvalue solver
    + Bug 1013: fix 2x2 direct eigenvalue solver for identical
    eigenvalues
    + Bug 824: improve accuracy of Quaternion::angularDistance
    + Bug 941: fix an accuracy issue in ColPivHouseholderQR by
    continuing the decomposition on a small pivot
    + Bug 933: improve numerical robustness in RealSchur
    + Fix default threshold value in SPQR
  * Other changes:
    + Fix usage of EIGEN_NO_AUTOMATIC_RESIZING
    + Improved support for custom scalar types in SparseLU
    + Improve cygwin compatibility
    + Bug 650: fix an issue with sparse-dense product and
    rowmajor matrices
    + Bug 704: fix MKL support (HouseholderQR)
    + Bug 705: fix handling of Lapack potrf return code (LLT)
    + Bug 714: fix matrix product with OpenMP support
    + Bug 949: add static assertions for incompatible scalar
    types in many of the dense decompositions
    + Bugs 957, 1000: workaround MSVC/ICC compilation issues when
    using sparse blocks
    + Bug 969: fix ambiguous calls to Ref
    + Bugs 972, 986: add support for coefficient-based product
    with 0 depth
    + Bug 980: fix taking a row (resp. column) of a column-major
    (resp. row-major) sparse matrix
    + Bug 983: fix an alignement issue in Quaternion
    + Bug 985: fix RealQZ when either matrix had zero rows or
    columns
    + Bug 987: fix alignement guess in diagonal product
    + Bug 993: fix a pitfall with matrix.inverse()
    + Bugs 996, 1016: fix scalar conversions
    + Bug 1003: fix handling of pointers non aligned on scalar
    boundary in slice-vectorization
    + Bug 1010: fix member initialization in IncompleteLUT
    + Bug 1012: enable alloca on Mac OS or if alloca is defined
    as macro
    + Doc and build system: 733, 914, 952, 961, 999
- Use cmake macros
- Use url for source
- Cleanup spec file with spec-cleaner
- Remove conditional buildrequires for releases which did not
  build anyway</changelog>
  <changelog author="p.drouand@gmail.com" date="1447675200">- Update to version 3.2.7
  * Add support for dense.cwiseProduct(sparse).
  * Fix a regression regarding (dense*sparse).diagonal().
  * Make the IterativeLinearSolvers module compatible with MPL2-only
    mode by defaulting to COLAMDOrdering and NaturalOrdering for ILUT
    and ILLT respectively.
  * Bug 266: backport support for c++11 move semantic
  * operator/=(Scalar) now performs a true division (instead of mat*(1/s))
  * Improve numerical accuracy in LLT and triangular solve by using
    true scalar divisions (instead of mat * (1/s))
  * Bug 1092: fix iterative solver constructors for expressions as input
  * Bug 1088: fix setIdenity for non-compressed sparse-matrix
  * Bug 1086: add support for recent SuiteSparse versions
  * Add overloads for real-scalar times SparseMatrix&lt;complex&gt; operations.
    This avoids real to complex conversions, and also fixes a compilation
    issue with MSVC.
  * Use explicit Scalar types for AngleAxis initialization
  * Fix several shortcomings in cost computation (avoid multiple
    re-evaluation in some very rare cases).
  * Bug 1090: fix a shortcoming in redux logic for which
    slice-vectorization plus unrolling might happen.
  * Fix compilation issue with MSVC by backporting
    DenseStorage::operator= from devel branch.
  * Bug 1063: fix nesting of unsupported/AutoDiffScalar to prevent
    dead references when computing second-order derivatives
  * Bug 1100: remove explicit CMAKE_INSTALL_PREFIX prefix to conform
    to cmake install's DESTINATION parameter.
  * unsupported/ArpackSupport is now properly installed by make install.
  * Bug 1080: warning fixes
- Changes from version 3.2.6
  * fix some compilation issues with MSVC 2013, including bugs 1000 and 1057
  * SparseLU: fixes to support EIGEN_DEFAULT_TO_ROW_MAJOR (bug 1053), and
    for empty (bug 1026) and some structurally rank deficient matrices (bug 792)
  * Bug 1075: fix AlignedBox::sample() for Dynamic dimension
  * fix regression in AMD ordering when a column has only one off-diagonal
    non-zero (used in sparse Cholesky)
  * fix Jacobi preconditioner with zero diagonal entries
  * fix Quaternion identity initialization for non-implicitly convertible types
  * Bug 1059: fix predux_max&lt;Packet4i&gt; for NEON
  * Bug 1039: fix some issues when redefining EIGEN_DEFAULT_DENSE_INDEX_TYPE
  * Bug 1062: fix SelfAdjointEigenSolver for RowMajor matrices
  * MKL: fix support for the 11.2 version, and fix a naming conflict (bug 1067)
  * Bug 1033: explicit type conversion from 0 to RealScalar
-</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1448625600">- Specify eigen header install dir; otherwise the pkgconfig file
  defaults to -Iinclude/eigen3</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1467288000">- Update to version 3.2.8:
  Main fixes and improvements:
  * Make FullPivLU::solve use rank() instead of nonzeroPivots().
  * Add EIGEN_MAPBASE_PLUGIN
  * Bug 1166: fix issue in matrix-vector products when the
    destination is not a vector at compile-time.
  * Bug 1100: Improve cmake/pkg-config support.
  * Bug 1113: fix name conflict with C99's "I".
  * Add missing delete operator overloads in
    EIGEN_MAKE_ALIGNED_OPERATOR_NEW
  * Fix (A*B).maxCoeff(i) and similar.
  * Workaround an ICE with VC2015 Update1 x64.
  * Bug 1156: fix several function declarations whose arguments
    were passed by value instead of being passed by reference
  * Bug 1164: fix std::list and std::deque specializations such
    that our aligned allocator is automatically activatived only
    when the user did not specified an allocator (or specified the
    default std::allocator).
  Others:
  * Fix BLAS backend (aka MKL) for empty matrix products.
  * Bug 1134: fix JacobiSVD pre-allocation.
  * Bug 1111: fix infinite recursion in
    sparse-column-major.row(i).nonZeros() (it now produces a
    compilation error)
  * Bug 1106: workaround a compilation issue in Sparse module for
    msvc-icc combo
  * Bug 1153: remove the usage of __GXX_EXPERIMENTAL_CXX0X__ to
    detect C++11 support
  * Bug 1143: work-around gcc bug in COLAMD
  * Improve support for matrix products with empty factors.
  * Fix and clarify documentation of Transform wrt
    operator*(MatrixBase)
  * Add a matrix-free conjugate gradient example.
  * Fix cost computation in CwiseUnaryView (internal)
  * Remove custom unaligned loads for SSE.
  * Some warning fixes.
  * Several other documentation clarifications.
- Updated build requirement superlu to superlu-devel.
- Added a patch "eigen_pkgconfig.patch" to fix pkg-config file
  includedir (taken from Fedora).
- Added a patch "01_install_FindEigen3.patch" to install
  FindEigen3.cmake (taken from Fedora).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470571200">- Update to version 3.2.9:
  Main fixes and improvements:
  * Improve numerical robustness of JacobiSVD (backported from 3.3)
  * Bug 1017: prevents underflows in makeHouseholder
  * Fix numerical accuracy issue in the extraction of complex
    eigenvalue pairs in real generalized eigenvalue problems.
  * Fix support for vector.homogeneous().asDiagonal()
  * Bug 1238: fix SparseMatrix::sum() overload for un-compressed
    mode
  * Bug 1213: workaround gcc linking issue with anonymous enums.
  * Bug 1236: fix possible integer overflow in sparse-sparse
    product
  * Improve detection of identical matrices when applying a
    permutation (e.g., mat = perm * mat)
  * Fix usage of nesting type in blas_traits. In practice, this
    fixes compilation of expressions such as A*(A*A)^T
  * CMake: fixes support of Ninja generator
  * Add a StorageIndex typedef to sparse matrices and expressions
    to ease porting code to 3.3
    (see http://eigen.tuxfamily.org/index.php?title=3.3#Index_typedef)
  * Bug 1200: make aligned_allocator c++11 compatible (backported
    from 3.3)
  * Bug 1182: improve generality of abs2 (backported from 3.3)
  * Bug 537: fix compilation of Quaternion with Apples's compiler
  * Bug 1176: allow products between compatible scalar types
  * Bug 1172: make valuePtr and innerIndexPtr properly return null
    for empty sparse matrices.
  * Bug 1170: skip calls to memcpy/memmove for empty inputs.
  Others:
  * Bug 1242: fix comma initializer with empty matrices.
  * Improves support for MKL's PARDISO solver.
  * Fix a compilation issue with Pastix solver.
  * Add some missing explicit scalar conversions
  * Fix a compilation issue with matrix exponential (unsupported
    MatrixFunctions module).
  * Bug 734: fix a storage order issue in unsupported Spline module
  * Bug 1222: fix a compilation issue in AutoDiffScalar
  * Bug 1221: shutdown some GCC6's warnings.
  * Bug 1175: fix index type conversion warnings in sparse to dense
    conversion.
- Removed build requirements gnu-free-fonts and texlive-amsfonts
  (not needed anymore).</changelog>
  <changelog author="olaf@aepfle.de" date="1483531200">- Require texlive-dvips during build</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488888000">- Update to version 3.3.3:
  * Lots of changes. See
    http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.3.3
    for details.
- Added new build requirements libboost_headers-devel for
  Tumbleweed and boost-devel for openSUSE &lt;= 13.2.
- Rebased 0001-Disable-Altivec-for-ppc64le.patch and
  0001-Do-stack-allignment-on-ppc.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499256000">- Update to version 3.3.4:
  General:
  * Improve speed of Jacobi rotation when mixing complex and real
    types.
  * Bug 1405: enable StrictlyLower/StrictlyUpper triangularView as
    the destination of matrix*matrix products.
  * UmfPack support: enable changes in the control settings and add
    report functions.
  * Bug 1423: fix LSCG's Jacobi preconditioner for row-major
    matrices.
  * Bug 1424: fix compilation issue with abs and unsigned integers
    as scalar type.
  * Bug 1410: fix lvalue propagation of Array/Matrix-Wrapper with a
    const nested expression.
  * Bug 1403: fix several implicit scalar type conversion making
    SVD decompositions compatible with ceres::Jet.
  * Fix some real-to-scalar-to-real useless conversions in
    ColPivHouseholderQR.
  Regressions:
  * Fix dense * sparse-selfadjoint-view product.
  * Bug 1417: make LinSpace compatible with std::complex.
  * Bug 1400: fix stableNorm alignment issue with
    EIGEN_DONT_ALIGN_STATICALLY.
  * Bug 1411: fix alignment issue in Quaternion.
  * Fix compilation of operations between nested Arrays.
  * Bug 1435: fix aliasing issue in expressions like: A = C - B*A.
  Others:
  * Fix compilation with gcc 4.3 and ARM NEON.
  * Fix prefetches on ARM64 and ARM32.
  * Fix out-of-bounds check in COLAMD.
  * Few minor fixes regarding nvcc/CUDA support, including bug
    1396.
  * Improve cmake scripts for Pastix and BLAS detection.
  * Bug 1401: fix compilation of "cond ? x : -x" with x an
    AutoDiffScalar
  * Fix compilation of matrix log with Map as input.
  * Add specializations of std::numeric_limits for Eigen::half and
    and AutoDiffScalar
  * Fix compilation of streaming nested Array, i.e.,
    cout &lt;&lt; Array&lt;Array&lt;&gt;&gt;</changelog>
  <changelog author="cfeck@kde.org" date="1500379200">- Split documentation into its own -doc package due to size.</changelog>
  <changelog author="jengelh@inai.de" date="1502539200">- Use right RPM group.</changelog>
  <changelog author="alarrosa@suse.com" date="1510056000">- Remove libqt4 from BuildRequires since it's actually only required
  by some demos and tests which are simply not built when it's not
  available (except on Leap, where libqt4 is required)</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1570881600">- Added eigen3-3.3.1-fixcmake.patch (Fix double {prefix} as we use
  INCLUDE_INSTALL_DIR with {_includedir}. Fixes boo#1148642.</changelog>
</package>
<package pkgid="d1edd11220fa603f41dd0368e65b3b840462f393cd15b5112175d9e00d1e2af6" name="eigen3-doc" arch="noarch">
  <version epoch="0" ver="3.3.4" rel="lp151.4.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1429704000">- Update to version 3.2.4:
  * Fix compilation regression in Rotation2D
  * Bug 920: fix compilation issue with MSVC 2015.
  * Bug 921: fix utilization of bitwise operation on enums in
    first_aligned.
  * Fix compilation with NEON on some platforms.
  From version 3.2.3:
  Core:
  * Enable Mx0 * 0xN matrix products.
  * Bug 859: fix returned values for vectorized versions of
    exp(NaN), log(NaN), sqrt(NaN) and sqrt(-1).
  * Bug 879: tri1 = mat * tri2 was compiling and running
    incorrectly if tri2 was not numerically triangular. Workaround
    the issue by evaluating mat*tri2 into a temporary.
  * Bug 854: fix numerical issue in
    SelfAdjointEigenSolver::computeDirect for 3x3 matrices.
  * Bug 884: make sure there no call to malloc for zero-sized
    matrices or for a Ref&lt;&gt; without temporaries.
  * Bug 890: fix aliasing detection when applying a permutation.
  * Bug 898: MSVC optimization by adding inline hint to
    const_cast_ptr.
  * Bug 853: remove enable_if&lt;&gt; in Ref&lt;&gt; ctor.
  Dense solvers:
  * Bug 894: fix the sign returned by LDLT for multiple calls to
    compute().
  * Fix JacobiSVD wrt underflow and overflow.
  * Bug 791: fix infinite loop in JacobiSVD in the presence of
    NaN.
  Sparse:
  * Fix out-of-bounds memory write when the product of two sparse
    matrices is completely dense and performed using pruning.
  * UmfPack support: fix redundant evaluation/copies when calling
    compute(), add support for generic expressions as input, and
    fix extraction of the L and U factors (Bug 911).
  * Improve SparseMatrix::block for const matrices (the generic
    path was used).
  * Fix memory pre-allocation when permuting inner vectors of a
    sparse matrix.
  * Fix SparseQR::rank for a completely empty matrix.
  * Fix SparseQR for row-major inputs.
  * Fix SparseLU::absDeterminant and add respective unit test.
  * BiCGSTAB: make sure that good initial guesses are not
    destroyed by a bad preconditioner.
  Geometry:
  * Fix Hyperplane::Through(a,b,c) when points are aligned or
    identical.
  * Fix linking issues in OpenGLSupport.
  OS, build system and doc:
  * Various compilation fixes including: bug 821, bug 822,
    bug 857, bug 871, bug 873.
  * Fix many compilation warnings produced by recent compilers
    including: bug 909.
  * Bug 861: enable posix_memalign with PGI.
  * Fix BiCGSTAB doc example.</changelog>
  <changelog author="mpluskal@suse.com" date="1441454400">- Update to 3.2.5
  * Changes with main impact:
    + Improve robustness of SimplicialLDLT to semidefinite problems
    by correctly handling structural zeros in AMD reordering
    + Re-enable supernodes in SparseLU (fix a performance
    regression in SparseLU)
    + Use zero guess in ConjugateGradients::solve
    + Add PermutationMatrix::determinant method
    + Fix SparseLU::signDeterminant() method, and add a
    SparseLU::determinant() method
    + Allows Lower|Upper as a template argument of CG and MINRES:
    in this case the full matrix will be considered
    + Bug 872: remove usage of std::bind* functions (deprecated in
    c++11)
  * Numerical robustness improvements:
    + Bug 1014: improve numerical robustness of the 3x3 direct
    eigenvalue solver
    + Bug 1013: fix 2x2 direct eigenvalue solver for identical
    eigenvalues
    + Bug 824: improve accuracy of Quaternion::angularDistance
    + Bug 941: fix an accuracy issue in ColPivHouseholderQR by
    continuing the decomposition on a small pivot
    + Bug 933: improve numerical robustness in RealSchur
    + Fix default threshold value in SPQR
  * Other changes:
    + Fix usage of EIGEN_NO_AUTOMATIC_RESIZING
    + Improved support for custom scalar types in SparseLU
    + Improve cygwin compatibility
    + Bug 650: fix an issue with sparse-dense product and
    rowmajor matrices
    + Bug 704: fix MKL support (HouseholderQR)
    + Bug 705: fix handling of Lapack potrf return code (LLT)
    + Bug 714: fix matrix product with OpenMP support
    + Bug 949: add static assertions for incompatible scalar
    types in many of the dense decompositions
    + Bugs 957, 1000: workaround MSVC/ICC compilation issues when
    using sparse blocks
    + Bug 969: fix ambiguous calls to Ref
    + Bugs 972, 986: add support for coefficient-based product
    with 0 depth
    + Bug 980: fix taking a row (resp. column) of a column-major
    (resp. row-major) sparse matrix
    + Bug 983: fix an alignement issue in Quaternion
    + Bug 985: fix RealQZ when either matrix had zero rows or
    columns
    + Bug 987: fix alignement guess in diagonal product
    + Bug 993: fix a pitfall with matrix.inverse()
    + Bugs 996, 1016: fix scalar conversions
    + Bug 1003: fix handling of pointers non aligned on scalar
    boundary in slice-vectorization
    + Bug 1010: fix member initialization in IncompleteLUT
    + Bug 1012: enable alloca on Mac OS or if alloca is defined
    as macro
    + Doc and build system: 733, 914, 952, 961, 999
- Use cmake macros
- Use url for source
- Cleanup spec file with spec-cleaner
- Remove conditional buildrequires for releases which did not
  build anyway</changelog>
  <changelog author="p.drouand@gmail.com" date="1447675200">- Update to version 3.2.7
  * Add support for dense.cwiseProduct(sparse).
  * Fix a regression regarding (dense*sparse).diagonal().
  * Make the IterativeLinearSolvers module compatible with MPL2-only
    mode by defaulting to COLAMDOrdering and NaturalOrdering for ILUT
    and ILLT respectively.
  * Bug 266: backport support for c++11 move semantic
  * operator/=(Scalar) now performs a true division (instead of mat*(1/s))
  * Improve numerical accuracy in LLT and triangular solve by using
    true scalar divisions (instead of mat * (1/s))
  * Bug 1092: fix iterative solver constructors for expressions as input
  * Bug 1088: fix setIdenity for non-compressed sparse-matrix
  * Bug 1086: add support for recent SuiteSparse versions
  * Add overloads for real-scalar times SparseMatrix&lt;complex&gt; operations.
    This avoids real to complex conversions, and also fixes a compilation
    issue with MSVC.
  * Use explicit Scalar types for AngleAxis initialization
  * Fix several shortcomings in cost computation (avoid multiple
    re-evaluation in some very rare cases).
  * Bug 1090: fix a shortcoming in redux logic for which
    slice-vectorization plus unrolling might happen.
  * Fix compilation issue with MSVC by backporting
    DenseStorage::operator= from devel branch.
  * Bug 1063: fix nesting of unsupported/AutoDiffScalar to prevent
    dead references when computing second-order derivatives
  * Bug 1100: remove explicit CMAKE_INSTALL_PREFIX prefix to conform
    to cmake install's DESTINATION parameter.
  * unsupported/ArpackSupport is now properly installed by make install.
  * Bug 1080: warning fixes
- Changes from version 3.2.6
  * fix some compilation issues with MSVC 2013, including bugs 1000 and 1057
  * SparseLU: fixes to support EIGEN_DEFAULT_TO_ROW_MAJOR (bug 1053), and
    for empty (bug 1026) and some structurally rank deficient matrices (bug 792)
  * Bug 1075: fix AlignedBox::sample() for Dynamic dimension
  * fix regression in AMD ordering when a column has only one off-diagonal
    non-zero (used in sparse Cholesky)
  * fix Jacobi preconditioner with zero diagonal entries
  * fix Quaternion identity initialization for non-implicitly convertible types
  * Bug 1059: fix predux_max&lt;Packet4i&gt; for NEON
  * Bug 1039: fix some issues when redefining EIGEN_DEFAULT_DENSE_INDEX_TYPE
  * Bug 1062: fix SelfAdjointEigenSolver for RowMajor matrices
  * MKL: fix support for the 11.2 version, and fix a naming conflict (bug 1067)
  * Bug 1033: explicit type conversion from 0 to RealScalar
-</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1448625600">- Specify eigen header install dir; otherwise the pkgconfig file
  defaults to -Iinclude/eigen3</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1467288000">- Update to version 3.2.8:
  Main fixes and improvements:
  * Make FullPivLU::solve use rank() instead of nonzeroPivots().
  * Add EIGEN_MAPBASE_PLUGIN
  * Bug 1166: fix issue in matrix-vector products when the
    destination is not a vector at compile-time.
  * Bug 1100: Improve cmake/pkg-config support.
  * Bug 1113: fix name conflict with C99's "I".
  * Add missing delete operator overloads in
    EIGEN_MAKE_ALIGNED_OPERATOR_NEW
  * Fix (A*B).maxCoeff(i) and similar.
  * Workaround an ICE with VC2015 Update1 x64.
  * Bug 1156: fix several function declarations whose arguments
    were passed by value instead of being passed by reference
  * Bug 1164: fix std::list and std::deque specializations such
    that our aligned allocator is automatically activatived only
    when the user did not specified an allocator (or specified the
    default std::allocator).
  Others:
  * Fix BLAS backend (aka MKL) for empty matrix products.
  * Bug 1134: fix JacobiSVD pre-allocation.
  * Bug 1111: fix infinite recursion in
    sparse-column-major.row(i).nonZeros() (it now produces a
    compilation error)
  * Bug 1106: workaround a compilation issue in Sparse module for
    msvc-icc combo
  * Bug 1153: remove the usage of __GXX_EXPERIMENTAL_CXX0X__ to
    detect C++11 support
  * Bug 1143: work-around gcc bug in COLAMD
  * Improve support for matrix products with empty factors.
  * Fix and clarify documentation of Transform wrt
    operator*(MatrixBase)
  * Add a matrix-free conjugate gradient example.
  * Fix cost computation in CwiseUnaryView (internal)
  * Remove custom unaligned loads for SSE.
  * Some warning fixes.
  * Several other documentation clarifications.
- Updated build requirement superlu to superlu-devel.
- Added a patch "eigen_pkgconfig.patch" to fix pkg-config file
  includedir (taken from Fedora).
- Added a patch "01_install_FindEigen3.patch" to install
  FindEigen3.cmake (taken from Fedora).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470571200">- Update to version 3.2.9:
  Main fixes and improvements:
  * Improve numerical robustness of JacobiSVD (backported from 3.3)
  * Bug 1017: prevents underflows in makeHouseholder
  * Fix numerical accuracy issue in the extraction of complex
    eigenvalue pairs in real generalized eigenvalue problems.
  * Fix support for vector.homogeneous().asDiagonal()
  * Bug 1238: fix SparseMatrix::sum() overload for un-compressed
    mode
  * Bug 1213: workaround gcc linking issue with anonymous enums.
  * Bug 1236: fix possible integer overflow in sparse-sparse
    product
  * Improve detection of identical matrices when applying a
    permutation (e.g., mat = perm * mat)
  * Fix usage of nesting type in blas_traits. In practice, this
    fixes compilation of expressions such as A*(A*A)^T
  * CMake: fixes support of Ninja generator
  * Add a StorageIndex typedef to sparse matrices and expressions
    to ease porting code to 3.3
    (see http://eigen.tuxfamily.org/index.php?title=3.3#Index_typedef)
  * Bug 1200: make aligned_allocator c++11 compatible (backported
    from 3.3)
  * Bug 1182: improve generality of abs2 (backported from 3.3)
  * Bug 537: fix compilation of Quaternion with Apples's compiler
  * Bug 1176: allow products between compatible scalar types
  * Bug 1172: make valuePtr and innerIndexPtr properly return null
    for empty sparse matrices.
  * Bug 1170: skip calls to memcpy/memmove for empty inputs.
  Others:
  * Bug 1242: fix comma initializer with empty matrices.
  * Improves support for MKL's PARDISO solver.
  * Fix a compilation issue with Pastix solver.
  * Add some missing explicit scalar conversions
  * Fix a compilation issue with matrix exponential (unsupported
    MatrixFunctions module).
  * Bug 734: fix a storage order issue in unsupported Spline module
  * Bug 1222: fix a compilation issue in AutoDiffScalar
  * Bug 1221: shutdown some GCC6's warnings.
  * Bug 1175: fix index type conversion warnings in sparse to dense
    conversion.
- Removed build requirements gnu-free-fonts and texlive-amsfonts
  (not needed anymore).</changelog>
  <changelog author="olaf@aepfle.de" date="1483531200">- Require texlive-dvips during build</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488888000">- Update to version 3.3.3:
  * Lots of changes. See
    http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.3.3
    for details.
- Added new build requirements libboost_headers-devel for
  Tumbleweed and boost-devel for openSUSE &lt;= 13.2.
- Rebased 0001-Disable-Altivec-for-ppc64le.patch and
  0001-Do-stack-allignment-on-ppc.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499256000">- Update to version 3.3.4:
  General:
  * Improve speed of Jacobi rotation when mixing complex and real
    types.
  * Bug 1405: enable StrictlyLower/StrictlyUpper triangularView as
    the destination of matrix*matrix products.
  * UmfPack support: enable changes in the control settings and add
    report functions.
  * Bug 1423: fix LSCG's Jacobi preconditioner for row-major
    matrices.
  * Bug 1424: fix compilation issue with abs and unsigned integers
    as scalar type.
  * Bug 1410: fix lvalue propagation of Array/Matrix-Wrapper with a
    const nested expression.
  * Bug 1403: fix several implicit scalar type conversion making
    SVD decompositions compatible with ceres::Jet.
  * Fix some real-to-scalar-to-real useless conversions in
    ColPivHouseholderQR.
  Regressions:
  * Fix dense * sparse-selfadjoint-view product.
  * Bug 1417: make LinSpace compatible with std::complex.
  * Bug 1400: fix stableNorm alignment issue with
    EIGEN_DONT_ALIGN_STATICALLY.
  * Bug 1411: fix alignment issue in Quaternion.
  * Fix compilation of operations between nested Arrays.
  * Bug 1435: fix aliasing issue in expressions like: A = C - B*A.
  Others:
  * Fix compilation with gcc 4.3 and ARM NEON.
  * Fix prefetches on ARM64 and ARM32.
  * Fix out-of-bounds check in COLAMD.
  * Few minor fixes regarding nvcc/CUDA support, including bug
    1396.
  * Improve cmake scripts for Pastix and BLAS detection.
  * Bug 1401: fix compilation of "cond ? x : -x" with x an
    AutoDiffScalar
  * Fix compilation of matrix log with Map as input.
  * Add specializations of std::numeric_limits for Eigen::half and
    and AutoDiffScalar
  * Fix compilation of streaming nested Array, i.e.,
    cout &lt;&lt; Array&lt;Array&lt;&gt;&gt;</changelog>
  <changelog author="cfeck@kde.org" date="1500379200">- Split documentation into its own -doc package due to size.</changelog>
  <changelog author="jengelh@inai.de" date="1502539200">- Use right RPM group.</changelog>
  <changelog author="alarrosa@suse.com" date="1510056000">- Remove libqt4 from BuildRequires since it's actually only required
  by some demos and tests which are simply not built when it's not
  available (except on Leap, where libqt4 is required)</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1570881600">- Added eigen3-3.3.1-fixcmake.patch (Fix double {prefix} as we use
  INCLUDE_INSTALL_DIR with {_includedir}. Fixes boo#1148642.</changelog>
</package>
<package pkgid="32ed27f31570522cde169d892a12d8c89fbf371cd3db6a21b42e38f8229336e0" name="elfutils" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="b001feea2137533c046383b8fc5cf2e7bdc071bfa7ee4c08e8958f1db3ace3b3" name="elfutils" arch="src">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="c9ea7f85e047502e2484292239fc33552e71f53758aaf79720e3a41cd0fa413e" name="elfutils" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="c4fee0b9a6599939d6407c4895badb49cdef3db771645daeb87aac1b82500076" name="elfutils-lang" arch="noarch">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="2ff118e024feedb8d8d03c3faef3d5042525bdc4518f4b2de5786e03a61f5b65" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.11" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
</package>
<package pkgid="be84284d6f28f3079f1c7899840544e83273d720ffc91a244bf21cf3d597d6ae" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
</package>
<package pkgid="011e76b7fd2c3a51cb19ee967b35778e3c4cde878ad626214a8e19de52a7e193" name="enigmail" arch="src">
  <version epoch="0" ver="2.1.2" rel="lp151.2.6.1"/>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1562846400">- enimail 2.0.12:
  * set the default keyserver to keys.openpgp.org in order to
    mitigate the SKS Keyserver Network Attack boo#1141025</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566302400">- enigmail 2.1.2:
  * compatibility with Mozilla Thunderbird 68
  * New simplified setup wizard
  * Full support for keys.openpgp.org
  * Default to ECC keys on GnuPG 2.1 or later
  * Autocrypt: implemented key-gossip and updates to known keys</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568980800">- boo#1151317: SeaMonkey is no longer supported. Update description
  and no longer put in SeaMonkey addons path</changelog>
</package>
<package pkgid="51015d363dbc69e449d442b99cf588e9867030ece5756265f185cba3888005b9" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp151.2.6.1"/>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1562846400">- enimail 2.0.12:
  * set the default keyserver to keys.openpgp.org in order to
    mitigate the SKS Keyserver Network Attack boo#1141025</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566302400">- enigmail 2.1.2:
  * compatibility with Mozilla Thunderbird 68
  * New simplified setup wizard
  * Full support for keys.openpgp.org
  * Default to ECC keys on GnuPG 2.1 or later
  * Autocrypt: implemented key-gossip and updates to known keys</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568980800">- boo#1151317: SeaMonkey is no longer supported. Update description
  and no longer put in SeaMonkey addons path</changelog>
</package>
<package pkgid="e9bb3966f6c5ad10fc74d7361011f9ec7402faf9fcb7f841e26727b9dbe6c656" name="enigmail" arch="src">
  <version epoch="0" ver="2.1.5" rel="lp151.2.9.1"/>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1562846400">- enimail 2.0.12:
  * set the default keyserver to keys.openpgp.org in order to
    mitigate the SKS Keyserver Network Attack boo#1141025</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566302400">- enigmail 2.1.2:
  * compatibility with Mozilla Thunderbird 68
  * New simplified setup wizard
  * Full support for keys.openpgp.org
  * Default to ECC keys on GnuPG 2.1 or later
  * Autocrypt: implemented key-gossip and updates to known keys</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568980800">- boo#1151317: SeaMonkey is no longer supported. Update description
  and no longer put in SeaMonkey addons path</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1572782400">- enigmail 2.1.3:
  * fix a bug in the setup wizard that could lead the wizard to
    never complete scanning the inbox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576411200">- enigmail 2.1.4:
  * Fixes for UI glitches
  * Option to "Attach public key to messages" was not restored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1578052800">- enigmail 2.1.5:
  * Security issue: unsigned MIME parts displayed as signed boo#1159973
  * Ensure that upgrading GnuPG 2.0.x to 2.2.x upgrade converts keyring format
  * Make Enigmail Compatible with Protected-Headers spec, draft 2</changelog>
</package>
<package pkgid="4cd5176eee088aa151b894c884a682c6747b27975aafdbef45be12e447848610" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="lp151.2.9.1"/>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1562846400">- enimail 2.0.12:
  * set the default keyserver to keys.openpgp.org in order to
    mitigate the SKS Keyserver Network Attack boo#1141025</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566302400">- enigmail 2.1.2:
  * compatibility with Mozilla Thunderbird 68
  * New simplified setup wizard
  * Full support for keys.openpgp.org
  * Default to ECC keys on GnuPG 2.1 or later
  * Autocrypt: implemented key-gossip and updates to known keys</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568980800">- boo#1151317: SeaMonkey is no longer supported. Update description
  and no longer put in SeaMonkey addons path</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1572782400">- enigmail 2.1.3:
  * fix a bug in the setup wizard that could lead the wizard to
    never complete scanning the inbox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576411200">- enigmail 2.1.4:
  * Fixes for UI glitches
  * Option to "Attach public key to messages" was not restored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1578052800">- enigmail 2.1.5:
  * Security issue: unsigned MIME parts displayed as signed boo#1159973
  * Ensure that upgrading GnuPG 2.0.x to 2.2.x upgrade converts keyring format
  * Make Enigmail Compatible with Protected-Headers spec, draft 2</changelog>
</package>
<package pkgid="b0d81e6949f5b725db24901c76f9be3a240fcb1c6e9dd677ff8efadd55e950da" name="enigmail" arch="src">
  <version epoch="0" ver="2.2.4" rel="lp151.2.12.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1562846400">- enimail 2.0.12:
  * set the default keyserver to keys.openpgp.org in order to
    mitigate the SKS Keyserver Network Attack boo#1141025</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566302400">- enigmail 2.1.2:
  * compatibility with Mozilla Thunderbird 68
  * New simplified setup wizard
  * Full support for keys.openpgp.org
  * Default to ECC keys on GnuPG 2.1 or later
  * Autocrypt: implemented key-gossip and updates to known keys</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568980800">- boo#1151317: SeaMonkey is no longer supported. Update description
  and no longer put in SeaMonkey addons path</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1572782400">- enigmail 2.1.3:
  * fix a bug in the setup wizard that could lead the wizard to
    never complete scanning the inbox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576411200">- enigmail 2.1.4:
  * Fixes for UI glitches
  * Option to "Attach public key to messages" was not restored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1578052800">- enigmail 2.1.5:
  * Security issue: unsigned MIME parts displayed as signed boo#1159973
  * Ensure that upgrading GnuPG 2.0.x to 2.2.x upgrade converts keyring format
  * Make Enigmail Compatible with Protected-Headers spec, draft 2</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586347200">- enigmail 2.1.6:
  * Fix Setup Wizard gets Stuck if Keys in GnuPG available
  * Fix Cannot confirm publish GnuPG key on WKS server
  * Fix Automatic Key Refresh doesn't work with keys.openpgp.org
  * Fix per-recipients rule 'set enigmail rules for' field unable to edit
  * Fix File names of attachments are not encrypted</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593345600">- enigmail 2.1.7:
  * display information about an upcoming release of Thunderbird 78
  * Fix minor rendering problem with Deep Dark theme
  * Fix running "Encrypt to key" filter fails silently
  * Fix improper Content-Type setting for keyserver upload</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1600430400">- enigmail 2.1.8:
  * Fix "Encrypt to key" action destroys PGP/ MIME signature
  * Fix Filter fails silently on Enigmail's "Encrypt to key" action
  * Fix Disable autocrypt header on custom sender address
  * Fix VKS keyserver with custom port cannot be accesse
  * Fix Filter fails silently on Enigmail's "Encrypt to key" action
  * Fix Thunderbird dies immediately when sending a signed empty-bodied mail
  * Fix Decrypted mail has empty Content-Type in the MIME part</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1601035200">- enigmail 2.2.2
  * Enigmail version 2.2.x is a specially modified version, which
    only works with Thunderbird 78 and later version. Enigmail 2.2.x
    doesn't provide the traditional functionality, rather it exists
    to help you migrate your keys and settings to Thunderbird 78.</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1602072000">- enigmail 2.2.4
  * bugfixes and improvements
  * translation updates</changelog>
</package>
<package pkgid="e278845ce883c86e96970dc8514960b000d7b2d1e428599cc5375971e5bd2318" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.2.4" rel="lp151.2.12.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1562846400">- enimail 2.0.12:
  * set the default keyserver to keys.openpgp.org in order to
    mitigate the SKS Keyserver Network Attack boo#1141025</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566302400">- enigmail 2.1.2:
  * compatibility with Mozilla Thunderbird 68
  * New simplified setup wizard
  * Full support for keys.openpgp.org
  * Default to ECC keys on GnuPG 2.1 or later
  * Autocrypt: implemented key-gossip and updates to known keys</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568980800">- boo#1151317: SeaMonkey is no longer supported. Update description
  and no longer put in SeaMonkey addons path</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1572782400">- enigmail 2.1.3:
  * fix a bug in the setup wizard that could lead the wizard to
    never complete scanning the inbox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576411200">- enigmail 2.1.4:
  * Fixes for UI glitches
  * Option to "Attach public key to messages" was not restored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1578052800">- enigmail 2.1.5:
  * Security issue: unsigned MIME parts displayed as signed boo#1159973
  * Ensure that upgrading GnuPG 2.0.x to 2.2.x upgrade converts keyring format
  * Make Enigmail Compatible with Protected-Headers spec, draft 2</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586347200">- enigmail 2.1.6:
  * Fix Setup Wizard gets Stuck if Keys in GnuPG available
  * Fix Cannot confirm publish GnuPG key on WKS server
  * Fix Automatic Key Refresh doesn't work with keys.openpgp.org
  * Fix per-recipients rule 'set enigmail rules for' field unable to edit
  * Fix File names of attachments are not encrypted</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593345600">- enigmail 2.1.7:
  * display information about an upcoming release of Thunderbird 78
  * Fix minor rendering problem with Deep Dark theme
  * Fix running "Encrypt to key" filter fails silently
  * Fix improper Content-Type setting for keyserver upload</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1600430400">- enigmail 2.1.8:
  * Fix "Encrypt to key" action destroys PGP/ MIME signature
  * Fix Filter fails silently on Enigmail's "Encrypt to key" action
  * Fix Disable autocrypt header on custom sender address
  * Fix VKS keyserver with custom port cannot be accesse
  * Fix Filter fails silently on Enigmail's "Encrypt to key" action
  * Fix Thunderbird dies immediately when sending a signed empty-bodied mail
  * Fix Decrypted mail has empty Content-Type in the MIME part</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1601035200">- enigmail 2.2.2
  * Enigmail version 2.2.x is a specially modified version, which
    only works with Thunderbird 78 and later version. Enigmail 2.2.x
    doesn't provide the traditional functionality, rather it exists
    to help you migrate your keys and settings to Thunderbird 78.</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1602072000">- enigmail 2.2.4
  * bugfixes and improvements
  * translation updates</changelog>
</package>
<package pkgid="58cce9d0a32d24f01b52ad39b96dd4b81644fcd0e799d6c194910cdf7c3dbff6" name="epiphany" arch="src">
  <version epoch="0" ver="3.28.1.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="01db430042f31a5fe5177dac37c136461bf3355d6e18d6f73573b2a3dff49901" name="epiphany" arch="x86_64">
  <version epoch="0" ver="3.28.1.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="59c4c504497f7097ed49de9879720f454a1627718136f14f7aef21b6692d2216" name="epiphany-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.28.1.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="2bfbc714c581b2d460c529ee387e4a62c767c489a8dc98568bf24c16d35aa16f" name="epiphany-lang" arch="noarch">
  <version epoch="0" ver="3.28.1.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="d0b455c7a370725a1b28bf05e4cb654e9170f95d7a5e09b40cd12868b07c1667" name="evince" arch="src">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="78fc15f26f631f1f00ece0ebf8f471b2e52eb871af738bcce4d6ae06e585d495" name="evince" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="f215c38b4d79c25cffbe50cda345bb35b9f15afc5dc4519fa3ce2e68e4cd4426" name="evince" arch="src">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="9c759495cbf8333760f1567974b09aab67aeade5978abe9fe91dbc8c4c8230b0" name="evince" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="a1597bd8b2182d39be94a1d8262edbbcbe2b2c98e5c8f7b37dce8309724be90d" name="evince-devel" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="4f12619903194a93d07e641b0cdafe05c7d3787df8e5c5705a183fd60b1d8624" name="evince-devel" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="aa10beab1a84b07af0a4c56380d1cbd02bc82c8b37c0d74084366339b77be387" name="evince-lang" arch="noarch">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="285206c09c0ce57624d62b84f7d69e6333c7d2118765c572e852dc8498aaf1a5" name="evince-lang" arch="noarch">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="db365e4518dc888b78fed9642ca5a2fa39f5e0d079520a0d6a56de320d0702b5" name="evince-plugin-comicsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="f5561b90136c5c1249180cf84e75e9aff6cf70e750b19db46c8e2fdb4a076ef3" name="evince-plugin-comicsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="bbe71be91a279962e64f5c750ff0c8dc40f8881918f6fe28d7f5a66a009de6a5" name="evince-plugin-djvudocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="af7e0351c925f5a91557e4da2d2186e7bf7624958531a0289f631b06c3580f35" name="evince-plugin-djvudocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="c178a5c38c5ca42418a2d8d2628e5ad1f591c5495d39bd341dc706dfe3a18ae0" name="evince-plugin-dvidocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="837303b026d97205e6784f75beb23643c9552035b819893e0b4ba18299dceac7" name="evince-plugin-dvidocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="47eb414c66afaae382dcb3b0889b2afe1fc8e6d84eadb8eef38fe12214aa67b8" name="evince-plugin-pdfdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="3ab5874169c6154a7cdb4e4a3d23e5f369c92d026ee954eabaecb0395bf9a9f9" name="evince-plugin-pdfdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="bc5244be8b0eda471f75aa360c4e4c3aa67068c78a5084af76a92dcb0bd7baca" name="evince-plugin-psdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="77794eaac9ff3d5190f0cc779614b950fe7a398700ea1cc2a012e02d957734b7" name="evince-plugin-psdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="57dbceee4e0cc6b1042d108c0f1ac5cea182544ad3ad0f1b4cf9eeaa632e6aa2" name="evince-plugin-tiffdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="e5f73b987d0089e70bca4da7d3ea02b3f20db5d0a0c267827656f205719744db" name="evince-plugin-tiffdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="8eef4a8e27bd88d3d801ca1e2fcc923a4bac85335328b670daa629399d97098b" name="evince-plugin-xpsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="082afb05f0107ff9d30238b020c08b2e6ec2487950b2820e14d3e7f936d8767a" name="evince-plugin-xpsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="23dd2a82ba96ddf77afb13752109350d00fdd461ba7db9856e0f5022aa38d98e" name="evolution" arch="src">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="3f99ee876d30643890bbcb3a636dd47b8b77b9b92e9462a0f3e982f5146ebfcf" name="evolution" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="2f54ed7dceb0d3d4ef32a7087a1034de764b86d77429529fc144199b181c315c" name="evolution" arch="src">
  <version epoch="0" ver="3.26.6" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1585742400">- Add iso-codes to BuildRequires: needed to display language names
  of spelling dictionaries in settings (bsc#1161669).</changelog>
</package>
<package pkgid="0e728ca60f6d7cf0e09805dbfca631745738de1365a17e199a94fe0e552d73e4" name="evolution" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1585742400">- Add iso-codes to BuildRequires: needed to display language names
  of spelling dictionaries in settings (bsc#1161669).</changelog>
</package>
<package pkgid="22072846526ad326755547efb5353aed3521a5e6660093ab9609ef9e20bef2c7" name="evolution-devel" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="4f984a30b09db60a4cb9e962fdce8dcba5060b341cef24d2c7765eec876aa9c0" name="evolution-devel" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1585742400">- Add iso-codes to BuildRequires: needed to display language names
  of spelling dictionaries in settings (bsc#1161669).</changelog>
</package>
<package pkgid="7d84e48ecc06f48cac395bef96a24c47844ea23561fb29db75490a4cf6d4f21c" name="evolution-lang" arch="noarch">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="96c6668933ddae25d095be511421aceb6ca8a76f65f9ba46b91b2f9eedfb38e8" name="evolution-lang" arch="noarch">
  <version epoch="0" ver="3.26.6" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1585742400">- Add iso-codes to BuildRequires: needed to display language names
  of spelling dictionaries in settings (bsc#1161669).</changelog>
</package>
<package pkgid="c71397fb4c471f06f1f41da41f140713e403dc10bb01269d0967411049fda5e9" name="evolution-plugin-bogofilter" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="2de5d8117223d41d7f3864ee447e4ed0a1e838c8b5044cabba0499c72667b981" name="evolution-plugin-bogofilter" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1585742400">- Add iso-codes to BuildRequires: needed to display language names
  of spelling dictionaries in settings (bsc#1161669).</changelog>
</package>
<package pkgid="eaa6b4c5315be7bba1f998cd48ed83562613204df996470e99474f4f4eea6dcf" name="evolution-plugin-pst-import" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="724a7ad7f2325dbc2984eeefc99283057d474b6670d9037481fa359c0cbb7a8d" name="evolution-plugin-pst-import" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1585742400">- Add iso-codes to BuildRequires: needed to display language names
  of spelling dictionaries in settings (bsc#1161669).</changelog>
</package>
<package pkgid="aab2f9a3311c7ed9bae54260ddc07509e609bfa138e4a8a709c0fd6f16b54a9e" name="evolution-plugin-spamassassin" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="82a452bc92c1ae44bdae7fbd25638625b3be68d4d0582c1c864da5ca6aa37fbe" name="evolution-plugin-spamassassin" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1585742400">- Add iso-codes to BuildRequires: needed to display language names
  of spelling dictionaries in settings (bsc#1161669).</changelog>
</package>
<package pkgid="2967959b2bb4c10e6c34676ae8d8eb7e21f15364cf8aec4864b9117b13bdade5" name="exempi" arch="src">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="hfiguiere@suse.de" date="1218628800">- New upstream version 2.0.2
  + Fix bug fdo#16598: TLS detection.
  + Better error management
  + Bugs fdo#14612 and fdo#14613</changelog>
  <changelog author="maw@suse.de" date="1224676800">- Make debug packages require a specific %{version}-%{release}.</changelog>
  <changelog author="hfiguiere@suse.de" date="1230120000">- New upstream version 2.1.0
  + Upgrade XMPCore to Adobe XMP 4.4.2
  + New: NS_PDF namespace for PDF.
  + New: API xmp_prefix_namespace_uri() and xmp_namespace_prefix(). fdo#14962.
  + Bug: make sure boost &gt;1.35 does not fail test with system().
  + Bug: unit test now use boost/test/minimal.hpp to work with more boost
    install. (known boost.test bug)
  + Bug: fix a typo in a CHECK_PTR call causing warnings on gcc &lt; 4.
  + Bug: no longer define UNIX_ENV in exempi.cpp and let CPPFLAGS do it.
  + Bug fdo#16139: the list of exported symbols was too large.
  + Bug fdo#18635: fix crasher.
- Added patch exempi-rpmlint.diff to make rpmlint happy. fdo#19312
- Added zlib-devel as a dependency
- Remove .la and disable static</changelog>
  <changelog author="crrodriguez@suse.de" date="1231502400">- remove static libraries and "la" files
- correct -devel package deps</changelog>
  <changelog author="vuntz@novell.com" date="1240920000">- Add exempi-gcc44.patch to fix build with gcc 4.4.
- Remove AutoReqProv: it's default now.</changelog>
  <changelog author="vuntz@novell.com" date="1248091200">- Update to version 2.1.1:
  + Added shave to the build system for sane output. (build only)
  + fdo#16030: if the property is an array or struct allow "" to be
    passed as a value.
  + fdo#19312: source/XMPFiles/FileHandlers/P2_Handler.cpp was
    using an improper string comparison. (made rpmlint unhappy).
  + fdo#20554: Missing file on MacOS X.
  + fdo#20554: Detect ldflags properly.
  + fdo#20622: Catch unhandled exceptions in
    xmp_files_can_put_xmp().
  + fdo#21934: Mismatched new [] / delete.
  + fdo#22554: Fix a SIGFPE encountered on some invalid files.
    (bgo#586720)
- Drop exempi-rpmlint.diff: fixed upstream.
- Drop exempi-gcc44.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1283860800">- Add pkg-config BuildRequires to get a pkgconfig() provides for
  the devel subpackage.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291896000">- run make check
- Disable usage of "shave-libtool" that messes up post build checks
  provide --disable-silent-rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1317384001">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="e1c88b812e972c57ab2f8da32f53748da82c39c9b1869009658357734cc4c112" name="exempi-tools" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="ddd718469a72f0f427f08bbc58dcec820911522f2ae87d5483e0478b1296b604" name="exempi-tools" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="dc8948c298999adefd4c5ee6fb891b6abb7f014fbb7c7639485304608b88b1c7" name="exim" arch="src">
  <version epoch="0" ver="4.88" rel="lp151.4.12.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
</package>
<package pkgid="efba4166606bd5a1c1fc77ad644dcad7a73d491671d5ffe29c0a8dcfe03c1525" name="exim" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.12.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
</package>
<package pkgid="795a82f1413489cfccb1ac444f619a54068545effd8ca390e9fce4a833313717" name="exim" arch="src">
  <version epoch="0" ver="4.88" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="c8b2063b7d0fbf855d3ef9dabe039d0004c51e29753084d62041d35b31081cca" name="exim" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="e2582c287282a4b572d5009487f96625b71881247da2761f60c0444ace78ca75" name="exim" arch="src">
  <version epoch="0" ver="4.88" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="ca289b93895f8d839ffbd6bb2cf066352b43ceacbdccc45fc7e5baf2e7058f2b" name="exim" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="e54410a42d68336ddc5780346610619194a54f6cf16b285fabf785a57a3a0b80" name="exim" arch="src">
  <version epoch="0" ver="4.88" rel="lp151.4.9.1"/>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
</package>
<package pkgid="e6961f7831423d018e9b298f706c36d15d2533f3de31944d0fd3fc1257364c71" name="exim" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.9.1"/>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
</package>
<package pkgid="0df65c19f258446bc0a7ec12723085e8d7188f6a017289c4281292e3141a0dba" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.12.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
</package>
<package pkgid="b61e3b572821ab0bb70a56756bfceeff46861c38413b7dc2f9fb710eb63d435f" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="eb6138614b251f82fe3dc6e97f8d371deae0abeb89682b4309c3575dc414f7f5" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="b63e695687244d6d806486cc1ac843966990b75fb9d1c6cab804e215247b082a" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.9.1"/>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
</package>
<package pkgid="37e7396f0d0d4dead70844c652df43f6a825f0101756069842944ecff5683d34" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.12.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
</package>
<package pkgid="f74cd9ed7d4051871f4a1c06be8211e1a1d16f112532384014df57665e7259c6" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="2bb16f17936c6aa9476b4f1aa61e2a23380365e3bf9549bcc166104f7bc3fbcb" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="d09719596f3840d53e077344e1889ef346821d440f2b0b347e7b830d113495aa" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.9.1"/>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
</package>
<package pkgid="f33e9d458068a03e6f1c8375147f7ea252e74c65d667b45abef1d231c954e849" name="exiv2" arch="i586">
  <version epoch="0" ver="0.26" rel="lp151.7.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)
  * Fixes CVE-2017-9239 (bsc#1040973): null pointer dereference in doWriteImage
  * Fixes CVE-2018-17229 (bsc#1109175): (Heap buffer overflow in Exiv2::d2Data)
  * Fixes CVE-2018-17230 (bsc#1109176): (heap-based buffer overflow in Exiv2::ul2Data)
  * Fixes CVE-2017-1000126 (Stack out of bounds read in webp parser) (bsc#1068873)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1585051200">- add 0001-Avoid-null-pointer-exception-due-to-NULL-return-valu.patch (bsc#1142684, CVE-2019-13114):
  * fixes null-pointer dereference in http.c causing denial of service
- add 0001-IptcData-printStructure-Remove-buffer-overrun.patch  (bsc#1088424, CVE-2018-9305):
  * fixes an out-of-bounds read in IptcData::printStructure in iptc.c
- add 0001-Fix-SEGV-in-DataValue-Copy.patch (bsc#1109299, CVE-2018-17282):
  * fixes null pointer dereference in Exiv2:DataValue:copy in value.cpp
- add 0001-PSD-Use-Safe-add-for-preventing-overflows-in-PSD-fil.patch,
  0002-PSD-enforce-Length-of-image-resource-section-file-si.patch (CVE-2018-19108, bsc#1115364):
  * fixes denial of service in Exiv2::PsdImage::readMetadata
- add 0001-Fix-561.-Use-proper-counter-for-the-idx-variable.patch (CVE-2018-19607, bsc#1117513):
  * fixes a denial of service (NULL pointer dereference and application crash)</changelog>
</package>
<package pkgid="f6fa5b2a95dbe6759ab69d396c165e28b01107af56b7ff3d93d03665f0546195" name="exiv2" arch="src">
  <version epoch="0" ver="0.26" rel="lp151.7.3.1"/>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)
  * Fixes CVE-2017-9239 (bsc#1040973): null pointer dereference in doWriteImage
  * Fixes CVE-2018-17229 (bsc#1109175): (Heap buffer overflow in Exiv2::d2Data)
  * Fixes CVE-2018-17230 (bsc#1109176): (heap-based buffer overflow in Exiv2::ul2Data)
  * Fixes CVE-2017-1000126 (Stack out of bounds read in webp parser) (bsc#1068873)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1585051200">- add 0001-Avoid-null-pointer-exception-due-to-NULL-return-valu.patch (bsc#1142684, CVE-2019-13114):
  * fixes null-pointer dereference in http.c causing denial of service
- add 0001-IptcData-printStructure-Remove-buffer-overrun.patch  (bsc#1088424, CVE-2018-9305):
  * fixes an out-of-bounds read in IptcData::printStructure in iptc.c
- add 0001-Fix-SEGV-in-DataValue-Copy.patch (bsc#1109299, CVE-2018-17282):
  * fixes null pointer dereference in Exiv2:DataValue:copy in value.cpp
- add 0001-PSD-Use-Safe-add-for-preventing-overflows-in-PSD-fil.patch,
  0002-PSD-enforce-Length-of-image-resource-section-file-si.patch (CVE-2018-19108, bsc#1115364):
  * fixes denial of service in Exiv2::PsdImage::readMetadata
- add 0001-Fix-561.-Use-proper-counter-for-the-idx-variable.patch (CVE-2018-19607, bsc#1117513):
  * fixes a denial of service (NULL pointer dereference and application crash)</changelog>
</package>
<package pkgid="50bf4abf225d0b602b97ce94cca409c27ab746c366a1f178bc58514280d11e96" name="exiv2" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp151.7.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)
  * Fixes CVE-2017-9239 (bsc#1040973): null pointer dereference in doWriteImage
  * Fixes CVE-2018-17229 (bsc#1109175): (Heap buffer overflow in Exiv2::d2Data)
  * Fixes CVE-2018-17230 (bsc#1109176): (heap-based buffer overflow in Exiv2::ul2Data)
  * Fixes CVE-2017-1000126 (Stack out of bounds read in webp parser) (bsc#1068873)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1585051200">- add 0001-Avoid-null-pointer-exception-due-to-NULL-return-valu.patch (bsc#1142684, CVE-2019-13114):
  * fixes null-pointer dereference in http.c causing denial of service
- add 0001-IptcData-printStructure-Remove-buffer-overrun.patch  (bsc#1088424, CVE-2018-9305):
  * fixes an out-of-bounds read in IptcData::printStructure in iptc.c
- add 0001-Fix-SEGV-in-DataValue-Copy.patch (bsc#1109299, CVE-2018-17282):
  * fixes null pointer dereference in Exiv2:DataValue:copy in value.cpp
- add 0001-PSD-Use-Safe-add-for-preventing-overflows-in-PSD-fil.patch,
  0002-PSD-enforce-Length-of-image-resource-section-file-si.patch (CVE-2018-19108, bsc#1115364):
  * fixes denial of service in Exiv2::PsdImage::readMetadata
- add 0001-Fix-561.-Use-proper-counter-for-the-idx-variable.patch (CVE-2018-19607, bsc#1117513):
  * fixes a denial of service (NULL pointer dereference and application crash)</changelog>
</package>
<package pkgid="c667cc8ae17d8dd928cf8291b0df067775a004b54ee6190a1e07d9f6676aea28" name="exiv2-lang" arch="noarch">
  <version epoch="0" ver="0.26" rel="lp151.7.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)
  * Fixes CVE-2017-9239 (bsc#1040973): null pointer dereference in doWriteImage
  * Fixes CVE-2018-17229 (bsc#1109175): (Heap buffer overflow in Exiv2::d2Data)
  * Fixes CVE-2018-17230 (bsc#1109176): (heap-based buffer overflow in Exiv2::ul2Data)
  * Fixes CVE-2017-1000126 (Stack out of bounds read in webp parser) (bsc#1068873)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1585051200">- add 0001-Avoid-null-pointer-exception-due-to-NULL-return-valu.patch (bsc#1142684, CVE-2019-13114):
  * fixes null-pointer dereference in http.c causing denial of service
- add 0001-IptcData-printStructure-Remove-buffer-overrun.patch  (bsc#1088424, CVE-2018-9305):
  * fixes an out-of-bounds read in IptcData::printStructure in iptc.c
- add 0001-Fix-SEGV-in-DataValue-Copy.patch (bsc#1109299, CVE-2018-17282):
  * fixes null pointer dereference in Exiv2:DataValue:copy in value.cpp
- add 0001-PSD-Use-Safe-add-for-preventing-overflows-in-PSD-fil.patch,
  0002-PSD-enforce-Length-of-image-resource-section-file-si.patch (CVE-2018-19108, bsc#1115364):
  * fixes denial of service in Exiv2::PsdImage::readMetadata
- add 0001-Fix-561.-Use-proper-counter-for-the-idx-variable.patch (CVE-2018-19607, bsc#1117513):
  * fixes a denial of service (NULL pointer dereference and application crash)</changelog>
</package>
<package pkgid="bccb91dffe0aaec0383b7965d8beac09527873a4efe3183f1e353203d52613e9" name="expat" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="1eff234dae4e2e82d19af00ea4dea1936206f737ce7ea1573d82613d63750aea" name="expat" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1358510400">- really hide private Xml* symbols [bnc#798644]
  * modified visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
  <changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
  <changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="5c835a1cfba21788fac7d7f292fcb3beb1c6f0bc41e6fc0aea447f08cc4a2861" name="expat" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="1117669582319dc3a49c52df89ad50bdb74076f59bcf172b715172d4df60ad79" name="expat" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="095f060114d0a0dab086eb047bdea44e64b06387b1db5df257179436750c917d" name="expat" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp151.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
  <changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
  <changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="3b8ef85803f58d7147285e4196bf5a3457601779dcb508af6480bab54d9472ba" name="expat" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="a799f666c2a89b6b3d3d4816670fcde8671bf143d2dd597c623c700854d88e28" name="fbiterm" arch="i586">
  <version epoch="0" ver="0.5.20040304" rel="lp151.4.3.1"/>
  <changelog author="cfarrell@suse.com" date="1354017600">- license update: SUSE-CPL-0.5</changelog>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="c5d34b967d60cb02fd7f2fb24d94b5bbeb0bb6da2baa134000aa27a78102cd4a" name="fbiterm" arch="x86_64">
  <version epoch="0" ver="0.5.20040304" rel="lp151.4.3.1"/>
  <changelog author="cfarrell@suse.com" date="1354017600">- license update: SUSE-CPL-0.5</changelog>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="6f22dba83af8a1095fb72e686e3fd174ea97611ff045953a05c75e72afa1ddf7" name="fcitx-qt5" arch="i586">
  <version epoch="0" ver="1.2.2" rel="lp151.4.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418385600">- fcitx-qt5 is using private QPA API, which can, and does break BC
  even in point releases, so we need to hardcode libQt5Gui5 version</changelog>
  <changelog author="i@marguerite.su" date="1427976000">- update version 1.0.1
  * small fix against 1.0.0
- changes from 0.1.3 to 1.0.0
  * add COPYING
  * use platform name to check x11
  * access window function when context destructs is a bad thing
  * reorganize fcitx-qt5 library
- changes from 0.1.2 to 0.1.3
  * remove debug message
  * fix fcitx-qt5 display number resolution
  * fix pkg-config file
  * use filterEvent instead of x11FilterEvent
  * update dbus support
  * use new qt5 library name</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.0.2
  * fix google code issue 748
  * fix dependency check
  * fix leak
  * use xkbcommon for compose
  * install to lib instead of data</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- update version 1.0.3
  * fix build w/ qt 5.5</changelog>
  <changelog author="i@marguerite.su" date="1441022400">- update version 1.0.4
  * fix the coordinates for high dpi in qt5</changelog>
  <changelog author="i@marguerite.su" date="1450872000">- update version 1.0.5
  * implement locale in platform context
  * use link_directories for widgetaddons
  * use the correct var name
  * use some c++11 featues and fix ic not get recreated when
    fcitx restarts
  * clean proxy even it's invalid</changelog>
  <changelog author="i@marguerite.su" date="1480766400">- update version 1.0.6
  * [qt5]fix inconsistency between qstring and ucs4 string
    when handle surrounding
  * [qt5]fromUcs4 expect a null terminated string by default,
    give it a size
  * [qt5]use new connection syntax
  * [qt5]use more nullptr
  * [qt5]remove usage of QPointer in icdata
  * [qt5]don't crash if window-&gt;screen() is null</changelog>
  <changelog author="i@marguerite.su" date="1486814400">- update version 1.1.0
  * added guiwrapper for fcitx-qt5
  * fix build and add support for webengine</changelog>
  <changelog author="i@marguerite.su" date="1512216000">- update version 1.2.1
  * fix issue #27 and #28
  * Add relative rect support
- changes in version 1.2.0
  * Relicense platforminputcontext/ to BSD
  * do the real unwatch
  * prefer to recheck the availability after original service gone
  * set display type for fcitx5
  * add fcitx 5 format support
  * Adapt changes in fcitx5-qt to fix commitPreedit.
  * implement compatibility layer for fcitx5
  * try to reimplement im module with lgpl free code
  * make sure that quickphrae editor does not compile with qt4 header
  * move quickphrase editor to fcitx-qt5
- changes in version 1.1.1
  * fix high dpi screen position, only happen when you have two
    high dpi screen
  * use new cmake for package config
  * enforce cmake 3.1
  * handle the missing password flag
  * QInputMethod::update shouldn't be used by input method,
    just do query
  * workaround some qquickwidget bug</changelog>
  <changelog author="opensuse@trummer.xyz" date="1518264000">- update version 1.2.2
  * We already changed reset of code to use "isRelease" for
    filterEventFallback. This check should be changed accordingly.</changelog>
  <changelog author="lbeltrame@kde.org" date="1524916800">- Add upstream patch fix-compilation-with-qt-5.11.patch:
  * Fix compilation with Qt 5.11 (missing include)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1569844800">- Add upstream patch fix-remove-paths-warnings.patch
  * QOwnNotes always crash at close with fcitx-qt5 installed(boo#1152412)
- Change COPYING from %doc to %license</changelog>
</package>
<package pkgid="e98dd112cf25f27a3ea03e59a50b5e3f71a008c736fba44d56d872bb581754c6" name="fcitx-qt5" arch="src">
  <version epoch="0" ver="1.2.2" rel="lp151.4.3.1"/>
  <changelog author="i@marguerite.su" date="1334664000">- initial version 0.1.0</changelog>
  <changelog author="i@marguerite.su" date="1362312000">- update version 0.1.1
  * fix build and add libfcitx-qt5 for dbus.
- fix Qt5 dependency name from KDE:Qt50 repository.
- add baselibs.conf
  * because there're 32bit applications that needs input method
  * so we have to provide a 32bit input module too</changelog>
  <changelog author="i@marguerite.su" date="1402315200">- update version 0.1.2
  * Fix github issue fcitx/fcitx-qt5#2</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Fix baselibs requires, and shlib find-requires works
  also with baselibs</changelog>
  <changelog author="i@marguerite.su" date="1410782400">- add baselibs.conf to Source</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1418385600">- fcitx-qt5 is using private QPA API, which can, and does break BC
  even in point releases, so we need to hardcode libQt5Gui5 version</changelog>
  <changelog author="i@marguerite.su" date="1427976000">- update version 1.0.1
  * small fix against 1.0.0
- changes from 0.1.3 to 1.0.0
  * add COPYING
  * use platform name to check x11
  * access window function when context destructs is a bad thing
  * reorganize fcitx-qt5 library
- changes from 0.1.2 to 0.1.3
  * remove debug message
  * fix fcitx-qt5 display number resolution
  * fix pkg-config file
  * use filterEvent instead of x11FilterEvent
  * update dbus support
  * use new qt5 library name</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.0.2
  * fix google code issue 748
  * fix dependency check
  * fix leak
  * use xkbcommon for compose
  * install to lib instead of data</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- update version 1.0.3
  * fix build w/ qt 5.5</changelog>
  <changelog author="i@marguerite.su" date="1441022400">- update version 1.0.4
  * fix the coordinates for high dpi in qt5</changelog>
  <changelog author="i@marguerite.su" date="1450872000">- update version 1.0.5
  * implement locale in platform context
  * use link_directories for widgetaddons
  * use the correct var name
  * use some c++11 featues and fix ic not get recreated when
    fcitx restarts
  * clean proxy even it's invalid</changelog>
  <changelog author="i@marguerite.su" date="1480766400">- update version 1.0.6
  * [qt5]fix inconsistency between qstring and ucs4 string
    when handle surrounding
  * [qt5]fromUcs4 expect a null terminated string by default,
    give it a size
  * [qt5]use new connection syntax
  * [qt5]use more nullptr
  * [qt5]remove usage of QPointer in icdata
  * [qt5]don't crash if window-&gt;screen() is null</changelog>
  <changelog author="i@marguerite.su" date="1486814400">- update version 1.1.0
  * added guiwrapper for fcitx-qt5
  * fix build and add support for webengine</changelog>
  <changelog author="i@marguerite.su" date="1512216000">- update version 1.2.1
  * fix issue #27 and #28
  * Add relative rect support
- changes in version 1.2.0
  * Relicense platforminputcontext/ to BSD
  * do the real unwatch
  * prefer to recheck the availability after original service gone
  * set display type for fcitx5
  * add fcitx 5 format support
  * Adapt changes in fcitx5-qt to fix commitPreedit.
  * implement compatibility layer for fcitx5
  * try to reimplement im module with lgpl free code
  * make sure that quickphrae editor does not compile with qt4 header
  * move quickphrase editor to fcitx-qt5
- changes in version 1.1.1
  * fix high dpi screen position, only happen when you have two
    high dpi screen
  * use new cmake for package config
  * enforce cmake 3.1
  * handle the missing password flag
  * QInputMethod::update shouldn't be used by input method,
    just do query
  * workaround some qquickwidget bug</changelog>
  <changelog author="opensuse@trummer.xyz" date="1518264000">- update version 1.2.2
  * We already changed reset of code to use "isRelease" for
    filterEventFallback. This check should be changed accordingly.</changelog>
  <changelog author="lbeltrame@kde.org" date="1524916800">- Add upstream patch fix-compilation-with-qt-5.11.patch:
  * Fix compilation with Qt 5.11 (missing include)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1569844800">- Add upstream patch fix-remove-paths-warnings.patch
  * QOwnNotes always crash at close with fcitx-qt5 installed(boo#1152412)
- Change COPYING from %doc to %license</changelog>
</package>
<package pkgid="83050e609e550274e8fed4e33073a774c20143564f98a18102dbc07c21334ccc" name="fcitx-qt5" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="lp151.4.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418385600">- fcitx-qt5 is using private QPA API, which can, and does break BC
  even in point releases, so we need to hardcode libQt5Gui5 version</changelog>
  <changelog author="i@marguerite.su" date="1427976000">- update version 1.0.1
  * small fix against 1.0.0
- changes from 0.1.3 to 1.0.0
  * add COPYING
  * use platform name to check x11
  * access window function when context destructs is a bad thing
  * reorganize fcitx-qt5 library
- changes from 0.1.2 to 0.1.3
  * remove debug message
  * fix fcitx-qt5 display number resolution
  * fix pkg-config file
  * use filterEvent instead of x11FilterEvent
  * update dbus support
  * use new qt5 library name</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.0.2
  * fix google code issue 748
  * fix dependency check
  * fix leak
  * use xkbcommon for compose
  * install to lib instead of data</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- update version 1.0.3
  * fix build w/ qt 5.5</changelog>
  <changelog author="i@marguerite.su" date="1441022400">- update version 1.0.4
  * fix the coordinates for high dpi in qt5</changelog>
  <changelog author="i@marguerite.su" date="1450872000">- update version 1.0.5
  * implement locale in platform context
  * use link_directories for widgetaddons
  * use the correct var name
  * use some c++11 featues and fix ic not get recreated when
    fcitx restarts
  * clean proxy even it's invalid</changelog>
  <changelog author="i@marguerite.su" date="1480766400">- update version 1.0.6
  * [qt5]fix inconsistency between qstring and ucs4 string
    when handle surrounding
  * [qt5]fromUcs4 expect a null terminated string by default,
    give it a size
  * [qt5]use new connection syntax
  * [qt5]use more nullptr
  * [qt5]remove usage of QPointer in icdata
  * [qt5]don't crash if window-&gt;screen() is null</changelog>
  <changelog author="i@marguerite.su" date="1486814400">- update version 1.1.0
  * added guiwrapper for fcitx-qt5
  * fix build and add support for webengine</changelog>
  <changelog author="i@marguerite.su" date="1512216000">- update version 1.2.1
  * fix issue #27 and #28
  * Add relative rect support
- changes in version 1.2.0
  * Relicense platforminputcontext/ to BSD
  * do the real unwatch
  * prefer to recheck the availability after original service gone
  * set display type for fcitx5
  * add fcitx 5 format support
  * Adapt changes in fcitx5-qt to fix commitPreedit.
  * implement compatibility layer for fcitx5
  * try to reimplement im module with lgpl free code
  * make sure that quickphrae editor does not compile with qt4 header
  * move quickphrase editor to fcitx-qt5
- changes in version 1.1.1
  * fix high dpi screen position, only happen when you have two
    high dpi screen
  * use new cmake for package config
  * enforce cmake 3.1
  * handle the missing password flag
  * QInputMethod::update shouldn't be used by input method,
    just do query
  * workaround some qquickwidget bug</changelog>
  <changelog author="opensuse@trummer.xyz" date="1518264000">- update version 1.2.2
  * We already changed reset of code to use "isRelease" for
    filterEventFallback. This check should be changed accordingly.</changelog>
  <changelog author="lbeltrame@kde.org" date="1524916800">- Add upstream patch fix-compilation-with-qt-5.11.patch:
  * Fix compilation with Qt 5.11 (missing include)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1569844800">- Add upstream patch fix-remove-paths-warnings.patch
  * QOwnNotes always crash at close with fcitx-qt5 installed(boo#1152412)
- Change COPYING from %doc to %license</changelog>
</package>
<package pkgid="2a891343e4d2310fdbc9cfabb6517ac4763c5fa2456cd9e7ec5f2f5ad3a924eb" name="fcitx-qt5-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="lp151.4.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418385600">- fcitx-qt5 is using private QPA API, which can, and does break BC
  even in point releases, so we need to hardcode libQt5Gui5 version</changelog>
  <changelog author="i@marguerite.su" date="1427976000">- update version 1.0.1
  * small fix against 1.0.0
- changes from 0.1.3 to 1.0.0
  * add COPYING
  * use platform name to check x11
  * access window function when context destructs is a bad thing
  * reorganize fcitx-qt5 library
- changes from 0.1.2 to 0.1.3
  * remove debug message
  * fix fcitx-qt5 display number resolution
  * fix pkg-config file
  * use filterEvent instead of x11FilterEvent
  * update dbus support
  * use new qt5 library name</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.0.2
  * fix google code issue 748
  * fix dependency check
  * fix leak
  * use xkbcommon for compose
  * install to lib instead of data</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- update version 1.0.3
  * fix build w/ qt 5.5</changelog>
  <changelog author="i@marguerite.su" date="1441022400">- update version 1.0.4
  * fix the coordinates for high dpi in qt5</changelog>
  <changelog author="i@marguerite.su" date="1450872000">- update version 1.0.5
  * implement locale in platform context
  * use link_directories for widgetaddons
  * use the correct var name
  * use some c++11 featues and fix ic not get recreated when
    fcitx restarts
  * clean proxy even it's invalid</changelog>
  <changelog author="i@marguerite.su" date="1480766400">- update version 1.0.6
  * [qt5]fix inconsistency between qstring and ucs4 string
    when handle surrounding
  * [qt5]fromUcs4 expect a null terminated string by default,
    give it a size
  * [qt5]use new connection syntax
  * [qt5]use more nullptr
  * [qt5]remove usage of QPointer in icdata
  * [qt5]don't crash if window-&gt;screen() is null</changelog>
  <changelog author="i@marguerite.su" date="1486814400">- update version 1.1.0
  * added guiwrapper for fcitx-qt5
  * fix build and add support for webengine</changelog>
  <changelog author="i@marguerite.su" date="1512216000">- update version 1.2.1
  * fix issue #27 and #28
  * Add relative rect support
- changes in version 1.2.0
  * Relicense platforminputcontext/ to BSD
  * do the real unwatch
  * prefer to recheck the availability after original service gone
  * set display type for fcitx5
  * add fcitx 5 format support
  * Adapt changes in fcitx5-qt to fix commitPreedit.
  * implement compatibility layer for fcitx5
  * try to reimplement im module with lgpl free code
  * make sure that quickphrae editor does not compile with qt4 header
  * move quickphrase editor to fcitx-qt5
- changes in version 1.1.1
  * fix high dpi screen position, only happen when you have two
    high dpi screen
  * use new cmake for package config
  * enforce cmake 3.1
  * handle the missing password flag
  * QInputMethod::update shouldn't be used by input method,
    just do query
  * workaround some qquickwidget bug</changelog>
  <changelog author="opensuse@trummer.xyz" date="1518264000">- update version 1.2.2
  * We already changed reset of code to use "isRelease" for
    filterEventFallback. This check should be changed accordingly.</changelog>
  <changelog author="lbeltrame@kde.org" date="1524916800">- Add upstream patch fix-compilation-with-qt-5.11.patch:
  * Fix compilation with Qt 5.11 (missing include)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1569844800">- Add upstream patch fix-remove-paths-warnings.patch
  * QOwnNotes always crash at close with fcitx-qt5 installed(boo#1152412)
- Change COPYING from %doc to %license</changelog>
</package>
<package pkgid="e21215e181ca6188b4d2c4b5e2c30a20ca1203e97b854fb82cd308c6854a958e" name="fcitx-qt5-devel" arch="i586">
  <version epoch="0" ver="1.2.2" rel="lp151.4.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418385600">- fcitx-qt5 is using private QPA API, which can, and does break BC
  even in point releases, so we need to hardcode libQt5Gui5 version</changelog>
  <changelog author="i@marguerite.su" date="1427976000">- update version 1.0.1
  * small fix against 1.0.0
- changes from 0.1.3 to 1.0.0
  * add COPYING
  * use platform name to check x11
  * access window function when context destructs is a bad thing
  * reorganize fcitx-qt5 library
- changes from 0.1.2 to 0.1.3
  * remove debug message
  * fix fcitx-qt5 display number resolution
  * fix pkg-config file
  * use filterEvent instead of x11FilterEvent
  * update dbus support
  * use new qt5 library name</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.0.2
  * fix google code issue 748
  * fix dependency check
  * fix leak
  * use xkbcommon for compose
  * install to lib instead of data</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- update version 1.0.3
  * fix build w/ qt 5.5</changelog>
  <changelog author="i@marguerite.su" date="1441022400">- update version 1.0.4
  * fix the coordinates for high dpi in qt5</changelog>
  <changelog author="i@marguerite.su" date="1450872000">- update version 1.0.5
  * implement locale in platform context
  * use link_directories for widgetaddons
  * use the correct var name
  * use some c++11 featues and fix ic not get recreated when
    fcitx restarts
  * clean proxy even it's invalid</changelog>
  <changelog author="i@marguerite.su" date="1480766400">- update version 1.0.6
  * [qt5]fix inconsistency between qstring and ucs4 string
    when handle surrounding
  * [qt5]fromUcs4 expect a null terminated string by default,
    give it a size
  * [qt5]use new connection syntax
  * [qt5]use more nullptr
  * [qt5]remove usage of QPointer in icdata
  * [qt5]don't crash if window-&gt;screen() is null</changelog>
  <changelog author="i@marguerite.su" date="1486814400">- update version 1.1.0
  * added guiwrapper for fcitx-qt5
  * fix build and add support for webengine</changelog>
  <changelog author="i@marguerite.su" date="1512216000">- update version 1.2.1
  * fix issue #27 and #28
  * Add relative rect support
- changes in version 1.2.0
  * Relicense platforminputcontext/ to BSD
  * do the real unwatch
  * prefer to recheck the availability after original service gone
  * set display type for fcitx5
  * add fcitx 5 format support
  * Adapt changes in fcitx5-qt to fix commitPreedit.
  * implement compatibility layer for fcitx5
  * try to reimplement im module with lgpl free code
  * make sure that quickphrae editor does not compile with qt4 header
  * move quickphrase editor to fcitx-qt5
- changes in version 1.1.1
  * fix high dpi screen position, only happen when you have two
    high dpi screen
  * use new cmake for package config
  * enforce cmake 3.1
  * handle the missing password flag
  * QInputMethod::update shouldn't be used by input method,
    just do query
  * workaround some qquickwidget bug</changelog>
  <changelog author="opensuse@trummer.xyz" date="1518264000">- update version 1.2.2
  * We already changed reset of code to use "isRelease" for
    filterEventFallback. This check should be changed accordingly.</changelog>
  <changelog author="lbeltrame@kde.org" date="1524916800">- Add upstream patch fix-compilation-with-qt-5.11.patch:
  * Fix compilation with Qt 5.11 (missing include)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1569844800">- Add upstream patch fix-remove-paths-warnings.patch
  * QOwnNotes always crash at close with fcitx-qt5 installed(boo#1152412)
- Change COPYING from %doc to %license</changelog>
</package>
<package pkgid="81f2083764fe8d0a3fe8559cce23982ab4edc49df1b62bcba4583dd8e49e51a6" name="fcitx-qt5-devel" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="lp151.4.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418385600">- fcitx-qt5 is using private QPA API, which can, and does break BC
  even in point releases, so we need to hardcode libQt5Gui5 version</changelog>
  <changelog author="i@marguerite.su" date="1427976000">- update version 1.0.1
  * small fix against 1.0.0
- changes from 0.1.3 to 1.0.0
  * add COPYING
  * use platform name to check x11
  * access window function when context destructs is a bad thing
  * reorganize fcitx-qt5 library
- changes from 0.1.2 to 0.1.3
  * remove debug message
  * fix fcitx-qt5 display number resolution
  * fix pkg-config file
  * use filterEvent instead of x11FilterEvent
  * update dbus support
  * use new qt5 library name</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.0.2
  * fix google code issue 748
  * fix dependency check
  * fix leak
  * use xkbcommon for compose
  * install to lib instead of data</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- update version 1.0.3
  * fix build w/ qt 5.5</changelog>
  <changelog author="i@marguerite.su" date="1441022400">- update version 1.0.4
  * fix the coordinates for high dpi in qt5</changelog>
  <changelog author="i@marguerite.su" date="1450872000">- update version 1.0.5
  * implement locale in platform context
  * use link_directories for widgetaddons
  * use the correct var name
  * use some c++11 featues and fix ic not get recreated when
    fcitx restarts
  * clean proxy even it's invalid</changelog>
  <changelog author="i@marguerite.su" date="1480766400">- update version 1.0.6
  * [qt5]fix inconsistency between qstring and ucs4 string
    when handle surrounding
  * [qt5]fromUcs4 expect a null terminated string by default,
    give it a size
  * [qt5]use new connection syntax
  * [qt5]use more nullptr
  * [qt5]remove usage of QPointer in icdata
  * [qt5]don't crash if window-&gt;screen() is null</changelog>
  <changelog author="i@marguerite.su" date="1486814400">- update version 1.1.0
  * added guiwrapper for fcitx-qt5
  * fix build and add support for webengine</changelog>
  <changelog author="i@marguerite.su" date="1512216000">- update version 1.2.1
  * fix issue #27 and #28
  * Add relative rect support
- changes in version 1.2.0
  * Relicense platforminputcontext/ to BSD
  * do the real unwatch
  * prefer to recheck the availability after original service gone
  * set display type for fcitx5
  * add fcitx 5 format support
  * Adapt changes in fcitx5-qt to fix commitPreedit.
  * implement compatibility layer for fcitx5
  * try to reimplement im module with lgpl free code
  * make sure that quickphrae editor does not compile with qt4 header
  * move quickphrase editor to fcitx-qt5
- changes in version 1.1.1
  * fix high dpi screen position, only happen when you have two
    high dpi screen
  * use new cmake for package config
  * enforce cmake 3.1
  * handle the missing password flag
  * QInputMethod::update shouldn't be used by input method,
    just do query
  * workaround some qquickwidget bug</changelog>
  <changelog author="opensuse@trummer.xyz" date="1518264000">- update version 1.2.2
  * We already changed reset of code to use "isRelease" for
    filterEventFallback. This check should be changed accordingly.</changelog>
  <changelog author="lbeltrame@kde.org" date="1524916800">- Add upstream patch fix-compilation-with-qt-5.11.patch:
  * Fix compilation with Qt 5.11 (missing include)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1569844800">- Add upstream patch fix-remove-paths-warnings.patch
  * QOwnNotes always crash at close with fcitx-qt5 installed(boo#1152412)
- Change COPYING from %doc to %license</changelog>
</package>
<package pkgid="3c0f9aaf345391a43dd2a85966e65d006e71c0fb34bb1552c49be975d2e60c12" name="fence-agents" arch="src">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
</package>
<package pkgid="8536e354aa599cef9a7bcf6a8874e30e502f27fbebb87401565146c817aeb696" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
</package>
<package pkgid="3bf4bc513d7b0cc289902c287a45a2fad5b58b66f01dfc414d3b9f944d8c6e74" name="fence-agents" arch="src">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
</package>
<package pkgid="07b85993f7dd0a9c11d3e81d0ea06969c0cf33841851d70ac2f155fc2145fc8f" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
</package>
<package pkgid="918ef6260e67e2f3ac313ea79c5523502d876228da902414d58b3ce3102aefdd" name="fence-agents" arch="src">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
</package>
<package pkgid="23c3a64f190bbc74ace29202299b6c9d012995ba819c1b46e3b4ed5d78ca87fd" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
</package>
<package pkgid="da86449dcad7b9f3872e65278dcbc7e8e931a224e8badee109496fc07184b8d1" name="fence-agents" arch="src">
  <version epoch="0" ver="4.6.0+git.1605185986.7b0f11c1" rel="lp151.2.12.1"/>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="varkoly@suse.com" date="1605873600">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
- Update to version 4.6.0+git.1605185986.7b0f11c1:
  * spec: add pkg-config file, and set version for obsoletes to avoid failing to build on Fedora 33
  * Add pkg-config file
  * fence_scsi: dont write key to device if it's already registered, and open file correctly to avoid using regex against end-of-file
  * fencing: fix run_command() to allow timeout=0 to mean forever
  * fencing: fix to make timeout(s)=0 be treated as forever for agents using pexpect
  * Add a fence_crosslink agent
  * fencing: fix power-timeout when using new disable-timeout parameter
  * spec: make telnet a weak dependency
- remove patch contained by the update:
  - 0001-Update-fence_aliyun.py-279.patch
  - 0001-Update-fence_aliyun.xml.patch
  - gcp-vpc-move-disable-google-api-cache-discovery.patch
  - fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
</package>
<package pkgid="a73eb0021964c116c8456aaa07fe148ad2f5a181a2a0368d35f692d8ec2dd974" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.6.0+git.1605185986.7b0f11c1" rel="lp151.2.12.1"/>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="varkoly@suse.com" date="1605873600">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
- Update to version 4.6.0+git.1605185986.7b0f11c1:
  * spec: add pkg-config file, and set version for obsoletes to avoid failing to build on Fedora 33
  * Add pkg-config file
  * fence_scsi: dont write key to device if it's already registered, and open file correctly to avoid using regex against end-of-file
  * fencing: fix run_command() to allow timeout=0 to mean forever
  * fencing: fix to make timeout(s)=0 be treated as forever for agents using pexpect
  * Add a fence_crosslink agent
  * fencing: fix power-timeout when using new disable-timeout parameter
  * spec: make telnet a weak dependency
- remove patch contained by the update:
  - 0001-Update-fence_aliyun.py-279.patch
  - 0001-Update-fence_aliyun.xml.patch
  - gcp-vpc-move-disable-google-api-cache-discovery.patch
  - fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
</package>
<package pkgid="e27130394fd3637af696ea29f6f016d79fffd8039ccb0e237bafb6d57291773b" name="fence-agents-amt_ws" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
</package>
<package pkgid="76eb0b81339a0b1a61e96a3c5edefa413f981180147d5cf4cbbdad5d7b85d256" name="fence-agents-amt_ws" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
</package>
<package pkgid="bae944b41939fbe3730865c0db849923b0319d9113993f661e5261d06c403f02" name="fence-agents-amt_ws" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
</package>
<package pkgid="a1c5755ca46e6024664c2ac68af7e23f3bb8cb41c99a04dc3b57567af2c74da0" name="fence-agents-amt_ws" arch="x86_64">
  <version epoch="0" ver="4.6.0+git.1605185986.7b0f11c1" rel="lp151.2.12.1"/>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="varkoly@suse.com" date="1605873600">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
- Update to version 4.6.0+git.1605185986.7b0f11c1:
  * spec: add pkg-config file, and set version for obsoletes to avoid failing to build on Fedora 33
  * Add pkg-config file
  * fence_scsi: dont write key to device if it's already registered, and open file correctly to avoid using regex against end-of-file
  * fencing: fix run_command() to allow timeout=0 to mean forever
  * fencing: fix to make timeout(s)=0 be treated as forever for agents using pexpect
  * Add a fence_crosslink agent
  * fencing: fix power-timeout when using new disable-timeout parameter
  * spec: make telnet a weak dependency
- remove patch contained by the update:
  - 0001-Update-fence_aliyun.py-279.patch
  - 0001-Update-fence_aliyun.xml.patch
  - gcp-vpc-move-disable-google-api-cache-discovery.patch
  - fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
</package>
<package pkgid="8f231dc8cbcd35f531d5fd5b4f511c2ab19b9d17ed88c832997454211724273e" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
</package>
<package pkgid="a949c1739b22d3f41bf00d5b76363c2a69e8e876399c3993aa569f2d678a6e12" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
</package>
<package pkgid="5cb5aa60374b37bf5f83d73bf075c9694021e0ca6eac8895bb46332e7573ad3b" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
</package>
<package pkgid="d57aa56a4974e574745e820a4c2524ec27ef02a4df83903691462f6dbd3622c5" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.6.0+git.1605185986.7b0f11c1" rel="lp151.2.12.1"/>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="varkoly@suse.com" date="1605873600">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
- Update to version 4.6.0+git.1605185986.7b0f11c1:
  * spec: add pkg-config file, and set version for obsoletes to avoid failing to build on Fedora 33
  * Add pkg-config file
  * fence_scsi: dont write key to device if it's already registered, and open file correctly to avoid using regex against end-of-file
  * fencing: fix run_command() to allow timeout=0 to mean forever
  * fencing: fix to make timeout(s)=0 be treated as forever for agents using pexpect
  * Add a fence_crosslink agent
  * fencing: fix power-timeout when using new disable-timeout parameter
  * spec: make telnet a weak dependency
- remove patch contained by the update:
  - 0001-Update-fence_aliyun.py-279.patch
  - 0001-Update-fence_aliyun.xml.patch
  - gcp-vpc-move-disable-google-api-cache-discovery.patch
  - fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
</package>
<package pkgid="a3c5107486fb965162f70d868a7ce4661cce2813e1c3e181d99f59316494490e" name="festival" arch="src">
  <version epoch="0" ver="2.5.0" rel="lp151.2.3.1"/>
  <changelog author="mskibbe@suse.de" date="1188561600">- Bug 294691 - VUL-0: Festival: Privilege elevation</changelog>
  <changelog author="hvogel@suse.de" date="1190289600">- get rid of usermod %pre call
- add group/useradd to prereq</changelog>
  <changelog author="mskibbe@suse.de" date="1200916800">- fix build problems with new gcc</changelog>
  <changelog author="ro@suse.de" date="1244462400">- Add speech_tools-1.2.96-beta-const.patch to fix build: strchr
  return value changed from char* to const char*</changelog>
  <changelog author="vuntz@opensuse.org" date="1285761600">- Add festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch: do not change
  LD_LIBRARY_PATH to include a directory that can be used by
  malicious users. Fix bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1285848000">- Add festival-safe-temp-file.patch: do not use the PID of the
  process to create a temporary file. Mentioned in bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1309176000">- Update to version 2.1:
  + Integrated and updated support for HTS, Clustergen, Multisyn
    and Clunits voices.
  + Build fixes for newer gcc.
  + Bug fixes galore.
- Drop various patches that were needed to fix build issues
  (generally caused by recent gcc): festival-1.95-gcc4.patch,
  festival-1.96.patch, speech_tools-1.2.95-gcc4.patch,
  speech_tools-1.2.95-gcc41.patch,
  speech_tools-1.2.95-returnvalue.patch,
  speech_tools-1.2.96-beta-const.patch,
  speech_tools-1.2.96-beta.patch.
- Rebase festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch, and change them
  to not remove empty files (which introduces errors during the
  build) by keeping an empty line in those files.
- Add speech_tools-undefined-operation.patch, which contains the
  only interesting bit left from speech_tools-1.2.95-gcc41.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1331985600">- Add speech_tools-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="schwab@suse.de" date="1365508800">- Update config.guess/sub for speech_tools</changelog>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545048000">- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.
- Run spec-cleaner</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1591444800">- Added speech_tools-remove-errneous-decl.patch to fix build error
  at Tumbleweed (Thanks to github's commit:
  https://github.com/festvox/speech_tools/pull/21).</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1592568000">- Added speech_tools-null-fragile.patch and
  festival-null-fragile.patch to fix NULL dereference problem
  (EST_Item's method may be called even though "this" is NULL);
  it causes SIGSEGV in text2wave (boo#1173193).</changelog>
</package>
<package pkgid="4632afc5c52b6efa841d742ea892b49088f20a43b2681f35e993982afb69d2b9" name="festival" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="lp151.2.3.1"/>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545048000">- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.
- Run spec-cleaner</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1591444800">- Added speech_tools-remove-errneous-decl.patch to fix build error
  at Tumbleweed (Thanks to github's commit:
  https://github.com/festvox/speech_tools/pull/21).</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1592568000">- Added speech_tools-null-fragile.patch and
  festival-null-fragile.patch to fix NULL dereference problem
  (EST_Item's method may be called even though "this" is NULL);
  it causes SIGSEGV in text2wave (boo#1173193).</changelog>
</package>
<package pkgid="8db395db8af9d24ecdedc9a068be8bd3c2c47305047c6512e5a507712070ae3d" name="festival-devel" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="lp151.2.3.1"/>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545048000">- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.
- Run spec-cleaner</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1591444800">- Added speech_tools-remove-errneous-decl.patch to fix build error
  at Tumbleweed (Thanks to github's commit:
  https://github.com/festvox/speech_tools/pull/21).</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1592568000">- Added speech_tools-null-fragile.patch and
  festival-null-fragile.patch to fix NULL dereference problem
  (EST_Item's method may be called even though "this" is NULL);
  it causes SIGSEGV in text2wave (boo#1173193).</changelog>
</package>
<package pkgid="b82ada283da58366802f5192569fe62986d3774bc82410f0120f5bb88768975d" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="32e9aba9b9be3423d578eb8d6c785e31fba41b1990dcd262174c79e0b802b7ba" name="ffmpeg-4-libavcodec-devel" arch="i586">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="0526b3bd615aa317c8d86a0ff5c66d8c32028d28292778266047eeb6f6549968" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="a309c66bd146d3429ad5a9cbb4b543980e623bad48ef5c78b52b9b4679f5dcc5" name="ffmpeg-4-libavdevice-devel" arch="i586">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="4705d7f3d5bc16daab6bf7281fd0576e3b75f5358f6ca7736ad093ad8e19d359" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="f067ab0d592fedb580e9b2272b43afd4d7616e65840e0fb22a99e6d9f0591d45" name="ffmpeg-4-libavfilter-devel" arch="i586">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="3f904dc19c85758a82ca6ba24fbe9909203fb3e43698c51dc67a36bfe40f16aa" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="65025adf1a87f29bdfcfa817469032f04a9d43d91a05a92d148147425213c7c8" name="ffmpeg-4-libavformat-devel" arch="i586">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="398fa2e51f8a334ed8e157e63ff956a8079560149002ebe313e26c3db705e477" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="656389aa1e70935c0bfd1abd734d0e03b839f57235099bb52288c5d544622ecd" name="ffmpeg-4-libavresample-devel" arch="i586">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="bc8c4d6a30005b253b48b5545e658bf62e3c7877d2d650822e20aef8801925c2" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="6ca88530b4a3891999a9941329203cabf2525d7abc709983f1a2f384a6574699" name="ffmpeg-4-libavutil-devel" arch="i586">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="e275794948bda958c0804603796edbb4a1dc828eda2c3b691de45ca14916efca" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="48cf0477a2f6581976f1e94bbee2744bf4a465c8b4b1492e8db7dda52186ecbd" name="ffmpeg-4-libpostproc-devel" arch="i586">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="8b21dbdb82f38d9ff071ef990ee67695c361a0043816d22aaecab6f316ba0c00" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="6e3561118bd2e4376f69c487cfed86086380e931e860d44d023d7514b2f1629f" name="ffmpeg-4-libswresample-devel" arch="i586">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="f1705fe1ec27f0a1eb4613150dd8511083402e66735834897315cc8927677659" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="0c639e3a1f8867b80d1119c91552d0ae0cf1808af2bbb33ed3bdc4b1a607ef82" name="ffmpeg-4-libswscale-devel" arch="i586">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="3212c4c1b680d5a5abd7b4bcb30692585d46031ccfb0cd8f203f50e97e69d5a9" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="6f7f6b0e6e7d824dafabb56524c36869acbaaab5cae1e411f93fcdf0690134f8" name="ffmpeg-4-private-devel" arch="i586">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="6128cb87d971aae324689b91d5dccca61ec1bc36d3efb29f6fb5fccc6bb175af" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp151.2.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1554206400">- Update to version 4.1.3:
  * Updates and bug fixes for codecs, filters and formats.
    [boo#1133153, boo#1133155, CVE-2019-11338, CVE-2019-11339]</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
</package>
<package pkgid="95f4c6254f2c93e611e753895d2444dda0d28574c2055c233766d3048fc05697" name="ffnvcodec" arch="src">
  <version epoch="0" ver="10.0.26.0" rel="lp151.2.3.1"/>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Init, 8.0.14.2</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273601">- Update to version 8.1.24.2
  * SDK 8.1</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1538913600">- Update to version 8.2.15.1
  * Update for CUDA 10
    This adds support for the CUDA/Vulkan interop API, which
    requires very new driver versions. As such, we allow the
    symbols to be optionally loaded.</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1541505600">- Update to version 8.2.15.5
  * Add CUDA function cuDeviceGetAttribute V2
  * Guard against multiple definitions of CUuuid
  * Add cuGetDeviceUuid, load as optional function</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1544011200">- Update to version 8.2.15.6
  * CUDA 10: Add external semaphore API
  * Add a subset of CUDA kernel interaction API
  * Add CUDA function cuMemAllocPitch</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1550923200">- Update to version 8.2.15.7
  * Add cuMipmappedArrayDestroy</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560772800">- Update to version 9.0.18.1
  * Fix CUdeviceptr definition for 64bit CPU
- Changes from version 9.0.18.0
  * Initial release for SDK 9.0</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1574769600">- Update to version 9.1.23.0
  * Add cuCtxGetDevice
  * Use pointer-to-struct typedefs for pointer-to-struct types
  * Update headers from Video SDK 9.1 release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1588766400">- Update to version 9.1.23.1:
  * Add primary context management functions</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1594123200">- Update to 10.0.26.0:
  * Update headers from Video SDK 10.0</changelog>
</package>
<package pkgid="ad88d0b34a0eb8e0e6dc10c82f11c65114264695ac58f6ae73893b18cbc8c9cf" name="ffnvcodec-devel" arch="x86_64">
  <version epoch="0" ver="10.0.26.0" rel="lp151.2.3.1"/>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Init, 8.0.14.2</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273601">- Update to version 8.1.24.2
  * SDK 8.1</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1538913600">- Update to version 8.2.15.1
  * Update for CUDA 10
    This adds support for the CUDA/Vulkan interop API, which
    requires very new driver versions. As such, we allow the
    symbols to be optionally loaded.</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1541505600">- Update to version 8.2.15.5
  * Add CUDA function cuDeviceGetAttribute V2
  * Guard against multiple definitions of CUuuid
  * Add cuGetDeviceUuid, load as optional function</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1544011200">- Update to version 8.2.15.6
  * CUDA 10: Add external semaphore API
  * Add a subset of CUDA kernel interaction API
  * Add CUDA function cuMemAllocPitch</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1550923200">- Update to version 8.2.15.7
  * Add cuMipmappedArrayDestroy</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560772800">- Update to version 9.0.18.1
  * Fix CUdeviceptr definition for 64bit CPU
- Changes from version 9.0.18.0
  * Initial release for SDK 9.0</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1574769600">- Update to version 9.1.23.0
  * Add cuCtxGetDevice
  * Use pointer-to-struct typedefs for pointer-to-struct types
  * Update headers from Video SDK 9.1 release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1588766400">- Update to version 9.1.23.1:
  * Add primary context management functions</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1594123200">- Update to 10.0.26.0:
  * Update headers from Video SDK 10.0</changelog>
</package>
<package pkgid="b983800c8f017010a1a787c9d8226172cc7534580ef5780312d0a290ad8bb945" name="fftw3" arch="src">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1397908800">- add support for long-double precision</changelog>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="35d8900d5656a9276927b76217be406f74a855b468738063cedebf095b88313e" name="fftw3-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="8b468fcd5aa76d8ca27ce77e7c4aeba82239348d0e59eca475288b589f654237" name="fftw3-gnu-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="1aa0aa252f376bfd5129bb151782e7558529b8bcafdf2ba5ab33b9d0fc387140" name="fftw3-gnu-mpich-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="40e104ddf2ac6916815140cdec3815557323382bed9635e641430c405b08833b" name="fftw3-gnu-mvapich2-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="947a5b885d7b05722dfeeaf6b7d65d47bc497048e6c06fa3b665f4b9d0a9c118" name="fftw3-gnu-openmpi1-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="e56e18f5c9c4ea29b2a547a1fd744072e284e04bb07c7b25ab968064a6912922" name="fftw3-gnu-openmpi2-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="b7a8ffed1667277ad0e70a41bf7d5e92ced0de1e4137af689cb3658cee2815d3" name="fftw3-gnu-openmpi3-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="2d951382764d7f2367aa0c209e1b53da03bfb45fe66cc8ae647ba9438454897c" name="fftw3-mpi-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="6a22d52e5a90cf6582cc42467fd353b6c1417044113dbbd6fdcc7a6b0f357fe3" name="fftw3-openmp-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="8a5af9cc9217b08e24c716df46a7a38bea4a7c46026e9144ccad3b5737eb65e7" name="fftw3-threads-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="bc485d7567b3d1c2866fbdf152a82bbb0a8eba0dfe8b239ec0a27649b277a6e6" name="fftw3_3_3_6-gnu-hpc" arch="src">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1397908800">- add support for long-double precision</changelog>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="0b0a869e898208c7e32226ca133cbb5d7b250ecbbaf2d0e200e390dbbe42fa53" name="fftw3_3_3_6-gnu-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="e3515a1f24b3b850684fdae4b88e949f8fdf65c5dfd2efa311e7af75741a15fa" name="fftw3_3_3_6-gnu-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="0b30c72651d71974c09fe1b1f7d3611244d6c42854ce9b2690fa03efe8cc6b37" name="fftw3_3_3_6-gnu-mpich-hpc" arch="src">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1397908800">- add support for long-double precision</changelog>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="3f62e20445190ed540666b05b4c0abf5aa479bafacd18e1656b2092bcbba2585" name="fftw3_3_3_6-gnu-mpich-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="7c6911df37559e4c736825e5f298b91e9e2f134f56322d5e42f7765bc78239eb" name="fftw3_3_3_6-gnu-mpich-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="ad61489f671bc709b3688553d2666699e7112b8d3241ca1682a59131660f8e21" name="fftw3_3_3_6-gnu-mvapich2-hpc" arch="src">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1397908800">- add support for long-double precision</changelog>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="ca2994b46fc185976948e4bdf96e358fd2c22b458c7df50b9ef4aa2ce78331b2" name="fftw3_3_3_6-gnu-mvapich2-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="36213dc21b6c5fe3c4a0441b2887cfd4cfbcb2a0240b2aeb2c9d1c446bb92709" name="fftw3_3_3_6-gnu-mvapich2-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="1015902817ca0a4f069c4d51da2be3e028d6d330382d7fc0644bbf005013278a" name="fftw3_3_3_6-gnu-openmpi1-hpc" arch="src">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1397908800">- add support for long-double precision</changelog>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="950a8b07e3540dc59de9ac72b32489ccc4c5108a95c7beba3b31e56dec383dd8" name="fftw3_3_3_6-gnu-openmpi1-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="28347b1dac6ec683ce72fd81bca1090c4e3c96416b6110716c181d03a9068a8e" name="fftw3_3_3_6-gnu-openmpi1-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="1c5e115b616f489e0f76157752c510ac2c53cce655af7c1b051ca874cd915e3a" name="fftw3_3_3_6-gnu-openmpi2-hpc" arch="src">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1397908800">- add support for long-double precision</changelog>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="771cfd69ff4af70f5623777bf4833630bae5a31f9218bb795f0494150f94d886" name="fftw3_3_3_6-gnu-openmpi2-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="4d129c3cd58d1aeca87fa40b1bbfa4a771c1abcd17bbaa72b306b39cc22f06b6" name="fftw3_3_3_6-gnu-openmpi2-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="95ef0a1bc825a3952af9a8c717bd4f9b009c6a7a58c40d78782d084b286f66cf" name="fftw3_3_3_6-gnu-openmpi3-hpc" arch="src">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1397908800">- add support for long-double precision</changelog>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="e241a9841bc748744673b9933848809d411fadfa1336b2a44b704e63446bb983" name="fftw3_3_3_6-gnu-openmpi3-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="97ce23956ff0c8324f4422185336190a710cf5aa25dd9cd3f822283c9179e34c" name="fftw3_3_3_6-gnu-openmpi3-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="lp151.6.3.1"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- update to version 3.3.5
  * New SIMD support:
  - Power8 VSX instructions in single and double precision.
    To use, add --enable-vsx to configure.
  - Support for AVX2 (256-bit FMA instructions).
    To use, add --enable-avx2 to configure.
  - Experimental support for AVX512 and KCVI. (--enable-avx512, --enable-kcvi)
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - Support for AVX128/FMA (for some AMD machines) (--enable-avx128-fma)
  - Double precision Neon SIMD for aarch64.
    This code is expected to work but the FFTW maintainers do not have
    hardware to test it.
  - generic SIMD support using gcc vector intrinsics
  * Add fftw_make_planner_thread_safe() API
  * fix #18 (disable float128 for CUDACC)
  * fix #19: missing Fortran interface for fftwq_alloc_real
  * fix #21 (don't use float128 on Portland compilers, which pretend to be gcc)
  * fix: Avoid segfaults due to double free in MPI transpose</changelog>
  <changelog author="cgoll@suse.com" date="1504785600">- rewrote for hpc library support
  * added environment modules
  * reduced number of hpc realted packages to two
  (FATE#321716).</changelog>
  <changelog author="cgoll@suse.com" date="1506340800">- removed unnedded dependency packages</changelog>
  <changelog author="eich@suse.com" date="1507809600">- Generate baselib.conf dynamically and only for the non-HPC
  build: this avoids issues with the source validator.</changelog>
  <changelog author="eich@suse.com" date="1507982400">- For HPC build package static libraries as well.</changelog>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595332800">- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).</changelog>
</package>
<package pkgid="0cec1ae9cbcbe78f0cf5a49a568b2e40d52b2501e4b62f48cdfd0b7fb2a34589" name="file" arch="i586">
  <version epoch="0" ver="5.32" rel="lp151.8.3.1"/>
  <changelog author="werner@suse.de" date="1464782400">- Update to file version 5.27
  * Errors comparing DER entries or computing offsets
    are just indications of malformed non-DER files.
    Don't print them.
  * Offset comparison was off-by-one.
  * Fix compression code (Werner Fink)
  * Put new bytes constant in the right file (not the generated one)
- Remove patches
    file-5.26-version.patch
    file-5.26-downgrade_DER.patch
    file-5.26-console.diff
    file-5.26-zmagic.patch
  as now upstream
- Disable patch file-5.26-revert-close.patch for test
- Modify patches
    file-5.17-option.dif
    file-5.26.dif</changelog>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
</package>
<package pkgid="aa9f8ca62759b633ab63f367d83b3590e6c3a891cce1d292b49ae4f7aafa2ae3" name="file" arch="src">
  <version epoch="0" ver="5.32" rel="lp151.8.3.1"/>
  <changelog author="werner@suse.de" date="1464782400">- Update to file version 5.27
  * Errors comparing DER entries or computing offsets
    are just indications of malformed non-DER files.
    Don't print them.
  * Offset comparison was off-by-one.
  * Fix compression code (Werner Fink)
  * Put new bytes constant in the right file (not the generated one)
- Remove patches
    file-5.26-version.patch
    file-5.26-downgrade_DER.patch
    file-5.26-console.diff
    file-5.26-zmagic.patch
  as now upstream
- Disable patch file-5.26-revert-close.patch for test
- Modify patches
    file-5.17-option.dif
    file-5.26.dif</changelog>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
</package>
<package pkgid="a80210c198ecd97fe64a95a68dbde2a65521f91f4167c18b3ef4eeb8ba42c911" name="file" arch="x86_64">
  <version epoch="0" ver="5.32" rel="lp151.8.3.1"/>
  <changelog author="werner@suse.de" date="1464782400">- Update to file version 5.27
  * Errors comparing DER entries or computing offsets
    are just indications of malformed non-DER files.
    Don't print them.
  * Offset comparison was off-by-one.
  * Fix compression code (Werner Fink)
  * Put new bytes constant in the right file (not the generated one)
- Remove patches
    file-5.26-version.patch
    file-5.26-downgrade_DER.patch
    file-5.26-console.diff
    file-5.26-zmagic.patch
  as now upstream
- Disable patch file-5.26-revert-close.patch for test
- Modify patches
    file-5.17-option.dif
    file-5.26.dif</changelog>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
</package>
<package pkgid="02bfbf68dda69cfbfefc52d6e02608e19c240d55c975dd34ef245708f3713306" name="file" arch="i586">
  <version epoch="0" ver="5.32" rel="lp151.8.6.1"/>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="01a7b259d5cf64b3faacd1d7749cecf5a814812d1094790597fcfb19fdaa81d7" name="file" arch="src">
  <version epoch="0" ver="5.32" rel="lp151.8.6.1"/>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="58e39ca9cb195f47cd020bf95cc636f035c1a874c0213f0a1860c7c46c0ddc20" name="file" arch="x86_64">
  <version epoch="0" ver="5.32" rel="lp151.8.6.1"/>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="7230addf16936610e5cfa0056fa51004580bf5a702138b46724af11a1b134a2c" name="file-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.32" rel="lp151.8.3.1"/>
  <changelog author="werner@suse.de" date="1464782400">- Update to file version 5.27
  * Errors comparing DER entries or computing offsets
    are just indications of malformed non-DER files.
    Don't print them.
  * Offset comparison was off-by-one.
  * Fix compression code (Werner Fink)
  * Put new bytes constant in the right file (not the generated one)
- Remove patches
    file-5.26-version.patch
    file-5.26-downgrade_DER.patch
    file-5.26-console.diff
    file-5.26-zmagic.patch
  as now upstream
- Disable patch file-5.26-revert-close.patch for test
- Modify patches
    file-5.17-option.dif
    file-5.26.dif</changelog>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
</package>
<package pkgid="e3d64d6ab83a9bdeca4836f11ccf74e0dff0ef54bda82e05e10014050497b1ce" name="file-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.32" rel="lp151.8.6.1"/>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="9064bdc13e78f917debedf6f8b468d979f76a1b0e5ac65c6fdc604e0c6b321f8" name="file-devel" arch="i586">
  <version epoch="0" ver="5.32" rel="lp151.8.3.1"/>
  <changelog author="werner@suse.de" date="1464782400">- Update to file version 5.27
  * Errors comparing DER entries or computing offsets
    are just indications of malformed non-DER files.
    Don't print them.
  * Offset comparison was off-by-one.
  * Fix compression code (Werner Fink)
  * Put new bytes constant in the right file (not the generated one)
- Remove patches
    file-5.26-version.patch
    file-5.26-downgrade_DER.patch
    file-5.26-console.diff
    file-5.26-zmagic.patch
  as now upstream
- Disable patch file-5.26-revert-close.patch for test
- Modify patches
    file-5.17-option.dif
    file-5.26.dif</changelog>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
</package>
<package pkgid="7516cac4a7362a09339a9bd70210d7e0046ec33be7cdcf57e0149318a65740bb" name="file-devel" arch="x86_64">
  <version epoch="0" ver="5.32" rel="lp151.8.3.1"/>
  <changelog author="werner@suse.de" date="1464782400">- Update to file version 5.27
  * Errors comparing DER entries or computing offsets
    are just indications of malformed non-DER files.
    Don't print them.
  * Offset comparison was off-by-one.
  * Fix compression code (Werner Fink)
  * Put new bytes constant in the right file (not the generated one)
- Remove patches
    file-5.26-version.patch
    file-5.26-downgrade_DER.patch
    file-5.26-console.diff
    file-5.26-zmagic.patch
  as now upstream
- Disable patch file-5.26-revert-close.patch for test
- Modify patches
    file-5.17-option.dif
    file-5.26.dif</changelog>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
</package>
<package pkgid="c66c59df10a1445067152c709137201fbbec754a9f5f9a335f6ff149dc61c008" name="file-devel" arch="i586">
  <version epoch="0" ver="5.32" rel="lp151.8.6.1"/>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="55754035e0e1de2240b565af218cd7edd844204994c463f6bcc93855a08f2514" name="file-devel" arch="x86_64">
  <version epoch="0" ver="5.32" rel="lp151.8.6.1"/>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="d190d9832e221de188b5d643c644faa201e39372f8b47e653adb61f85e921617" name="file-magic" arch="noarch">
  <version epoch="0" ver="5.32" rel="lp151.8.3.1"/>
  <changelog author="werner@suse.de" date="1464782400">- Update to file version 5.27
  * Errors comparing DER entries or computing offsets
    are just indications of malformed non-DER files.
    Don't print them.
  * Offset comparison was off-by-one.
  * Fix compression code (Werner Fink)
  * Put new bytes constant in the right file (not the generated one)
- Remove patches
    file-5.26-version.patch
    file-5.26-downgrade_DER.patch
    file-5.26-console.diff
    file-5.26-zmagic.patch
  as now upstream
- Disable patch file-5.26-revert-close.patch for test
- Modify patches
    file-5.17-option.dif
    file-5.26.dif</changelog>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
</package>
<package pkgid="bfd0a51ee350eb70a24f0c9cd2b86e8285c7259a585a1f85829337fd57fbfbb9" name="file-magic" arch="noarch">
  <version epoch="0" ver="5.32" rel="lp151.8.6.1"/>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="eb6f8a4edc1f9e6a3386139eabde0eb714b36901deb5d5bb6e3d0a0820c4b6e1" name="file-roller" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1475150400">- Add file-roller-revertfix-fr_application_local.patch: Allow
  multiple windows of file-roller (bgo#772148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Remove handling of Comic Books archives. Handle Source RPMs
    (bgo#767244).
  + fr-new-archive-dialog: Do not fail if access::can-write is not
    set (bgo#688714).
  + Fix crash when compressing remote files (bgo#767577).
  + window:
  - Use gdk_cursor_new_for_display() (bgo#767534).
  - Set the paned as the drag destination (bgo#767621).
  + Dialog title displayed untranslated (bgo#756917).
  + Updated translations.
- Drop file-roller-revertfix-fr_application_local.patch: Fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1478865600">- Update to version 3.22.2:
  + file-roller does not respect sort order for folders
    (bgo#630543).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487505600">- Add file-roller-open-dest-dialog-only-when-using-notify.patch:
  Show the 'open destination' dialog only when using --notify and
  only for the last extracted archive.
- Add file-roller-libarchive-dont-convert-null-strings.patch: Don't
  convert null strings to utf8.
- Add file-roller-fix-crash-after-extracting.patch: Fix a crash
  after extracting a file (bgo#778846, boo#1022082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488196800">- Update to version 3.22.3:
  + Fixed crash after extracting a file (bgo#778846).
  + Updated translations.
- Drop file-roller-open-dest-dialog-only-when-using-notify.patch,
  file-roller-libarchive-dont-convert-null-strings.patch and
  file-roller-fix-crash-after-extracting.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488542400">- Update to version 3.23.91:
  + Restore Nautilus extension for the format types not supported
    by Nautilus (bgo#772765).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + nautilus-fileroller: remove compress support (bgo#779706).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Cannot browse archive, extract or open files when running on
    Wayland (bgo#772850).
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1502452800">- Recommands unar instead of unrar, it does the same job but is
  under a free license.</changelog>
  <changelog author="olaf@aepfle.de" date="1503748800">- Do not recommend unar (bsc#1034091, bsc#1055816)</changelog>
  <changelog author="dimstar@opensuse.org" date="1503748801">- Update to version 3.25.1:
  + New features and user visible changes:
  - Filter: match any filename that contains the string, not just
    filenames that begin with the string.
  - Use Unicode in translatable strings (bgo#774008).
  +  Bugs fixed:
  - Never tries WINDOWS-1252 encoding (bgo#785081).
  - Do not activate 'file delete' when pressing Delete in the
    filter entry.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.91:
  + Updated translations.</changelog>
  <changelog author="aloisio@gmx.com" date="1505044800">- Re-recommend unar since (boo#1034091 and boo#1055816) were
  fixed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 3.26.1:
  + Updated translations.
- Drop %glib2_gsettings_schema_*, %desktop_database_* and
  %icon_theme_cache_* post/postun/requires macros: functionality
  now covered by file triggers.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509451200">- Update to version 3.26.2:
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/FileRoller: current
  File Roller's wiki page.
- Drop pkgconfig BuildRequires: devel packages implicit dependency.
- Pass  --enable-libarchive and --enable-notification to configure:
  making sure the features we want are enabled.</changelog>
  <changelog author="mgorse@suse.com" date="1513166400">- Add file-roller-ignore-unrar-if-wrapper.patch: Since unrar is
  non-free and it is planned to include a limited wrapper that
  would call unar, we should avoid this wrapper and call unar
  directly (bsc#1072118).
- Add file-roller-rar-file-date.patch: fix wrong file date when
  using rar 5.30 or higher (bgo#758121).
- Add file-roller-unar-dir-critical.patch: fix a warning when
  parsing lsar output (bgo#791505).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1570795200">- Add file-roller-CVE-2019-16680.patch: Do not extract files with
  relative paths (bsc#1151585, bgo#794337, CVE-2019-16680).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1589544000">- Add CVE-2020-11736.patch: do not follow external links when
  extracting files (boo#1169428 CVE-2020-11736).</changelog>
</package>
<package pkgid="eabdbdd2123c84783af8efd00a473b46aba6c2fc94977289b395100ab8d47ef1" name="file-roller" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1475150400">- Add file-roller-revertfix-fr_application_local.patch: Allow
  multiple windows of file-roller (bgo#772148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Remove handling of Comic Books archives. Handle Source RPMs
    (bgo#767244).
  + fr-new-archive-dialog: Do not fail if access::can-write is not
    set (bgo#688714).
  + Fix crash when compressing remote files (bgo#767577).
  + window:
  - Use gdk_cursor_new_for_display() (bgo#767534).
  - Set the paned as the drag destination (bgo#767621).
  + Dialog title displayed untranslated (bgo#756917).
  + Updated translations.
- Drop file-roller-revertfix-fr_application_local.patch: Fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1478865600">- Update to version 3.22.2:
  + file-roller does not respect sort order for folders
    (bgo#630543).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487505600">- Add file-roller-open-dest-dialog-only-when-using-notify.patch:
  Show the 'open destination' dialog only when using --notify and
  only for the last extracted archive.
- Add file-roller-libarchive-dont-convert-null-strings.patch: Don't
  convert null strings to utf8.
- Add file-roller-fix-crash-after-extracting.patch: Fix a crash
  after extracting a file (bgo#778846, boo#1022082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488196800">- Update to version 3.22.3:
  + Fixed crash after extracting a file (bgo#778846).
  + Updated translations.
- Drop file-roller-open-dest-dialog-only-when-using-notify.patch,
  file-roller-libarchive-dont-convert-null-strings.patch and
  file-roller-fix-crash-after-extracting.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488542400">- Update to version 3.23.91:
  + Restore Nautilus extension for the format types not supported
    by Nautilus (bgo#772765).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + nautilus-fileroller: remove compress support (bgo#779706).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Cannot browse archive, extract or open files when running on
    Wayland (bgo#772850).
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1502452800">- Recommands unar instead of unrar, it does the same job but is
  under a free license.</changelog>
  <changelog author="olaf@aepfle.de" date="1503748800">- Do not recommend unar (bsc#1034091, bsc#1055816)</changelog>
  <changelog author="dimstar@opensuse.org" date="1503748801">- Update to version 3.25.1:
  + New features and user visible changes:
  - Filter: match any filename that contains the string, not just
    filenames that begin with the string.
  - Use Unicode in translatable strings (bgo#774008).
  +  Bugs fixed:
  - Never tries WINDOWS-1252 encoding (bgo#785081).
  - Do not activate 'file delete' when pressing Delete in the
    filter entry.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.91:
  + Updated translations.</changelog>
  <changelog author="aloisio@gmx.com" date="1505044800">- Re-recommend unar since (boo#1034091 and boo#1055816) were
  fixed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 3.26.1:
  + Updated translations.
- Drop %glib2_gsettings_schema_*, %desktop_database_* and
  %icon_theme_cache_* post/postun/requires macros: functionality
  now covered by file triggers.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509451200">- Update to version 3.26.2:
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/FileRoller: current
  File Roller's wiki page.
- Drop pkgconfig BuildRequires: devel packages implicit dependency.
- Pass  --enable-libarchive and --enable-notification to configure:
  making sure the features we want are enabled.</changelog>
  <changelog author="mgorse@suse.com" date="1513166400">- Add file-roller-ignore-unrar-if-wrapper.patch: Since unrar is
  non-free and it is planned to include a limited wrapper that
  would call unar, we should avoid this wrapper and call unar
  directly (bsc#1072118).
- Add file-roller-rar-file-date.patch: fix wrong file date when
  using rar 5.30 or higher (bgo#758121).
- Add file-roller-unar-dir-critical.patch: fix a warning when
  parsing lsar output (bgo#791505).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1570795200">- Add file-roller-CVE-2019-16680.patch: Do not extract files with
  relative paths (bsc#1151585, bgo#794337, CVE-2019-16680).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1589544000">- Add CVE-2020-11736.patch: do not follow external links when
  extracting files (boo#1169428 CVE-2020-11736).</changelog>
</package>
<package pkgid="5bb5aed4fc93a00caf4f8fd4654f26f9826dc6759261e6d34b167bc09a4dc657" name="file-roller-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1475150400">- Add file-roller-revertfix-fr_application_local.patch: Allow
  multiple windows of file-roller (bgo#772148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Remove handling of Comic Books archives. Handle Source RPMs
    (bgo#767244).
  + fr-new-archive-dialog: Do not fail if access::can-write is not
    set (bgo#688714).
  + Fix crash when compressing remote files (bgo#767577).
  + window:
  - Use gdk_cursor_new_for_display() (bgo#767534).
  - Set the paned as the drag destination (bgo#767621).
  + Dialog title displayed untranslated (bgo#756917).
  + Updated translations.
- Drop file-roller-revertfix-fr_application_local.patch: Fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1478865600">- Update to version 3.22.2:
  + file-roller does not respect sort order for folders
    (bgo#630543).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487505600">- Add file-roller-open-dest-dialog-only-when-using-notify.patch:
  Show the 'open destination' dialog only when using --notify and
  only for the last extracted archive.
- Add file-roller-libarchive-dont-convert-null-strings.patch: Don't
  convert null strings to utf8.
- Add file-roller-fix-crash-after-extracting.patch: Fix a crash
  after extracting a file (bgo#778846, boo#1022082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488196800">- Update to version 3.22.3:
  + Fixed crash after extracting a file (bgo#778846).
  + Updated translations.
- Drop file-roller-open-dest-dialog-only-when-using-notify.patch,
  file-roller-libarchive-dont-convert-null-strings.patch and
  file-roller-fix-crash-after-extracting.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488542400">- Update to version 3.23.91:
  + Restore Nautilus extension for the format types not supported
    by Nautilus (bgo#772765).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + nautilus-fileroller: remove compress support (bgo#779706).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Cannot browse archive, extract or open files when running on
    Wayland (bgo#772850).
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1502452800">- Recommands unar instead of unrar, it does the same job but is
  under a free license.</changelog>
  <changelog author="olaf@aepfle.de" date="1503748800">- Do not recommend unar (bsc#1034091, bsc#1055816)</changelog>
  <changelog author="dimstar@opensuse.org" date="1503748801">- Update to version 3.25.1:
  + New features and user visible changes:
  - Filter: match any filename that contains the string, not just
    filenames that begin with the string.
  - Use Unicode in translatable strings (bgo#774008).
  +  Bugs fixed:
  - Never tries WINDOWS-1252 encoding (bgo#785081).
  - Do not activate 'file delete' when pressing Delete in the
    filter entry.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.91:
  + Updated translations.</changelog>
  <changelog author="aloisio@gmx.com" date="1505044800">- Re-recommend unar since (boo#1034091 and boo#1055816) were
  fixed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 3.26.1:
  + Updated translations.
- Drop %glib2_gsettings_schema_*, %desktop_database_* and
  %icon_theme_cache_* post/postun/requires macros: functionality
  now covered by file triggers.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509451200">- Update to version 3.26.2:
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/FileRoller: current
  File Roller's wiki page.
- Drop pkgconfig BuildRequires: devel packages implicit dependency.
- Pass  --enable-libarchive and --enable-notification to configure:
  making sure the features we want are enabled.</changelog>
  <changelog author="mgorse@suse.com" date="1513166400">- Add file-roller-ignore-unrar-if-wrapper.patch: Since unrar is
  non-free and it is planned to include a limited wrapper that
  would call unar, we should avoid this wrapper and call unar
  directly (bsc#1072118).
- Add file-roller-rar-file-date.patch: fix wrong file date when
  using rar 5.30 or higher (bgo#758121).
- Add file-roller-unar-dir-critical.patch: fix a warning when
  parsing lsar output (bgo#791505).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1570795200">- Add file-roller-CVE-2019-16680.patch: Do not extract files with
  relative paths (bsc#1151585, bgo#794337, CVE-2019-16680).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1589544000">- Add CVE-2020-11736.patch: do not follow external links when
  extracting files (boo#1169428 CVE-2020-11736).</changelog>
</package>
<package pkgid="7d440824eb7b8dac99e909b23bdf3937eac53c7388adb27ea54778e5606ec94a" name="findutils" arch="i586">
  <version epoch="0" ver="4.6.0" rel="lp151.4.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="89573474dd1daa4f331fadfe038c7ae8fbbb20cfe08086925e595593daa5a7e5" name="findutils" arch="src">
  <version epoch="0" ver="4.6.0" rel="lp151.4.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless automake dependency, it was needed for selinux.patch
  which has been removed since findutils 4.5.10</changelog>
  <changelog author="aj@suse.de" date="1343304000">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pth@suse.de" date="1352980800">- Initialize stat_buf in find.c(process_path) so that find by inum
  works (bnc#780928 http://savannah.gnu.org/bugs/?37683)
  findutils-init_stat_buf.patch.
- Exclude /.snapshot from updatedb's indexing (bnc#780918)
  No patch, change was done in the sysconfig file of this package.
- Rename automake-1.12.patch to findutils-automake-1.12.patch</changelog>
  <changelog author="pth@suse.de" date="1354708800">- Fix typo in findutils-4.5.10-updatedb_ignore_nfsv4.patch that
  lead to nfs4 directories being searched again (bnc#792323).
- Enable FTS based search.
- Replace $RPM_BUILD_ROOT by %%buildroot in specfile.</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Remove useless findutils-automake-1.12.patch</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="pth@suse.de" date="1366718400">- Add /var/run/media to UPDATEDB_PRUNEPATHS in sysconfig.locate
  so that updatedb doesn't index removable media (bnc#807170).</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1379937600">- Remove patches:
  - findutils-4.5.10-use_proc_mounts.patch:
    /etc/mtab is a link to /proc/self/mounts nowadays.
  - findutils-4.5.10-prune_unknown.patch:
    merge patch into findutils-4.4.2-updatedb.patch.
  - findutils-4.5.10-updatedb_ignore_nfsv4.patch:
    fixed upstream.
  - findutils-stdio.in.patch:
    fixed upstream (in included gnulib).
  - findutils-init_stat_buf.patch:
    fixed upstream.
- Refresh other patches:
  - findutils-4.4.2-updatedb.patch:
    refresh with changes from the above, removed patch.
  - findutils-4.4.2-xautofs.patch:
    refresh, and added -xautofs in find's usage text.
- Adapt findutils.spec:
  - Version bump.
  - Remove above removed patches.
  - Add BuildRequires for makeinfo.
  - configure call: remove --enable-d_type-optimization
    option because turned on by default since 4.2.15.
  - Do not remove oldfind's man page in %install.
  - Add oldfind's binary and man page in %files.
- Update to 4.5.12
  See /usr/share/doc/packages/findutils/NEWS,
  section "Major changes in release 4.5.12, 2013-09-22"
- Update to 4.5.11 (2013-02-02)
  See /usr/share/doc/packages/findutils/NEWS,
  section "Major changes in release 4.5.11, 2013-02-02"</changelog>
  <changelog author="schwab@suse.de" date="1380196800">- Conditionalize the qemu arg size workaround on %qemu_user_space_build</changelog>
  <changelog author="pth@suse.de" date="1382616000">- Fix spelling of the btrfs snapshot directory (bnc#847240).</changelog>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="ec513a10b7514e9789fc6db70e99d14b9eabc0a3d9e9ceba0e1fef9e2e82f8cc" name="findutils" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="lp151.4.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="38b95e480d510cdf31f43e70e765af13bf6cf2f79c69376ef11aeadb1c8ff5a3" name="findutils-lang" arch="noarch">
  <version epoch="0" ver="4.6.0" rel="lp151.4.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="954d09a9e0917744b0adb6d6d34dddd7b207c78bafa2e35cedba3849a161e206" name="fipscheck" arch="i586">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="1164c0b4fbb91164f55e7a43038351a46e6ee2ae4beceb169811b1a35de9443a" name="fipscheck" arch="src">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="fac429f4e25f821530e05e0a52943843dc17a3d74fb85074e8ea2b8aa4ce91b2" name="fipscheck" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="2641a78bcf950078e43a05425e07af8f974350a79b1470fa2f8036e4394a7b3c" name="fipscheck-devel" arch="i586">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="a62b3d79bcd2714cd1f0302ff08fb38e935c464aae9ca35b1b80ab93aa78d56d" name="fipscheck-devel" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="4b0f58f67893bfc4af5c1f4b85b6e7e00669d1cd4e92a1126597235b94306064" name="firebird" arch="i586">
  <version epoch="0" ver="3.0.7.33374" rel="lp151.5.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Move xinetd file to /usr/share/misc/firebird on SLE15/Leap15/TW
  (bsc#1084459).
- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="988db65471cdba220c6083cabe1a78fc3bad46d2f03f84b41bb45c7ad703a2ac" name="firebird" arch="src">
  <version epoch="0" ver="3.0.7.33374" rel="lp151.5.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Move xinetd file to /usr/share/misc/firebird on SLE15/Leap15/TW
  (bsc#1084459).
- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="cd2fe4674bb01e0721a9de639ef65e5f8d238c82e55e5f37bdd2742ba7e7a1af" name="firebird" arch="x86_64">
  <version epoch="0" ver="3.0.7.33374" rel="lp151.5.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Move xinetd file to /usr/share/misc/firebird on SLE15/Leap15/TW
  (bsc#1084459).
- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="5a6e1936f6db5594c9002d827f698f193c19714fdf8a9d758b300c436213121e" name="firebird-doc" arch="noarch">
  <version epoch="0" ver="3.0.7.33374" rel="lp151.5.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Move xinetd file to /usr/share/misc/firebird on SLE15/Leap15/TW
  (bsc#1084459).
- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="80783752d7e608706e05255cdccf3275e6afeffb303a8f7b1f5c6e62789dcadf" name="firebird-examples" arch="i586">
  <version epoch="0" ver="3.0.7.33374" rel="lp151.5.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Move xinetd file to /usr/share/misc/firebird on SLE15/Leap15/TW
  (bsc#1084459).
- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="42fe383729d6404d9879fffbc2f408584712c7b9c4129e411395294c441da9aa" name="firebird-examples" arch="x86_64">
  <version epoch="0" ver="3.0.7.33374" rel="lp151.5.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Move xinetd file to /usr/share/misc/firebird on SLE15/Leap15/TW
  (bsc#1084459).
- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="78903333b1d900046ebf6afb3aabb51f35da16412615008d18e1e2a8aa263bc5" name="firebird-server" arch="i586">
  <version epoch="0" ver="3.0.7.33374" rel="lp151.5.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Move xinetd file to /usr/share/misc/firebird on SLE15/Leap15/TW
  (bsc#1084459).
- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="3b3ffeb661e1ed68b054945ec88ae9a86ee34148ef72265dc19f5bf9a43db254" name="firebird-server" arch="x86_64">
  <version epoch="0" ver="3.0.7.33374" rel="lp151.5.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Move xinetd file to /usr/share/misc/firebird on SLE15/Leap15/TW
  (bsc#1084459).
- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="81fa4a90e3c2c34e48d1927c54b53618a33afca9cc666b46e58834f7b64f8535" name="firebird-utils" arch="i586">
  <version epoch="0" ver="3.0.7.33374" rel="lp151.5.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Move xinetd file to /usr/share/misc/firebird on SLE15/Leap15/TW
  (bsc#1084459).
- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="995aa7e32e887509c22259dcb6a26c0f2907a16141abbd397cb883a9c0878aaf" name="firebird-utils" arch="x86_64">
  <version epoch="0" ver="3.0.7.33374" rel="lp151.5.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Move xinetd file to /usr/share/misc/firebird on SLE15/Leap15/TW
  (bsc#1084459).
- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="930714ff4e3bd555d8ab124f39b6b8bd69632a64d064403df0178a02986ec815" name="firefox-esr-branding-openSUSE" arch="src">
  <version epoch="0" ver="68" rel="lp151.3.3.1"/>
  <changelog author="wr@rosenauer.org" date="1324468800">- make openSUSE software search version specific (bnc#737709)</changelog>
  <changelog author="wr@rosenauer.org" date="1331812800">- bumped version to 6.0
- support firefox-esr RPM packages
- removed MozillaFirefox build dependency and PreReq
  * everything controlled by Supplements and Requirements from
    base package</changelog>
  <changelog author="wr@rosenauer.org" date="1340712000">- update susefox to snapshot 20120626
  * add window controls for Gnome 3 (bnc#768942)</changelog>
  <changelog author="wr@rosenauer.org" date="1344340800">- move Firefox specific prefs to defaults/preferences (bnc#774914)</changelog>
  <changelog author="wr@rosenauer.org" date="1359633600">- added DuckDuckGo as search option (bnc#801121)</changelog>
  <changelog author="wr@rosenauer.org" date="1364212800">- modified file locations for Firefox 21 and above</changelog>
  <changelog author="wr@rosenauer.org" date="1437912000">- identify Leap 42.1 correctly
- searchplugins need to be placed under distribution with FF 40
- disable susefox
  * its main purpose the plugin finder service misses server
    side maintenance and NPAPI plugins are being obsoleted sooner
    or later
- homepage setting moved back from susefox to distribution
  configuration</changelog>
  <changelog author="wr@rosenauer.org" date="1445256000">- change homepage to https://www.opensuse.org/searchPage/
  (boo#950948, boo#950949)</changelog>
  <changelog author="wr@rosenauer.org" date="1450440000">- identify Tumbleweed correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Identify the different Leap versions correctly (up to Leap 42.2)
  (boo#987969).</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1481284800">- Fix openSUSE bookmarks not added to default profile (boo#1014292)
  * Move openSUSE bookmarks from toolbar to menu
  * Use local favicon for all bookmarks (Firefox 45+)
  * Fix links to "openSUSE Documentation" and "How to Participate"
    (boo#704121, boo#953164)
- Remove DuckDuckGo search plugin (included upstream)
- Clean up spec file
  * Change $RPM_BUILD_ROOT to %{buildroot}
  * Remove %clean section
  * Escape % symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1493380800">- recognize Leap 42.3 (boo#1036679)</changelog>
  <changelog author="wr@rosenauer.org" date="1496664000">- really fix boo#1036679 (recognize Leap 42.3)</changelog>
  <changelog author="wr@rosenauer.org" date="1522584000">- recognize Leap 15.0 (boo#1087713)</changelog>
  <changelog author="wr@rosenauer.org" date="1535198400">- removed intl.locale.matchOS
  * it's not used in recent versions and it was set in the general
    openSUSE Firefox package since 2011</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1556020800">- bump version to 60 for SLE compatibility (bsc#1128316)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- recognize Leap 15 via sle_version (required for &gt;= 15.1)</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563364800">- recognize Leap 15.2 via sle_version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1568030400">- layout.word_select.stop_at_punctuation -&gt; true (boo#1133163)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1570190400">- removed extensions preferences (moved to core package)
- use multibuild to provide branding package for
  MozillaFirefox and firefox-esr</changelog>
</package>
<package pkgid="b05de7fea8eb477063f0d2455512ae620f95307c3f7cd3ab584b0e7e8dde780f" name="firefox-esr-branding-openSUSE" arch="x86_64">
  <version epoch="0" ver="68" rel="lp151.3.3.1"/>
  <changelog author="wr@rosenauer.org" date="1437912000">- identify Leap 42.1 correctly
- searchplugins need to be placed under distribution with FF 40
- disable susefox
  * its main purpose the plugin finder service misses server
    side maintenance and NPAPI plugins are being obsoleted sooner
    or later
- homepage setting moved back from susefox to distribution
  configuration</changelog>
  <changelog author="wr@rosenauer.org" date="1445256000">- change homepage to https://www.opensuse.org/searchPage/
  (boo#950948, boo#950949)</changelog>
  <changelog author="wr@rosenauer.org" date="1450440000">- identify Tumbleweed correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Identify the different Leap versions correctly (up to Leap 42.2)
  (boo#987969).</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1481284800">- Fix openSUSE bookmarks not added to default profile (boo#1014292)
  * Move openSUSE bookmarks from toolbar to menu
  * Use local favicon for all bookmarks (Firefox 45+)
  * Fix links to "openSUSE Documentation" and "How to Participate"
    (boo#704121, boo#953164)
- Remove DuckDuckGo search plugin (included upstream)
- Clean up spec file
  * Change $RPM_BUILD_ROOT to %{buildroot}
  * Remove %clean section
  * Escape % symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1493380800">- recognize Leap 42.3 (boo#1036679)</changelog>
  <changelog author="wr@rosenauer.org" date="1496664000">- really fix boo#1036679 (recognize Leap 42.3)</changelog>
  <changelog author="wr@rosenauer.org" date="1522584000">- recognize Leap 15.0 (boo#1087713)</changelog>
  <changelog author="wr@rosenauer.org" date="1535198400">- removed intl.locale.matchOS
  * it's not used in recent versions and it was set in the general
    openSUSE Firefox package since 2011</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1556020800">- bump version to 60 for SLE compatibility (bsc#1128316)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- recognize Leap 15 via sle_version (required for &gt;= 15.1)</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563364800">- recognize Leap 15.2 via sle_version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1568030400">- layout.word_select.stop_at_punctuation -&gt; true (boo#1133163)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1570190400">- removed extensions preferences (moved to core package)
- use multibuild to provide branding package for
  MozillaFirefox and firefox-esr</changelog>
</package>
<package pkgid="1f07deb92b77951356e71d18d74058bcf1c815a94520c142876b6cf3a6b95862" name="firewalld-rpcbind-helper" arch="noarch">
  <version epoch="0" ver="0.1" rel="lp151.5.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1523448000">- initial version of package</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1523880000">- Require python3 and to be in line with the Leap-15 /
  SLE-15 situation (see OBS comments in sr#595722).
- shebang.patch: use python3 in shebang for the same reasons.</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Feed file through spec-cleaner</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1526040000">Fixes for bnc#1096064:
- 0001-main-script-fix-running-with-python3-need-to-decode.patch: fix error
  when running in python3 context, because of a missing decode() call.
- 0002-main-script-be-prepared-for-some-of-the-sysconfig-fi.patch: don't raise
  Exceptions when one of the target sysconfig files isn't installed.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566216000">Fix for bsc#1146188:
- 0003-main-script-fix-dict_values-object-does-not-support-.patch: fix error
  when running in python3 context and a port in `rpcinfo -p` is running
  neither as tcp nor in udp protocol.</changelog>
</package>
<package pkgid="171bd04d0d89b4825c1610a8976074bc22e45a51f2dc89a2366e2dad77ee1fbd" name="firewalld-rpcbind-helper" arch="src">
  <version epoch="0" ver="0.1" rel="lp151.5.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1523448000">- initial version of package</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1523880000">- Require python3 and to be in line with the Leap-15 /
  SLE-15 situation (see OBS comments in sr#595722).
- shebang.patch: use python3 in shebang for the same reasons.</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Feed file through spec-cleaner</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1526040000">Fixes for bnc#1096064:
- 0001-main-script-fix-running-with-python3-need-to-decode.patch: fix error
  when running in python3 context, because of a missing decode() call.
- 0002-main-script-be-prepared-for-some-of-the-sysconfig-fi.patch: don't raise
  Exceptions when one of the target sysconfig files isn't installed.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566216000">Fix for bsc#1146188:
- 0003-main-script-fix-dict_values-object-does-not-support-.patch: fix error
  when running in python3 context and a port in `rpcinfo -p` is running
  neither as tcp nor in udp protocol.</changelog>
</package>
<package pkgid="db0b9ef9351ab489e8d27bc64c8653ff963d987649795b3bb4983804caef7573" name="fish3" arch="src">
  <version epoch="0" ver="3.0.0" rel="lp151.2.1"/>
  <changelog author="seanpwatson@live.com" date="1417435200">- Fixed conflict with youtube-dl</changelog>
  <changelog author="zawertun@gmail.com" date="1422446400">- Added check_for_command-not-found_command_on_suse.patch
  (https://github.com/fish-shell/fish-shell/issues/1208)</changelog>
  <changelog author="schwab@suse.de" date="1423137600">- no-return-in-nonvoid-function.patch: fix no-return-in-nonvoid-function
  error</changelog>
  <changelog author="simon@simotek.net" date="1426939200">- Require: python-curses Its required for the prompt page on
    the web config</changelog>
  <changelog author="develop7@develop7.info" date="1437998400">- update to v2.2.0
  See full changelog on
  https://github.com/fish-shell/fish-shell/releases/tag/2.2.0
- Drop check_for_command-not-found_command_on_suse.patch</changelog>
  <changelog author="infroma@gmail.com" date="1447934400">- Recommends: terminfo (required for some terminals)
- Requires: man (required for completions, otherwise fish complains
  about non existant `apropos` on every TAB)</changelog>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to 3.0.0
  * Process and job expansion has largely been removed
  * A literal {} now expands to itself, rather than nothing
  * Literally accessing a zeor-index is now illegal syntax
  * for loop variables are no longer local to the for block
  * Local exported (set -1x) vars are now visible to functions
  * The new math builtin does not support logical expressions
  * fish now supports &amp;&amp; || and ! for better migration from POSIX
  * Variables may be used as commanes (#154)
  * fish may be started in private mode via fish --private
  * A new wait command for waiting on backgrounded processes
  * math is now a builtin wrather than a wrapper around bc (#3157)
  * while sets $status to a non-zero value if the loop is not exec'd (#4982)
  * Command sub output now limited to 10MB by default
  * The machine hostname is now exposed as the $hostname reserved variable
  * Bare bind invocations in config.fish now work</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1550145600">- Split out fish3 package for Leap 15.1</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1562068800">- Should write fish rather then fish3 into /etc/shells
- fish3-devel should conflict with fish-devel</changelog>
</package>
<package pkgid="04bacee13a92bba315e901be35485c310bfc7bb1feb381f4a87db55759485a24" name="fish3" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="lp151.2.1"/>
  <changelog author="seanpwatson@live.com" date="1417435200">- Fixed conflict with youtube-dl</changelog>
  <changelog author="zawertun@gmail.com" date="1422446400">- Added check_for_command-not-found_command_on_suse.patch
  (https://github.com/fish-shell/fish-shell/issues/1208)</changelog>
  <changelog author="schwab@suse.de" date="1423137600">- no-return-in-nonvoid-function.patch: fix no-return-in-nonvoid-function
  error</changelog>
  <changelog author="simon@simotek.net" date="1426939200">- Require: python-curses Its required for the prompt page on
    the web config</changelog>
  <changelog author="develop7@develop7.info" date="1437998400">- update to v2.2.0
  See full changelog on
  https://github.com/fish-shell/fish-shell/releases/tag/2.2.0
- Drop check_for_command-not-found_command_on_suse.patch</changelog>
  <changelog author="infroma@gmail.com" date="1447934400">- Recommends: terminfo (required for some terminals)
- Requires: man (required for completions, otherwise fish complains
  about non existant `apropos` on every TAB)</changelog>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to 3.0.0
  * Process and job expansion has largely been removed
  * A literal {} now expands to itself, rather than nothing
  * Literally accessing a zeor-index is now illegal syntax
  * for loop variables are no longer local to the for block
  * Local exported (set -1x) vars are now visible to functions
  * The new math builtin does not support logical expressions
  * fish now supports &amp;&amp; || and ! for better migration from POSIX
  * Variables may be used as commanes (#154)
  * fish may be started in private mode via fish --private
  * A new wait command for waiting on backgrounded processes
  * math is now a builtin wrather than a wrapper around bc (#3157)
  * while sets $status to a non-zero value if the loop is not exec'd (#4982)
  * Command sub output now limited to 10MB by default
  * The machine hostname is now exposed as the $hostname reserved variable
  * Bare bind invocations in config.fish now work</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1550145600">- Split out fish3 package for Leap 15.1</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1562068800">- Should write fish rather then fish3 into /etc/shells
- fish3-devel should conflict with fish-devel</changelog>
</package>
<package pkgid="f91a1b73e37e2e37f017f0cf35e358e694698f19741dde539ff537a218938d29" name="fish3-devel" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="lp151.2.1"/>
  <changelog author="seanpwatson@live.com" date="1417435200">- Fixed conflict with youtube-dl</changelog>
  <changelog author="zawertun@gmail.com" date="1422446400">- Added check_for_command-not-found_command_on_suse.patch
  (https://github.com/fish-shell/fish-shell/issues/1208)</changelog>
  <changelog author="schwab@suse.de" date="1423137600">- no-return-in-nonvoid-function.patch: fix no-return-in-nonvoid-function
  error</changelog>
  <changelog author="simon@simotek.net" date="1426939200">- Require: python-curses Its required for the prompt page on
    the web config</changelog>
  <changelog author="develop7@develop7.info" date="1437998400">- update to v2.2.0
  See full changelog on
  https://github.com/fish-shell/fish-shell/releases/tag/2.2.0
- Drop check_for_command-not-found_command_on_suse.patch</changelog>
  <changelog author="infroma@gmail.com" date="1447934400">- Recommends: terminfo (required for some terminals)
- Requires: man (required for completions, otherwise fish complains
  about non existant `apropos` on every TAB)</changelog>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to 3.0.0
  * Process and job expansion has largely been removed
  * A literal {} now expands to itself, rather than nothing
  * Literally accessing a zeor-index is now illegal syntax
  * for loop variables are no longer local to the for block
  * Local exported (set -1x) vars are now visible to functions
  * The new math builtin does not support logical expressions
  * fish now supports &amp;&amp; || and ! for better migration from POSIX
  * Variables may be used as commanes (#154)
  * fish may be started in private mode via fish --private
  * A new wait command for waiting on backgrounded processes
  * math is now a builtin wrather than a wrapper around bc (#3157)
  * while sets $status to a non-zero value if the loop is not exec'd (#4982)
  * Command sub output now limited to 10MB by default
  * The machine hostname is now exposed as the $hostname reserved variable
  * Bare bind invocations in config.fish now work</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1550145600">- Split out fish3 package for Leap 15.1</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1562068800">- Should write fish rather then fish3 into /etc/shells
- fish3-devel should conflict with fish-devel</changelog>
</package>
<package pkgid="7eeb8d6aed9d1818e43fabaf483d25d640a1c96daa368561aba3b499616d971a" name="fontconfig" arch="i586">
  <version epoch="0" ver="2.12.6" rel="lp151.4.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1417262400">- fix wrong path to documentation (bnc#907685)
- removed patch: usr-share-doc-packages.patch</changelog>
  <changelog author="fstrba@suse.com" date="1432036800">- Clean the spec file with spec-cleaner</changelog>
  <changelog author="idonmez@suse.com" date="1457524800">- Add fontconfig-locale_c.utf8.patch to recognize C.UTF-8 locale,
  patch from Debian.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Update to version 2.12.0:
  + Support the size specific design selection in OS/2 table
    version 5.
  + Allow the modification on 'lang' and 'charset' objects.
  + Increase the refcount in FcConfigSetCurrent().
  + some updates in orth files.
  + Add --error-on-no-fonts option to fc-cache.
  + Use lang=und instead of lang=xx for "undetermined".
  + Add FC_WEIGHT_DEMILIGHT and change from 65 to 55.
  + Add FC_COLOR.
  + Treat color fonts as scalable.
  + no FC_LANG added with FcConfigSubstitute() when it has "und".
  + Hardcode blanks in library.
  + Support symbol fonts.
  + Unicode 8.0 support.
  + Add hintstyle templates and default hintslight.
  + GX font support.
  + Improve the footprint issue on updating caches.
  + Bump the cache version to 6.
  + more bug fixes.</changelog>
  <changelog author="pgajdos@suse.com" date="1470916800">- Update to 2.12.1:
    Update CaseFolding.txt to Unicode 9.0
    Fix some errors related to python3
    Bug 96676 - Check range of FcWeightFromOpenType argument
    Update libtool revision
    Properly validate offsets in cache files.</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1488110400">- Add patch fontconfig-glibc-2.25.patch
  * Fixes build with glibc 2.25.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- Update to 2.12.3:
    Don't call perror() if no changes happens in errno
    Fix FcCacheOffsetsValid()
    Fix the build issue with gperf 3.1
    Fix the build issue on GNU/Hurd
    Update a bit for the changes in FreeType 2.7.1
    Add the description of FC_LANG envvar to the doc
    Bug 101202 - fontconfig FTBFS if docbook-utils is installed
    Correct cache version info in doc/fontconfig-user.sgml
    Avoid conflicts with integer width macros from TS 18661-1:2014
    Fix PostScript font alias name
    Update aliases for URW June 2016
- removed unneeded:
  - fontconfig-glibc-2.25.patch
  - make-check.patch</changelog>
  <changelog author="jengelh@inai.de" date="1499774400">- Remove --with-pic which is only useful for static libs.</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 2.12.4:
  * Various distcheck errors
  * FcCharSetHash(): use the 'numbers' values to compute the hash
  * fc-lang: gracefully handle the case where the last language initial is &lt; 'z'
  * Fix an off-by-one error in FcLangSetIndex()
  * Fix erroneous test on language id in FcLangSetPromote()
  * FcLangSetCompare(): fix bug when two charsets come from different "buckets"
  * Treat C.UTF-8 and C.utf8 locales as built in the C library
- Remove merged upstream fontconfig-locale_c.utf8.patch
- Remove fontconfig-doc archive, the generated output is already
  present in the upstream released tarball
- Remove unused configure options</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Update to 2.12.6:
  * conf.d: Drop aliases for (URW)++ fonts (upstreamed)
  * other minor fixes
- Includes changes from 2.12.5:
  * update docs
  * Accept 4 digit script tag in FcLangNormalize().
  * fc-blanks: fall back to the static data available in repo if
    downloaded data is corrupted
  * emoji related fixes
  * various cleanups
  * support listing named instances</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- fc-query: remove redundant debug output
  + fontconfig-remove-debug-output.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1590840000">- fontconfig-devel-32bit needs to require fontconfig-32bit,
  needed for Wine development (bsc#1172301)</changelog>
</package>
<package pkgid="1cca3a4c54fa2c4efaf26739860727898ba024dbb3ec8e854992133a4ea2360f" name="fontconfig" arch="src">
  <version epoch="0" ver="2.12.6" rel="lp151.4.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1369137600">- Update to version 2.10.93
  + matching native fonts with even :lang=en (fdo#62980)
  + Ensure closing fp on error
  + Obtain fonts data via FT_Face instead of opening a file directly
  + Revert the previous change and rework to not export freetype
    API outside fcfreetype.c
  + documented FC_HASH and FC_POSTSCRIPT_NAME
  + make check fails: .. contents:: :depth: 2 (fdo#63329)
  + Use the glob matching for filename
  + conf.d/README outdated (fdo#63452
  + Fix missing OSAtomicCompareAndSwapPtrBarrier() on Mac OS X 10.4
  + FcFreeTypeQueryFace fails on postscripts fonts loaded
    from memory (fdo#63922)
  + build-chain, replace INCLUDES directive by AM_CPPFLAGS
- dropped conf.d-readme-templatedir.patch (upstreamed)
- dropped fontconfig-fix-webfont.patch (upstreamed)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1377777600">- Update to version 2.10.94 (2.11 RC4)
  + FcNameParse() should ignore leading whitespace
    in parameters
  + Fix a comparison of constant warning with clang
  + Fix a shift count overflow on 32bit box
  + Fix a incompatible pointer warning on NetBSD
  + Add FcTypeUnknown to FcType to avoid comparison of constant -1
  + Fix the behavior of intermixed tests end edits in match
  + Ignore scandir() check on mingw
  + Use INT_MAX instead of unreliable hardcoding value
  + Add FC_UNUSED to FC_ASSERT_STATIC macro to avoid compiler warning
  + Rework to apply the intermixed test and edit elements in one-pass
  + trivial code optimization
  + Correct fontconfig.pc to add certain dependencies for build
  + Correct fontconfig.pc to add certain dependencies for static build
  + Fix wrong edit position
  + Invalid read/write with valgrind when assigning something twice
    (fdo#67809)
  + warn deprecated only when migration failed
  + Match on FC_SCALABLE (fdo#67845)
  + fontformat in match pattern is not respected? (fdo#16818)
  + More metric compat fonts (fdo#68340)
  + Add default aliases for Georgia, Garamond, Palatino Linotype,
    Trebuchet MS (fdo#63399)
  + Fix a typo
  + Fix a crash when non-builtin objects are edited
  + Fix a wrong edit position when 'kind' is different
  + copy qu.orth to quz.orth (fdo#68587)
  + Add quz.orth to Makefile.am
  + Minor
  + Fix assertion</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1377950400">- Update to version 2.10.95 (2.11 RC5)
  + Crashfix release, no upstream changelog provided</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381492800">- Update to final 2.11.0
  + Do not create a config dir for migration when no config files
    nor dirs
  + Fix memory leaks in FcFreeTypeQueryFace
  + Deprecate / remove FC_RASTERIZER (fdo#68955)
  + Fix a crash when FcPattern is set to null on FcFontSetList()
    and FcFontList()
  + Exit with the error code when FcNameParse() failed
  + Avoid reading config.h twice (fdo#69833)</changelog>
  <changelog author="fcrozat@suse.com" date="1386331200">- Add
  0001-Fix-inversion-between-Tinos-and-Cousine-in-the-comme.patch:
  fix error in 30-metric-aliases.conf comments (fdo#72395).
- Add
  0002-Add-metric-aliases-for-additional-Google-ChromeOS-fo.patch:
  add compat fonts for Cambria, Caladea and Symbol (fdo#72395).</changelog>
  <changelog author="pgajdos@suse.com" date="1391169600">- fix fontconfig crash for special bdf font [bnc#860596]
  * added fontconfig-crash-bdf.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1391688000">- removed iso639-{1,2} and local.conf.instsys
- *.conf files moved to fonts-config package</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1395662400">- Update to 2.11.1
  + do not build test-migration for Win32
  + Fix build issue on Debian/kFreeBSD 7.0
  + Update ax_pthread.m4 to the latest version
  + Fix the dynamic loading issue on NetBSD
  + Use stat() if there are no d_type in struct dirent
  + Fix a build issue on Solaris 10
  + Change the default weight on match to FC_WEIGHT_NORMAL
  + Warn if no &lt;test&gt; nor &lt;edit&gt; elements in &lt;match&gt;
  + Correct DTD
  + Re-scan font directories only when it contains subdirs
  + Fix typo
  + fixed fdo#72086 - Check for gperf in autogen.sh
  + Simplify to validate the availability of posix_fadvise
  + Simplify to validate the availability of scandir
  + Fix a typo
  + Fix a build issue on platforms where doesn't
    support readlink()
  + Improve the performance issue on rescanning directories
  + fixed fdo#73686 - confdir is not set correctly
    in fontconfig.pc
  + Update zh_hk.orth
  + clean up the unused files
  + Add missing license headers
  + Update the use of autotools' macro
  + Fix a crash issue when empty strings are set to the BDF
    properties
  + Add a doc for FcDirCacheRescan
  + Add missing #include &lt;sys/statvfs.h&gt; in fcstat.c
  + Fix incompatible API on AIX with random_r and initstate_r
  + Fallback to lstat() in case the filesystem doesn't support
    d_type in struct dirent
  + Update doc to include the version info of `since when'
  + fixed fdo#73291 - poppler does not show fl ligature
  + Add README describes the criteria to add/modify the
    orthography files
  + Fix autoconf warning, warning: AC_COMPILE_IFELSE was called
    before AC_USE_SYSTEM_EXTENSIONS
  + Leave room for null terminators in arrays
  + Avoid memory leak when NULL path passed to FcStrBuildFilename
  + Avoid null pointer dereference in FcNameParse if malloc fails
  + Bug 72380 - Never drop first font when trimming
  + Fix inversion between Tinos and Cousine in the comment
  + Add metric aliases for additional Google ChromeOS fonts
  + Defaulting &lt;cachedir&gt; to LOCAL_APPDATA_FONTCONFIG_CACHE for
    Win32 build
  + fc-cache: --sysroot option takes an argument
- Drop patches from/merged upstream:
  0001-Fix-inversion-between-Tinos-and-Cousine-in-the-comme.patch,
  0002-Add-metric-aliases-for-additional-Google-ChromeOS-fo.patch
  and fontconfig-crash-bdf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1417262400">- fix wrong path to documentation (bnc#907685)
- removed patch: usr-share-doc-packages.patch</changelog>
  <changelog author="fstrba@suse.com" date="1432036800">- Clean the spec file with spec-cleaner</changelog>
  <changelog author="idonmez@suse.com" date="1457524800">- Add fontconfig-locale_c.utf8.patch to recognize C.UTF-8 locale,
  patch from Debian.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Update to version 2.12.0:
  + Support the size specific design selection in OS/2 table
    version 5.
  + Allow the modification on 'lang' and 'charset' objects.
  + Increase the refcount in FcConfigSetCurrent().
  + some updates in orth files.
  + Add --error-on-no-fonts option to fc-cache.
  + Use lang=und instead of lang=xx for "undetermined".
  + Add FC_WEIGHT_DEMILIGHT and change from 65 to 55.
  + Add FC_COLOR.
  + Treat color fonts as scalable.
  + no FC_LANG added with FcConfigSubstitute() when it has "und".
  + Hardcode blanks in library.
  + Support symbol fonts.
  + Unicode 8.0 support.
  + Add hintstyle templates and default hintslight.
  + GX font support.
  + Improve the footprint issue on updating caches.
  + Bump the cache version to 6.
  + more bug fixes.</changelog>
  <changelog author="pgajdos@suse.com" date="1470916800">- Update to 2.12.1:
    Update CaseFolding.txt to Unicode 9.0
    Fix some errors related to python3
    Bug 96676 - Check range of FcWeightFromOpenType argument
    Update libtool revision
    Properly validate offsets in cache files.</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1488110400">- Add patch fontconfig-glibc-2.25.patch
  * Fixes build with glibc 2.25.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- Update to 2.12.3:
    Don't call perror() if no changes happens in errno
    Fix FcCacheOffsetsValid()
    Fix the build issue with gperf 3.1
    Fix the build issue on GNU/Hurd
    Update a bit for the changes in FreeType 2.7.1
    Add the description of FC_LANG envvar to the doc
    Bug 101202 - fontconfig FTBFS if docbook-utils is installed
    Correct cache version info in doc/fontconfig-user.sgml
    Avoid conflicts with integer width macros from TS 18661-1:2014
    Fix PostScript font alias name
    Update aliases for URW June 2016
- removed unneeded:
  - fontconfig-glibc-2.25.patch
  - make-check.patch</changelog>
  <changelog author="jengelh@inai.de" date="1499774400">- Remove --with-pic which is only useful for static libs.</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 2.12.4:
  * Various distcheck errors
  * FcCharSetHash(): use the 'numbers' values to compute the hash
  * fc-lang: gracefully handle the case where the last language initial is &lt; 'z'
  * Fix an off-by-one error in FcLangSetIndex()
  * Fix erroneous test on language id in FcLangSetPromote()
  * FcLangSetCompare(): fix bug when two charsets come from different "buckets"
  * Treat C.UTF-8 and C.utf8 locales as built in the C library
- Remove merged upstream fontconfig-locale_c.utf8.patch
- Remove fontconfig-doc archive, the generated output is already
  present in the upstream released tarball
- Remove unused configure options</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Update to 2.12.6:
  * conf.d: Drop aliases for (URW)++ fonts (upstreamed)
  * other minor fixes
- Includes changes from 2.12.5:
  * update docs
  * Accept 4 digit script tag in FcLangNormalize().
  * fc-blanks: fall back to the static data available in repo if
    downloaded data is corrupted
  * emoji related fixes
  * various cleanups
  * support listing named instances</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- fc-query: remove redundant debug output
  + fontconfig-remove-debug-output.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1590840000">- fontconfig-devel-32bit needs to require fontconfig-32bit,
  needed for Wine development (bsc#1172301)</changelog>
</package>
<package pkgid="0074ca9c37b3c39e2277c49a032a6606c41237e594d0791741436244b62c73a3" name="fontconfig" arch="x86_64">
  <version epoch="0" ver="2.12.6" rel="lp151.4.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1417262400">- fix wrong path to documentation (bnc#907685)
- removed patch: usr-share-doc-packages.patch</changelog>
  <changelog author="fstrba@suse.com" date="1432036800">- Clean the spec file with spec-cleaner</changelog>
  <changelog author="idonmez@suse.com" date="1457524800">- Add fontconfig-locale_c.utf8.patch to recognize C.UTF-8 locale,
  patch from Debian.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Update to version 2.12.0:
  + Support the size specific design selection in OS/2 table
    version 5.
  + Allow the modification on 'lang' and 'charset' objects.
  + Increase the refcount in FcConfigSetCurrent().
  + some updates in orth files.
  + Add --error-on-no-fonts option to fc-cache.
  + Use lang=und instead of lang=xx for "undetermined".
  + Add FC_WEIGHT_DEMILIGHT and change from 65 to 55.
  + Add FC_COLOR.
  + Treat color fonts as scalable.
  + no FC_LANG added with FcConfigSubstitute() when it has "und".
  + Hardcode blanks in library.
  + Support symbol fonts.
  + Unicode 8.0 support.
  + Add hintstyle templates and default hintslight.
  + GX font support.
  + Improve the footprint issue on updating caches.
  + Bump the cache version to 6.
  + more bug fixes.</changelog>
  <changelog author="pgajdos@suse.com" date="1470916800">- Update to 2.12.1:
    Update CaseFolding.txt to Unicode 9.0
    Fix some errors related to python3
    Bug 96676 - Check range of FcWeightFromOpenType argument
    Update libtool revision
    Properly validate offsets in cache files.</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1488110400">- Add patch fontconfig-glibc-2.25.patch
  * Fixes build with glibc 2.25.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- Update to 2.12.3:
    Don't call perror() if no changes happens in errno
    Fix FcCacheOffsetsValid()
    Fix the build issue with gperf 3.1
    Fix the build issue on GNU/Hurd
    Update a bit for the changes in FreeType 2.7.1
    Add the description of FC_LANG envvar to the doc
    Bug 101202 - fontconfig FTBFS if docbook-utils is installed
    Correct cache version info in doc/fontconfig-user.sgml
    Avoid conflicts with integer width macros from TS 18661-1:2014
    Fix PostScript font alias name
    Update aliases for URW June 2016
- removed unneeded:
  - fontconfig-glibc-2.25.patch
  - make-check.patch</changelog>
  <changelog author="jengelh@inai.de" date="1499774400">- Remove --with-pic which is only useful for static libs.</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 2.12.4:
  * Various distcheck errors
  * FcCharSetHash(): use the 'numbers' values to compute the hash
  * fc-lang: gracefully handle the case where the last language initial is &lt; 'z'
  * Fix an off-by-one error in FcLangSetIndex()
  * Fix erroneous test on language id in FcLangSetPromote()
  * FcLangSetCompare(): fix bug when two charsets come from different "buckets"
  * Treat C.UTF-8 and C.utf8 locales as built in the C library
- Remove merged upstream fontconfig-locale_c.utf8.patch
- Remove fontconfig-doc archive, the generated output is already
  present in the upstream released tarball
- Remove unused configure options</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Update to 2.12.6:
  * conf.d: Drop aliases for (URW)++ fonts (upstreamed)
  * other minor fixes
- Includes changes from 2.12.5:
  * update docs
  * Accept 4 digit script tag in FcLangNormalize().
  * fc-blanks: fall back to the static data available in repo if
    downloaded data is corrupted
  * emoji related fixes
  * various cleanups
  * support listing named instances</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- fc-query: remove redundant debug output
  + fontconfig-remove-debug-output.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1590840000">- fontconfig-devel-32bit needs to require fontconfig-32bit,
  needed for Wine development (bsc#1172301)</changelog>
</package>
<package pkgid="1dbe2f189a5e3541dd7d9664b0262e50718f536d8d5fb34ae20b7cbcdc46a58a" name="fontconfig-32bit" arch="x86_64">
  <version epoch="0" ver="2.12.6" rel="lp151.4.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1417262400">- fix wrong path to documentation (bnc#907685)
- removed patch: usr-share-doc-packages.patch</changelog>
  <changelog author="fstrba@suse.com" date="1432036800">- Clean the spec file with spec-cleaner</changelog>
  <changelog author="idonmez@suse.com" date="1457524800">- Add fontconfig-locale_c.utf8.patch to recognize C.UTF-8 locale,
  patch from Debian.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Update to version 2.12.0:
  + Support the size specific design selection in OS/2 table
    version 5.
  + Allow the modification on 'lang' and 'charset' objects.
  + Increase the refcount in FcConfigSetCurrent().
  + some updates in orth files.
  + Add --error-on-no-fonts option to fc-cache.
  + Use lang=und instead of lang=xx for "undetermined".
  + Add FC_WEIGHT_DEMILIGHT and change from 65 to 55.
  + Add FC_COLOR.
  + Treat color fonts as scalable.
  + no FC_LANG added with FcConfigSubstitute() when it has "und".
  + Hardcode blanks in library.
  + Support symbol fonts.
  + Unicode 8.0 support.
  + Add hintstyle templates and default hintslight.
  + GX font support.
  + Improve the footprint issue on updating caches.
  + Bump the cache version to 6.
  + more bug fixes.</changelog>
  <changelog author="pgajdos@suse.com" date="1470916800">- Update to 2.12.1:
    Update CaseFolding.txt to Unicode 9.0
    Fix some errors related to python3
    Bug 96676 - Check range of FcWeightFromOpenType argument
    Update libtool revision
    Properly validate offsets in cache files.</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1488110400">- Add patch fontconfig-glibc-2.25.patch
  * Fixes build with glibc 2.25.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- Update to 2.12.3:
    Don't call perror() if no changes happens in errno
    Fix FcCacheOffsetsValid()
    Fix the build issue with gperf 3.1
    Fix the build issue on GNU/Hurd
    Update a bit for the changes in FreeType 2.7.1
    Add the description of FC_LANG envvar to the doc
    Bug 101202 - fontconfig FTBFS if docbook-utils is installed
    Correct cache version info in doc/fontconfig-user.sgml
    Avoid conflicts with integer width macros from TS 18661-1:2014
    Fix PostScript font alias name
    Update aliases for URW June 2016
- removed unneeded:
  - fontconfig-glibc-2.25.patch
  - make-check.patch</changelog>
  <changelog author="jengelh@inai.de" date="1499774400">- Remove --with-pic which is only useful for static libs.</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 2.12.4:
  * Various distcheck errors
  * FcCharSetHash(): use the 'numbers' values to compute the hash
  * fc-lang: gracefully handle the case where the last language initial is &lt; 'z'
  * Fix an off-by-one error in FcLangSetIndex()
  * Fix erroneous test on language id in FcLangSetPromote()
  * FcLangSetCompare(): fix bug when two charsets come from different "buckets"
  * Treat C.UTF-8 and C.utf8 locales as built in the C library
- Remove merged upstream fontconfig-locale_c.utf8.patch
- Remove fontconfig-doc archive, the generated output is already
  present in the upstream released tarball
- Remove unused configure options</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Update to 2.12.6:
  * conf.d: Drop aliases for (URW)++ fonts (upstreamed)
  * other minor fixes
- Includes changes from 2.12.5:
  * update docs
  * Accept 4 digit script tag in FcLangNormalize().
  * fc-blanks: fall back to the static data available in repo if
    downloaded data is corrupted
  * emoji related fixes
  * various cleanups
  * support listing named instances</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- fc-query: remove redundant debug output
  + fontconfig-remove-debug-output.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1590840000">- fontconfig-devel-32bit needs to require fontconfig-32bit,
  needed for Wine development (bsc#1172301)</changelog>
</package>
<package pkgid="674155914c403c5614e4d4dc69401fbbcf8b7e5f243c7931067bae008729bc21" name="fontconfig-devel" arch="i586">
  <version epoch="0" ver="2.12.6" rel="lp151.4.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1417262400">- fix wrong path to documentation (bnc#907685)
- removed patch: usr-share-doc-packages.patch</changelog>
  <changelog author="fstrba@suse.com" date="1432036800">- Clean the spec file with spec-cleaner</changelog>
  <changelog author="idonmez@suse.com" date="1457524800">- Add fontconfig-locale_c.utf8.patch to recognize C.UTF-8 locale,
  patch from Debian.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Update to version 2.12.0:
  + Support the size specific design selection in OS/2 table
    version 5.
  + Allow the modification on 'lang' and 'charset' objects.
  + Increase the refcount in FcConfigSetCurrent().
  + some updates in orth files.
  + Add --error-on-no-fonts option to fc-cache.
  + Use lang=und instead of lang=xx for "undetermined".
  + Add FC_WEIGHT_DEMILIGHT and change from 65 to 55.
  + Add FC_COLOR.
  + Treat color fonts as scalable.
  + no FC_LANG added with FcConfigSubstitute() when it has "und".
  + Hardcode blanks in library.
  + Support symbol fonts.
  + Unicode 8.0 support.
  + Add hintstyle templates and default hintslight.
  + GX font support.
  + Improve the footprint issue on updating caches.
  + Bump the cache version to 6.
  + more bug fixes.</changelog>
  <changelog author="pgajdos@suse.com" date="1470916800">- Update to 2.12.1:
    Update CaseFolding.txt to Unicode 9.0
    Fix some errors related to python3
    Bug 96676 - Check range of FcWeightFromOpenType argument
    Update libtool revision
    Properly validate offsets in cache files.</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1488110400">- Add patch fontconfig-glibc-2.25.patch
  * Fixes build with glibc 2.25.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- Update to 2.12.3:
    Don't call perror() if no changes happens in errno
    Fix FcCacheOffsetsValid()
    Fix the build issue with gperf 3.1
    Fix the build issue on GNU/Hurd
    Update a bit for the changes in FreeType 2.7.1
    Add the description of FC_LANG envvar to the doc
    Bug 101202 - fontconfig FTBFS if docbook-utils is installed
    Correct cache version info in doc/fontconfig-user.sgml
    Avoid conflicts with integer width macros from TS 18661-1:2014
    Fix PostScript font alias name
    Update aliases for URW June 2016
- removed unneeded:
  - fontconfig-glibc-2.25.patch
  - make-check.patch</changelog>
  <changelog author="jengelh@inai.de" date="1499774400">- Remove --with-pic which is only useful for static libs.</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 2.12.4:
  * Various distcheck errors
  * FcCharSetHash(): use the 'numbers' values to compute the hash
  * fc-lang: gracefully handle the case where the last language initial is &lt; 'z'
  * Fix an off-by-one error in FcLangSetIndex()
  * Fix erroneous test on language id in FcLangSetPromote()
  * FcLangSetCompare(): fix bug when two charsets come from different "buckets"
  * Treat C.UTF-8 and C.utf8 locales as built in the C library
- Remove merged upstream fontconfig-locale_c.utf8.patch
- Remove fontconfig-doc archive, the generated output is already
  present in the upstream released tarball
- Remove unused configure options</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Update to 2.12.6:
  * conf.d: Drop aliases for (URW)++ fonts (upstreamed)
  * other minor fixes
- Includes changes from 2.12.5:
  * update docs
  * Accept 4 digit script tag in FcLangNormalize().
  * fc-blanks: fall back to the static data available in repo if
    downloaded data is corrupted
  * emoji related fixes
  * various cleanups
  * support listing named instances</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- fc-query: remove redundant debug output
  + fontconfig-remove-debug-output.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1590840000">- fontconfig-devel-32bit needs to require fontconfig-32bit,
  needed for Wine development (bsc#1172301)</changelog>
</package>
<package pkgid="bc88937a41aa5e486aecdb5d4e6215a5c8d366bc801ce8bd6b2633cc3bfcbb91" name="fontconfig-devel" arch="x86_64">
  <version epoch="0" ver="2.12.6" rel="lp151.4.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1417262400">- fix wrong path to documentation (bnc#907685)
- removed patch: usr-share-doc-packages.patch</changelog>
  <changelog author="fstrba@suse.com" date="1432036800">- Clean the spec file with spec-cleaner</changelog>
  <changelog author="idonmez@suse.com" date="1457524800">- Add fontconfig-locale_c.utf8.patch to recognize C.UTF-8 locale,
  patch from Debian.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Update to version 2.12.0:
  + Support the size specific design selection in OS/2 table
    version 5.
  + Allow the modification on 'lang' and 'charset' objects.
  + Increase the refcount in FcConfigSetCurrent().
  + some updates in orth files.
  + Add --error-on-no-fonts option to fc-cache.
  + Use lang=und instead of lang=xx for "undetermined".
  + Add FC_WEIGHT_DEMILIGHT and change from 65 to 55.
  + Add FC_COLOR.
  + Treat color fonts as scalable.
  + no FC_LANG added with FcConfigSubstitute() when it has "und".
  + Hardcode blanks in library.
  + Support symbol fonts.
  + Unicode 8.0 support.
  + Add hintstyle templates and default hintslight.
  + GX font support.
  + Improve the footprint issue on updating caches.
  + Bump the cache version to 6.
  + more bug fixes.</changelog>
  <changelog author="pgajdos@suse.com" date="1470916800">- Update to 2.12.1:
    Update CaseFolding.txt to Unicode 9.0
    Fix some errors related to python3
    Bug 96676 - Check range of FcWeightFromOpenType argument
    Update libtool revision
    Properly validate offsets in cache files.</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1488110400">- Add patch fontconfig-glibc-2.25.patch
  * Fixes build with glibc 2.25.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- Update to 2.12.3:
    Don't call perror() if no changes happens in errno
    Fix FcCacheOffsetsValid()
    Fix the build issue with gperf 3.1
    Fix the build issue on GNU/Hurd
    Update a bit for the changes in FreeType 2.7.1
    Add the description of FC_LANG envvar to the doc
    Bug 101202 - fontconfig FTBFS if docbook-utils is installed
    Correct cache version info in doc/fontconfig-user.sgml
    Avoid conflicts with integer width macros from TS 18661-1:2014
    Fix PostScript font alias name
    Update aliases for URW June 2016
- removed unneeded:
  - fontconfig-glibc-2.25.patch
  - make-check.patch</changelog>
  <changelog author="jengelh@inai.de" date="1499774400">- Remove --with-pic which is only useful for static libs.</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 2.12.4:
  * Various distcheck errors
  * FcCharSetHash(): use the 'numbers' values to compute the hash
  * fc-lang: gracefully handle the case where the last language initial is &lt; 'z'
  * Fix an off-by-one error in FcLangSetIndex()
  * Fix erroneous test on language id in FcLangSetPromote()
  * FcLangSetCompare(): fix bug when two charsets come from different "buckets"
  * Treat C.UTF-8 and C.utf8 locales as built in the C library
- Remove merged upstream fontconfig-locale_c.utf8.patch
- Remove fontconfig-doc archive, the generated output is already
  present in the upstream released tarball
- Remove unused configure options</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Update to 2.12.6:
  * conf.d: Drop aliases for (URW)++ fonts (upstreamed)
  * other minor fixes
- Includes changes from 2.12.5:
  * update docs
  * Accept 4 digit script tag in FcLangNormalize().
  * fc-blanks: fall back to the static data available in repo if
    downloaded data is corrupted
  * emoji related fixes
  * various cleanups
  * support listing named instances</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- fc-query: remove redundant debug output
  + fontconfig-remove-debug-output.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1590840000">- fontconfig-devel-32bit needs to require fontconfig-32bit,
  needed for Wine development (bsc#1172301)</changelog>
</package>
<package pkgid="cd990d564c98fcd563ad566725253ed75737105db948381392f08c09bf77f2e4" name="fontconfig-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.12.6" rel="lp151.4.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1417262400">- fix wrong path to documentation (bnc#907685)
- removed patch: usr-share-doc-packages.patch</changelog>
  <changelog author="fstrba@suse.com" date="1432036800">- Clean the spec file with spec-cleaner</changelog>
  <changelog author="idonmez@suse.com" date="1457524800">- Add fontconfig-locale_c.utf8.patch to recognize C.UTF-8 locale,
  patch from Debian.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Update to version 2.12.0:
  + Support the size specific design selection in OS/2 table
    version 5.
  + Allow the modification on 'lang' and 'charset' objects.
  + Increase the refcount in FcConfigSetCurrent().
  + some updates in orth files.
  + Add --error-on-no-fonts option to fc-cache.
  + Use lang=und instead of lang=xx for "undetermined".
  + Add FC_WEIGHT_DEMILIGHT and change from 65 to 55.
  + Add FC_COLOR.
  + Treat color fonts as scalable.
  + no FC_LANG added with FcConfigSubstitute() when it has "und".
  + Hardcode blanks in library.
  + Support symbol fonts.
  + Unicode 8.0 support.
  + Add hintstyle templates and default hintslight.
  + GX font support.
  + Improve the footprint issue on updating caches.
  + Bump the cache version to 6.
  + more bug fixes.</changelog>
  <changelog author="pgajdos@suse.com" date="1470916800">- Update to 2.12.1:
    Update CaseFolding.txt to Unicode 9.0
    Fix some errors related to python3
    Bug 96676 - Check range of FcWeightFromOpenType argument
    Update libtool revision
    Properly validate offsets in cache files.</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1488110400">- Add patch fontconfig-glibc-2.25.patch
  * Fixes build with glibc 2.25.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- Update to 2.12.3:
    Don't call perror() if no changes happens in errno
    Fix FcCacheOffsetsValid()
    Fix the build issue with gperf 3.1
    Fix the build issue on GNU/Hurd
    Update a bit for the changes in FreeType 2.7.1
    Add the description of FC_LANG envvar to the doc
    Bug 101202 - fontconfig FTBFS if docbook-utils is installed
    Correct cache version info in doc/fontconfig-user.sgml
    Avoid conflicts with integer width macros from TS 18661-1:2014
    Fix PostScript font alias name
    Update aliases for URW June 2016
- removed unneeded:
  - fontconfig-glibc-2.25.patch
  - make-check.patch</changelog>
  <changelog author="jengelh@inai.de" date="1499774400">- Remove --with-pic which is only useful for static libs.</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 2.12.4:
  * Various distcheck errors
  * FcCharSetHash(): use the 'numbers' values to compute the hash
  * fc-lang: gracefully handle the case where the last language initial is &lt; 'z'
  * Fix an off-by-one error in FcLangSetIndex()
  * Fix erroneous test on language id in FcLangSetPromote()
  * FcLangSetCompare(): fix bug when two charsets come from different "buckets"
  * Treat C.UTF-8 and C.utf8 locales as built in the C library
- Remove merged upstream fontconfig-locale_c.utf8.patch
- Remove fontconfig-doc archive, the generated output is already
  present in the upstream released tarball
- Remove unused configure options</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Update to 2.12.6:
  * conf.d: Drop aliases for (URW)++ fonts (upstreamed)
  * other minor fixes
- Includes changes from 2.12.5:
  * update docs
  * Accept 4 digit script tag in FcLangNormalize().
  * fc-blanks: fall back to the static data available in repo if
    downloaded data is corrupted
  * emoji related fixes
  * various cleanups
  * support listing named instances</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- fc-query: remove redundant debug output
  + fontconfig-remove-debug-output.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1590840000">- fontconfig-devel-32bit needs to require fontconfig-32bit,
  needed for Wine development (bsc#1172301)</changelog>
</package>
<package pkgid="d921dba0d3a17f5e8a0f264f3230c5a0bfe2aed5daaf79bed44724af9a1be418" name="fontforge" arch="i586">
  <version epoch="0" ver="20170731" rel="lp151.4.3.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1579003200">- Add fontforge-CVE-2020-5395-5496.patch: Use-after-free (heap) in
  the SFD_GetFontMetaData() function and fix NULL pointer dereference
  in the SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
  bnc#1160236, CVE-2020-5395, CVE-2020-5496).</changelog>
</package>
<package pkgid="4c0578d2a7c6690535ef6b0ad71265ca6de879dc238b554be5d13ba18cee5dc1" name="fontforge" arch="src">
  <version epoch="0" ver="20170731" rel="lp151.4.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1357300800">- Build with cairo and pango support</changelog>
  <changelog author="pgajdos@suse.com" date="1366113600">- %requires_ge libpng16-16 to avoid
  'Application built with libpng-1.5.14 but running with 1.6.1'
  warning when running fontforge</changelog>
  <changelog author="pgajdos@suse.com" date="1366113601">- use %requires_eq rather than %requires_ge (exact version)</changelog>
  <changelog author="coolo@suse.com" date="1378728000">- add fontforge-fixgiflib.patch to fix build with giflib 5.0.5</changelog>
  <changelog author="jengelh@inai.de" date="1384430400">- Put documentation into a separate subpackage
- Spruce of description of fontforge-devel a bit
- File list simplification/exactness</changelog>
  <changelog author="schwab@linux-m68k.org" date="1394366400">- fontforge-arraysubscript.patch: Fix invalid array subscript</changelog>
  <changelog author="pgajdos@suse.com" date="1395057600">- fixed linking against libpng (1.5, 1.6) [bnc#867041]
  * added fontforge-libpng.diff
  * removed libpng14-dynamic.diff
- spec file cleanup
  * call spec-cleaner
  * fontforge-20090622-fdleak.patch renamed to fontforge-fdleak.patch
  * docdir.patch renamed to fontforge-docdir.patch</changelog>
  <changelog author="jengelh@inai.de" date="1401537600">- Update fontforge-fixgiflib.patch to support giflib7-5.1</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412251200">- Cleanup BuildRequires, in particular do not use legacy
  metapackage xorg-x11-devel</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1579003200">- Add fontforge-CVE-2020-5395-5496.patch: Use-after-free (heap) in
  the SFD_GetFontMetaData() function and fix NULL pointer dereference
  in the SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
  bnc#1160236, CVE-2020-5395, CVE-2020-5496).</changelog>
</package>
<package pkgid="47378f259dcc4a24900aa3a5d01186e9358c91cbbf1c6d8d012f2e4bd4d252dc" name="fontforge" arch="x86_64">
  <version epoch="0" ver="20170731" rel="lp151.4.3.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1579003200">- Add fontforge-CVE-2020-5395-5496.patch: Use-after-free (heap) in
  the SFD_GetFontMetaData() function and fix NULL pointer dereference
  in the SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
  bnc#1160236, CVE-2020-5395, CVE-2020-5496).</changelog>
</package>
<package pkgid="8de63429a4e03d67d4007149ca3a06766cd9ce8035b4279edcae7ad45821ef48" name="fontforge" arch="i586">
  <version epoch="0" ver="20170731" rel="lp151.4.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1579003200">- Add fontforge-CVE-2020-5395-5496.patch: Use-after-free (heap) in
  the SFD_GetFontMetaData() function and fix NULL pointer dereference
  in the SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
  bnc#1160236, CVE-2020-5395, CVE-2020-5496).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1605960000">- Add fontforge-CVE-2020-25690.patch: Backport from upstream to
  fix for Use-after-free (heap) in the SFD_GetFontMetaData()
  function and the crash (bnc#1178308 CVE-2020-25690).</changelog>
</package>
<package pkgid="ae88eb3ccee78a8892507fb68a701fe116d58f4b5658f9b782e5cfdb33f8e9f6" name="fontforge" arch="src">
  <version epoch="0" ver="20170731" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1366113600">- %requires_ge libpng16-16 to avoid
  'Application built with libpng-1.5.14 but running with 1.6.1'
  warning when running fontforge</changelog>
  <changelog author="pgajdos@suse.com" date="1366113601">- use %requires_eq rather than %requires_ge (exact version)</changelog>
  <changelog author="coolo@suse.com" date="1378728000">- add fontforge-fixgiflib.patch to fix build with giflib 5.0.5</changelog>
  <changelog author="jengelh@inai.de" date="1384430400">- Put documentation into a separate subpackage
- Spruce of description of fontforge-devel a bit
- File list simplification/exactness</changelog>
  <changelog author="schwab@linux-m68k.org" date="1394366400">- fontforge-arraysubscript.patch: Fix invalid array subscript</changelog>
  <changelog author="pgajdos@suse.com" date="1395057600">- fixed linking against libpng (1.5, 1.6) [bnc#867041]
  * added fontforge-libpng.diff
  * removed libpng14-dynamic.diff
- spec file cleanup
  * call spec-cleaner
  * fontforge-20090622-fdleak.patch renamed to fontforge-fdleak.patch
  * docdir.patch renamed to fontforge-docdir.patch</changelog>
  <changelog author="jengelh@inai.de" date="1401537600">- Update fontforge-fixgiflib.patch to support giflib7-5.1</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412251200">- Cleanup BuildRequires, in particular do not use legacy
  metapackage xorg-x11-devel</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1579003200">- Add fontforge-CVE-2020-5395-5496.patch: Use-after-free (heap) in
  the SFD_GetFontMetaData() function and fix NULL pointer dereference
  in the SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
  bnc#1160236, CVE-2020-5395, CVE-2020-5496).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1605960000">- Add fontforge-CVE-2020-25690.patch: Backport from upstream to
  fix for Use-after-free (heap) in the SFD_GetFontMetaData()
  function and the crash (bnc#1178308 CVE-2020-25690).</changelog>
</package>
<package pkgid="2755ea81bef0d2f8997086584ce253cd610b5bdd24d7b31ff1e36a7ad19daf9f" name="fontforge" arch="x86_64">
  <version epoch="0" ver="20170731" rel="lp151.4.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1579003200">- Add fontforge-CVE-2020-5395-5496.patch: Use-after-free (heap) in
  the SFD_GetFontMetaData() function and fix NULL pointer dereference
  in the SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
  bnc#1160236, CVE-2020-5395, CVE-2020-5496).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1605960000">- Add fontforge-CVE-2020-25690.patch: Backport from upstream to
  fix for Use-after-free (heap) in the SFD_GetFontMetaData()
  function and the crash (bnc#1178308 CVE-2020-25690).</changelog>
</package>
<package pkgid="8872cb096de9d034d8d85f5fb78184ee0d590b75e77972fd0055b2bb863ccfcc" name="fontforge-devel" arch="i586">
  <version epoch="0" ver="20170731" rel="lp151.4.3.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1579003200">- Add fontforge-CVE-2020-5395-5496.patch: Use-after-free (heap) in
  the SFD_GetFontMetaData() function and fix NULL pointer dereference
  in the SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
  bnc#1160236, CVE-2020-5395, CVE-2020-5496).</changelog>
</package>
<package pkgid="e6f07584b0ac2292de572b767d6ddf590025653a23b23fae7ab57911083f91ed" name="fontforge-devel" arch="x86_64">
  <version epoch="0" ver="20170731" rel="lp151.4.3.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1579003200">- Add fontforge-CVE-2020-5395-5496.patch: Use-after-free (heap) in
  the SFD_GetFontMetaData() function and fix NULL pointer dereference
  in the SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
  bnc#1160236, CVE-2020-5395, CVE-2020-5496).</changelog>
</package>
<package pkgid="ff63ef84ffc386d0aa10f07c11b437369dcafee42822aaa48450ed29c907bb1c" name="fontforge-devel" arch="i586">
  <version epoch="0" ver="20170731" rel="lp151.4.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1579003200">- Add fontforge-CVE-2020-5395-5496.patch: Use-after-free (heap) in
  the SFD_GetFontMetaData() function and fix NULL pointer dereference
  in the SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
  bnc#1160236, CVE-2020-5395, CVE-2020-5496).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1605960000">- Add fontforge-CVE-2020-25690.patch: Backport from upstream to
  fix for Use-after-free (heap) in the SFD_GetFontMetaData()
  function and the crash (bnc#1178308 CVE-2020-25690).</changelog>
</package>
<package pkgid="72ae1a0f894a7516ae67376238d4e851b36c2b599c2caa82c7a67665fc393cc7" name="fontforge-devel" arch="x86_64">
  <version epoch="0" ver="20170731" rel="lp151.4.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1579003200">- Add fontforge-CVE-2020-5395-5496.patch: Use-after-free (heap) in
  the SFD_GetFontMetaData() function and fix NULL pointer dereference
  in the SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
  bnc#1160236, CVE-2020-5395, CVE-2020-5496).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1605960000">- Add fontforge-CVE-2020-25690.patch: Backport from upstream to
  fix for Use-after-free (heap) in the SFD_GetFontMetaData()
  function and the crash (bnc#1178308 CVE-2020-25690).</changelog>
</package>
<package pkgid="ce8fd7544a69d72c13c85086faa5053e3bbbbe20c59d0929dfd9cad3a5e4858f" name="fontforge-doc" arch="noarch">
  <version epoch="0" ver="20170731" rel="lp151.4.3.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1579003200">- Add fontforge-CVE-2020-5395-5496.patch: Use-after-free (heap) in
  the SFD_GetFontMetaData() function and fix NULL pointer dereference
  in the SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
  bnc#1160236, CVE-2020-5395, CVE-2020-5496).</changelog>
</package>
<package pkgid="33c93086aeb6a1161770b0b93e70ce67f17e44a28745d4f023b0a2d373641591" name="fontforge-doc" arch="noarch">
  <version epoch="0" ver="20170731" rel="lp151.4.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1579003200">- Add fontforge-CVE-2020-5395-5496.patch: Use-after-free (heap) in
  the SFD_GetFontMetaData() function and fix NULL pointer dereference
  in the SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
  bnc#1160236, CVE-2020-5395, CVE-2020-5496).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1605960000">- Add fontforge-CVE-2020-25690.patch: Backport from upstream to
  fix for Use-after-free (heap) in the SFD_GetFontMetaData()
  function and the crash (bnc#1178308 CVE-2020-25690).</changelog>
</package>
<package pkgid="16344ba76d94a3a43465c9ef35db0939402bddbe8909dec914a5bb428cfd6aa6" name="fonts-KanjiStrokeOrders" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Fix warning</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Add donation url to appdata
  * Add caption to the screenshot
  * Sync the declaration and implementation
  * Fix minor EBN issues
  * Fix the compilation of kiten on Windows
  * Port to KStatusNotifierItem and fix zorder issue
  * Fix logical not is only applied to the left hand side of this comparison
  * Port away from deprecated KAboutData::setProgramIconName()
  * Fix minor EBN issues and typos
  * added arcconfig</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1543233600">- Unbundle the dictionary files and instead make symlinks to
  the edict package's files.</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Fix mem leak found by asan</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1580817600">- Don't use data files from the edict package, they are not
  compatible (boo#1162654)</changelog>
</package>
<package pkgid="5402a2055e658ae185c7b189d20eea983b2b13c04d567c15fe245a38663dccff" name="fonts-config" arch="noarch">
  <version epoch="0" ver="20200609+git0.42e2b1b" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1417953600">- updated to 20141207
  added --info option (will be required by yast fonts)</changelog>
  <changelog author="pgajdos@suse.com" date="1421064000">- added Command: metadata to relevant sysconfig variables
  [bnc#912279]</changelog>
  <changelog author="pgajdos@suse.com" date="1429272000">- updated to 20150417:
  * added --user option</changelog>
  <changelog author="pgajdos@suse.com" date="1429617600">- updated to 20150421:
  * use mkpath instead of make_path [bnc#927968]
  * behave better when
    /usr/share/fontconfig/conf.avail/30-metric-aliases.conf
    not found</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- updated to 20150423:
  * hide local system family preference list when user's one is
    in action</changelog>
  <changelog author="pgajdos@suse.com" date="1429876800">- updated to 20150424:
  * introduce --remove-user-setting option</changelog>
  <changelog author="schwab@linux-m68k.org" date="1439553600">- fonts-config: fix use of $ENV vars</changelog>
  <changelog author="qzhao@suse.com" date="1440158400">- change fontconfig.SuSE.properties.template to fontconfig.SUSE.properties.template.
  * To full fit FATE#316521 Get rid of files using the old SUSE spelling.(bnc#942314)</changelog>
  <changelog author="pgajdos@suse.com" date="1447070400">- Roboto prefered for sans and serif and Source Sans Pro for
  monospace [bsc#951898]</changelog>
  <changelog author="pgajdos@suse.com" date="1473854400">- version 20160914:
  * comma and the rest of family string is ignored while translating
    preference lists from sysconfig to fontconfig snippets
    [bsc#998300]</changelog>
  <changelog author="ftake@geeko.jp" date="1474459200">- version 20160921
  * add 59-family-prefer-lang-specific.conf to specify prefered
    family for each language
  * fix Noto Sans CJK is used for serif alias (boo#998301)
  * assign monospace to default of Oxygen Mono</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1520856000">- Do not create fonts.{dir,scale} in encodings directory
  (boo#1106850).</changelog>
  <changelog author="i@marguerite.su" date="1525089600">- new upstream: https://github.com/openSUSE/fonts-config
  development will continue there.
- drop patch: fontconfig-infinality-generate-tt-groups.patch
  * infinality project is dead, we use a static result in upstream
    instead of generating it every time.
- update 20180430
  * support color emoji
  * modern fonts for symbol
  * add configurations for Noto Sans/Serif CJK</changelog>
  <changelog author="qzhao@suse.com" date="1539604800">- Add fonts-config-fix-misspelling.patch: fix misspelling in
  configuration file(boo#1111791).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541419200">- Use noun phrasing and user-independent wording.</changelog>
  <changelog author="sflees@suse.de" date="1544529600">- Update to 20181211
  * Update subpixel rendering config
  * Fix missspelling issue (boo#1111791). so
    Drop fonts-config-fix-misspelling.patch
  * Fix (boo#1092737).
  * other minor tidyups</changelog>
  <changelog author="Karl Cheng &lt;qantas94heavy@gmail.com&gt;" date="1547899200">- Update to 20190119
  * Allow non-ASCII letters in font names (boo#1049056, bnc#1101985).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1591704000">- Add a _service file
- Add code in %post to check the value of
  FORCE_MODIFY_DEFAULT_FONT_SETTINGS_IN_NEXT_UPDATE and if it's
  set to yes, empty or it doesn't exist, then update the values
  of FORCE_HINTSTYLE, USE_LCDFILTER and USE_RGBA in
  /etc/sysconfig/fonts-config to use the default settings
  established in the 20181211 release (boo#1172022)
- Update to 20200609+git0.42e2b1b:
  * Add variable to allow fonts-config to update default settings
  * Fix en-US, en-GB font matching</changelog>
</package>
<package pkgid="66a69fc2ab0d062a06679d6fdca636f6387a37f07ef61ac57544ed579b564ea2" name="fonts-config" arch="src">
  <version epoch="0" ver="20200609+git0.42e2b1b" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1411387200">- fix version in fonts-config script</changelog>
  <changelog author="pgajdos@suse.com" date="1417953600">- updated to 20141207
  added --info option (will be required by yast fonts)</changelog>
  <changelog author="pgajdos@suse.com" date="1421064000">- added Command: metadata to relevant sysconfig variables
  [bnc#912279]</changelog>
  <changelog author="pgajdos@suse.com" date="1429272000">- updated to 20150417:
  * added --user option</changelog>
  <changelog author="pgajdos@suse.com" date="1429617600">- updated to 20150421:
  * use mkpath instead of make_path [bnc#927968]
  * behave better when
    /usr/share/fontconfig/conf.avail/30-metric-aliases.conf
    not found</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- updated to 20150423:
  * hide local system family preference list when user's one is
    in action</changelog>
  <changelog author="pgajdos@suse.com" date="1429876800">- updated to 20150424:
  * introduce --remove-user-setting option</changelog>
  <changelog author="schwab@linux-m68k.org" date="1439553600">- fonts-config: fix use of $ENV vars</changelog>
  <changelog author="qzhao@suse.com" date="1440158400">- change fontconfig.SuSE.properties.template to fontconfig.SUSE.properties.template.
  * To full fit FATE#316521 Get rid of files using the old SUSE spelling.(bnc#942314)</changelog>
  <changelog author="pgajdos@suse.com" date="1447070400">- Roboto prefered for sans and serif and Source Sans Pro for
  monospace [bsc#951898]</changelog>
  <changelog author="pgajdos@suse.com" date="1473854400">- version 20160914:
  * comma and the rest of family string is ignored while translating
    preference lists from sysconfig to fontconfig snippets
    [bsc#998300]</changelog>
  <changelog author="ftake@geeko.jp" date="1474459200">- version 20160921
  * add 59-family-prefer-lang-specific.conf to specify prefered
    family for each language
  * fix Noto Sans CJK is used for serif alias (boo#998301)
  * assign monospace to default of Oxygen Mono</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1520856000">- Do not create fonts.{dir,scale} in encodings directory
  (boo#1106850).</changelog>
  <changelog author="i@marguerite.su" date="1525089600">- new upstream: https://github.com/openSUSE/fonts-config
  development will continue there.
- drop patch: fontconfig-infinality-generate-tt-groups.patch
  * infinality project is dead, we use a static result in upstream
    instead of generating it every time.
- update 20180430
  * support color emoji
  * modern fonts for symbol
  * add configurations for Noto Sans/Serif CJK</changelog>
  <changelog author="qzhao@suse.com" date="1539604800">- Add fonts-config-fix-misspelling.patch: fix misspelling in
  configuration file(boo#1111791).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541419200">- Use noun phrasing and user-independent wording.</changelog>
  <changelog author="sflees@suse.de" date="1544529600">- Update to 20181211
  * Update subpixel rendering config
  * Fix missspelling issue (boo#1111791). so
    Drop fonts-config-fix-misspelling.patch
  * Fix (boo#1092737).
  * other minor tidyups</changelog>
  <changelog author="Karl Cheng &lt;qantas94heavy@gmail.com&gt;" date="1547899200">- Update to 20190119
  * Allow non-ASCII letters in font names (boo#1049056, bnc#1101985).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1591704000">- Add a _service file
- Add code in %post to check the value of
  FORCE_MODIFY_DEFAULT_FONT_SETTINGS_IN_NEXT_UPDATE and if it's
  set to yes, empty or it doesn't exist, then update the values
  of FORCE_HINTSTYLE, USE_LCDFILTER and USE_RGBA in
  /etc/sysconfig/fonts-config to use the default settings
  established in the 20181211 release (boo#1172022)
- Update to 20200609+git0.42e2b1b:
  * Add variable to allow fonts-config to update default settings
  * Fix en-US, en-GB font matching</changelog>
</package>
<package pkgid="ff3cc4dffd37e91c4299b2c310756737b27db67abfec22d968c78278fb2ff8d7" name="fossil" arch="src">
  <version epoch="0" ver="2.11" rel="lp151.3.3.1"/>
  <changelog author="mmeister@suse.com" date="1361188800">- Update to Version 1.25
  * Timeline Nodes in the ui selectable to diff between two nodes.
  * Added and enhanced a few commands and options.
  * Added a few JavaScripts to the web ui.</changelog>
  <changelog author="max@suse.com" date="1381838400">- Update to Version 1.27
  * Enhance the fossil changes, fossil clean, fossil extras,
    fossil ls and fossil status commands to restrict operation to
    files and directories named on the command-line.
  * New --integrate option to fossil merge, which automatically
    closes the merged branch when committing.
  * Renamed /stats_report page to /reports. Graph width is now
    relative, not absolute.
  * Added yw=YYYY-WW (year-week) filter to timeline to limit the
    results to a specific year and calendar week number,
    e.g. /timeline?yw=2013-01.
  * Updates to SQLite to prevent opening a repository file using
    file descriptors 1 or 2 on unix. This fixes a bug under which
    an assertion failure could overwrite part of a repository
    database file, corrupting it.
  * Added support for unlimited line lengths in side-by-side
    diffs.
  * New --close option to fossil commit, which immediately closes
    the branch being committed.
  * Added chart option to fossil bisect.
  * Improvements to the "human or bot?" determination.
  * Reports errors about missing CGI-standard environment
    variables for HTTP servers which do not support them.
  * Added --scgi option to fossil server.
  * Internal improvements to the sync process.
  * The internals of the JSON API are now MIT-licensed, so
    downstream users/packagers are no longer affected by the "do
    no evil" license clause.
  * The argument to the --port option for the "fossil ui" and
    "fossil server" commands can take an IP address in addition to
    the port number, causing Fossil to bind to just that one IP
    address.
  * After prompting for a password, also ask if that password
    should be remembered.
  * Performance improvements to the diff engine.
  * Fix the side-by-side diff engine to work better with
    multi-byte unicode text.
  * Color-coding in the web-based annotation (blame) display. Fix
    the annotation engine so that it is no longer confused by
    time-warps.
  * The markdown formatter is now available by default and can be
    used for tickets, wiki, and embedded documentation.
  * Add subcommands "fossil bisect log" and "fossil bisect status"
    to the "fossil bisect" command, as well as other bisect
    enhancements.
  * Enhanced defenses that prevent spiders from using excessive
    CPU and bandwidth.
  * Consistent use of the -n or --dry-run command line options.
  * Enhancements to /timeline.rss, adding more flags for filtering
    results, including the ability to subscribe to changes made to
    individual tickets.
  * Improved handling of the differences between case-sensitive
    and case-insensitive filesystems.
  * JSON API: added the 'status' command to report local checkout
    status.
  * Fixes to the --args support and documented this feature in the
    help.
  * Added /stats_report page.
  * Added ym=YYYY-MM filter to the "/timeline" url.
  * Fixed: config reset now re-installs default ticket report
    format.
  * ssh:// and file:// protocols now ignore proxy settings.
  * Added /hash-color-test web page.
  * Cherry-pick merges are recorded internally (though no yet
    displayed on the timeline graph.)
  * Bring in the latest versions of SQLite, zlib, and autosetup
    from upstream.</changelog>
  <changelog author="max@suse.de" date="1400760000">- Update to version 1.28:
  * Enhance /reports to support event type filtering.
  * When cloning a repository, the user name passed via the URL
    (if any) is now used as the default local admin user's name.
  * Enhance the SSH transport mechanism so that it runs a single
    instance of the "fossil" executable on the remote side,
    obviating the need for a shell on the remote side. Some users
    may need to add the "?fossil=/path/to/fossil" query parameter
    to "ssh:" URIs if their fossil binary is not in a standard
    place.
  * Add the "fossil blame" command that works just like "fossil
    annotate" but uses a different output format that includes the
    user who made each changes and omits line numbers.
  * Add the "Tarball and ZIP-archive Prefix" configuration
    parameter under Admin/Configuration.
  * Fix CGI processing so that it works on web servers that do not
    supply REQUEST_URI.
  * Add options --dirsonly, --emptydirs, and --allckouts to the
    "fossil clean" command.
  * Ten-fold performance improvement in large "fossil blame" or
    "fossil annotate" commands.
  * Add option -W|--width and --offset to "fossil timeline" and
    "fossil finfo" commands.
  * Option -n|--limit of "fossil timeline" now specifies the
    number of entries, just like all other commands which have the
  - n|--limit option. The various timeline-related functions now
    output "--- ?? limit (??) reached ---" at the end whenever
    appropriate. Use "-n 0" if no limit is desired.
  * Fix handling of password embedded in Fossil URL.
  * New --once option to fossil clone command which does not store
    the URL or password when cloning.
  * Modify fossil ui to respect "default user" in an open
    repository.
  * Fossil now hides check-ins that have the "hidden" tag in
    timeline webpages.
  * Enhance /ci_edit page to add the "hidden" tag to check-ins.
  * Advanced possibilities for commit and ticket change
    notifications over http using TH1 scripting.
  * Add --sha1sum and --integrate options to the "fossil commit"
    command.
  * Add the "clean" and "extra" subcommands to the "fossil all"
    command
  * Add the --whatif option to "fossil clean" that works the same
    as "--dry-run", so that the name does not collide with the
  - -dry-run option of "fossil all".
  * Provide a configuration option to show dates on the web
    timeline as "YYMMMDD HH:MM"
  * Add an option to the "stats" webpage that allows an
    administrator to see the current repository schema.
  * Enhancements to the "/vdiff" webpage for more difference
    display options.
  * Added the "/tree" webpage as an alternative to "/dir" and make
    it the default way of showing file lists.
  * Send gzipped HTTP responses to clients that support it.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1411387200">- fossil 1.29:
  * Add the ability to display content, diffs and annotations for
    UTF16 text files in the web interface.
  * Add the "SaveAs..." and "Invert" buttons to the graphical diff
    display that results from using the --tk option with the fossil
    diff command.
  * The /reports page now requires Read ("o") permissions. The
    "byweek" report now properly propagates the selected year
    through the event type filter links.
  * The info command now shows leaf status of the checkout.
  * Add support for tunneling https through a http proxy
  * Add option --empty to the "fossil open" command.
  * Enhanced the fileage page to support a glob parameter.
  * Add -w|--ignore-all-space and -Z|--ignore-trailing-space
    options to fossil annotate, fossil blame, fossil (g)diff,
    fossil stash diff.
  * Add --strip-trailing-cr option to fossil (g)diff and fossil
    stash diff.
  * Add button "Ignore Whitespace" to /annotate, /blame, /ci, /fdiff
    and /vdiff UI pages.
  * Enhance /reports with a "byweekday" view.
  * Enhance the fossil cat command so that it works outside of a
    checkout when using the -R command-line option.
  * Use full-length SHA1 hashes, not abbreviations, in most
    hyperlinks.
  * Correctly render the &lt;title&gt; markup on wiki pages in the
    /artifact webpage.
  * Enhance the fossil whatis command to report on attachments
    and cluster artifacts. Added the /help?cmd=test-whatis-all
    command for testing purposes.
  * Add support for HTTP Basic Authentication on clone and sync.
  * Fix the stash so that it remembers added files and re-adds them
    when the stash is applied.
  * Fix the server so that it avoids writing to the database (and
    thus avoids database locking issues) on a pull or clone.
  * Add support for server load management using both a cache of
    expensive pages (the fossil cache command) and by rejecting
    expensive page requests when the server load average is too
    high.
  * Add the fossil praise command as an alias for fossil blame for
    subversion compatibility.
  * Enhance the fossil test-diff command with -y or --tk options so
    that it shows both filenames above their respective columns in
    the side-by-side diff output.
  * Issue a warning if a fossil add command tries to add a file that
    matches the ignore-glob.
  * Add option -W|--width to "fossil stash ls" and "fossil leaves"
    commands.
  * Enhance support for running as the root user
  * Added the -empty option to fossil new, which causes it to not
    create an initial empty commit. The first commit after
    checking out a repo created this way will become the initial
    commit.
  * Enhance sync operations by committing each round-trip to
    minimize number of retransmits when autosync fails. Include
    option for fossil update and fossil merge to continue even if
    missing content.
  * Minor portability fixes for platforms where the char type is
    unsigned by default.
- use source URLs
- verify source signatures
- add fossil-1.29-remove_date_time.patch to fix packaging warning</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
  <changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
  <changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
  <changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
  <changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
  <changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
  <changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
  <changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>
  <changelog author="max@suse.com" date="1512648000">- Use bcond for deciding between system and builtin sqlite.
- Update to version 2.4:
  * New feature: URL Aliases. URL Aliases allow an administrator to
    define their own URLs on the web interface that are rewritten to
    built-in URLs with specific parameters. Create and configure
    URL Aliases using the /Setup/URL_Aliases menu option in the
    web interface.
  * Add tech-note search capability.
  * Add the -r|--revision and -o|--origin options to the annotate
    command.
  * Add the origin= query parameter to the /annotate webpage.
  * The fossil annotate command and the /annotate web page go
    backwards in time as far as can be computed in 30 milliseconds
    by default, rather than stopping after 20 steps. The new
    limit= query parameter or the --limit command-line option can
    be used to alter this timeout.
  * Provide separate on-line help screens for each setting.
  * Back out support for the --no-dir-symlinks option
  * Remove support from the legacy configuration sync
    protocol. The only way now to do a configuration push or pull
    is to use the new protocol that was added in 2011.
  * Add the from= and to= query parameters to /fdiff in order to
    get a diff of two files in the same check-in.
  * CVE-2017-17459, bsc#1071709: Fix the "ssh://" protocol to
    prevent an attack whereby the attacker convinces a victim to
    run a "clone" with a dodgy URL and thereby gains access to
    their system
  * Provide a checkbox that will temporarily disable all ad-units.
  * Improvements to the /stat page
  * Various new hyperlinks to the /bloblist and /bigbloblist pages.
  * Correct the /doc page to support read-only repositories.
  * Correct /zip, /tarball, zip, and tarball pages and commands to
    honor the versioned manifest setting when outside of an open
    checkout directory.
  * The admin-log and access-log settings are now on by default
    for new repositories.
  * Update the built-in SQLite to version 3.21.0.</changelog>
  <changelog author="astieger@suse.com" date="1519646400">- update to 2.5:
  * UI updates
  * display ettings persist across pages
  * improve responsiveness fo server process
  * Support for SQL Archives as a download option</changelog>
  <changelog author="astieger@suse.com" date="1538049600">- update to 2.7:
  * New email alerts feature
  * New discussion forum feature
  * UI improvements for built-in skins on small screens
  * Use of Content Security Policy (CSP) in built-in skins
- includes changes from 2.6:
  * Add the new "Classic" timeline viewing mode
  * Add support HTTP cache control mechanisms
  * Improvements to various pages and functions
  * Additional defenses against web-based attacks
- requires SQLite &gt;= 3.25.0
- rebase fossil-1.37-remove_date_time.patch to
  fossil-2.7-remove_date_time.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.9:
  * Add the fossil git export command
  * Web UI layout and behavior improvements
  * Add the fossil touch command, and the --setmtime option on the
    fossil open and fossil update commands
  * Add the /secureraw page that requires the complete SHA1 or SHA3
    hash, not just a prefix, before it will deliver content
  * Improvement to clone and sync behavior
  * many other bug fixes and improvements
- includes changes from 2.8:
  * Show cherry-pick merges as dotted lines on the timeline graph.
    The "fossil rebuild" command must be run to create and populate
    the new "cherrypick" table in the repository in order for this
    feature to operate.
  * Web UI improvements
  * Wiki setup is now at /setup_wiki
  * Provide the ability to redirect all HTTP pages to HTTPS
  * Add the backoffice-disable setting to completely disable the
    backoffice feature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570276800">- fossil 2.10:
  * Add support for CGI-based Server Extensions
  * UI improvement and extensions
  * Change the default hash policy to SHA3
  * Performance optimizations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590580800">- fossil 2.11:
  * Support Markdown in the default ticket configuration
  * Timestamp strings in object names can now omit punctation
  * Enhance backlink processing so that it works with Markdown-
    formatted tickets and so that it works for wiki pages
    fossil rebuild is needed to take full advantage of this fix
  * Many improvements to the forum and especially email notification
    of forum posts
  * Minimum length of a self-registered user ID increased from 3 to 6
    characters
  * Rework the fossil grep command to be more useful
  * Expose the redirect-to-https setting to the settings command
  * Most commands now support the Unix-conventional "--" flag to
    treat all following arguments as filenames instead of flags
  * Add the mimetypes config setting
  * security harening against possibly tampered database schemas
  * Now sends the Content-Security-Policy header
  * Stop using the IP address as part of the login cookie
  * many web UI and CLI improvements, documentation updates</changelog>
</package>
<package pkgid="4e1a7c0cda76e66401d8418020619b50325bad8e75b85cd92caed69dff687da5" name="fossil" arch="x86_64">
  <version epoch="0" ver="2.11" rel="lp151.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
  <changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
  <changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
  <changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
  <changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
  <changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
  <changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
  <changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>
  <changelog author="max@suse.com" date="1512648000">- Use bcond for deciding between system and builtin sqlite.
- Update to version 2.4:
  * New feature: URL Aliases. URL Aliases allow an administrator to
    define their own URLs on the web interface that are rewritten to
    built-in URLs with specific parameters. Create and configure
    URL Aliases using the /Setup/URL_Aliases menu option in the
    web interface.
  * Add tech-note search capability.
  * Add the -r|--revision and -o|--origin options to the annotate
    command.
  * Add the origin= query parameter to the /annotate webpage.
  * The fossil annotate command and the /annotate web page go
    backwards in time as far as can be computed in 30 milliseconds
    by default, rather than stopping after 20 steps. The new
    limit= query parameter or the --limit command-line option can
    be used to alter this timeout.
  * Provide separate on-line help screens for each setting.
  * Back out support for the --no-dir-symlinks option
  * Remove support from the legacy configuration sync
    protocol. The only way now to do a configuration push or pull
    is to use the new protocol that was added in 2011.
  * Add the from= and to= query parameters to /fdiff in order to
    get a diff of two files in the same check-in.
  * CVE-2017-17459, bsc#1071709: Fix the "ssh://" protocol to
    prevent an attack whereby the attacker convinces a victim to
    run a "clone" with a dodgy URL and thereby gains access to
    their system
  * Provide a checkbox that will temporarily disable all ad-units.
  * Improvements to the /stat page
  * Various new hyperlinks to the /bloblist and /bigbloblist pages.
  * Correct the /doc page to support read-only repositories.
  * Correct /zip, /tarball, zip, and tarball pages and commands to
    honor the versioned manifest setting when outside of an open
    checkout directory.
  * The admin-log and access-log settings are now on by default
    for new repositories.
  * Update the built-in SQLite to version 3.21.0.</changelog>
  <changelog author="astieger@suse.com" date="1519646400">- update to 2.5:
  * UI updates
  * display ettings persist across pages
  * improve responsiveness fo server process
  * Support for SQL Archives as a download option</changelog>
  <changelog author="astieger@suse.com" date="1538049600">- update to 2.7:
  * New email alerts feature
  * New discussion forum feature
  * UI improvements for built-in skins on small screens
  * Use of Content Security Policy (CSP) in built-in skins
- includes changes from 2.6:
  * Add the new "Classic" timeline viewing mode
  * Add support HTTP cache control mechanisms
  * Improvements to various pages and functions
  * Additional defenses against web-based attacks
- requires SQLite &gt;= 3.25.0
- rebase fossil-1.37-remove_date_time.patch to
  fossil-2.7-remove_date_time.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.9:
  * Add the fossil git export command
  * Web UI layout and behavior improvements
  * Add the fossil touch command, and the --setmtime option on the
    fossil open and fossil update commands
  * Add the /secureraw page that requires the complete SHA1 or SHA3
    hash, not just a prefix, before it will deliver content
  * Improvement to clone and sync behavior
  * many other bug fixes and improvements
- includes changes from 2.8:
  * Show cherry-pick merges as dotted lines on the timeline graph.
    The "fossil rebuild" command must be run to create and populate
    the new "cherrypick" table in the repository in order for this
    feature to operate.
  * Web UI improvements
  * Wiki setup is now at /setup_wiki
  * Provide the ability to redirect all HTTP pages to HTTPS
  * Add the backoffice-disable setting to completely disable the
    backoffice feature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570276800">- fossil 2.10:
  * Add support for CGI-based Server Extensions
  * UI improvement and extensions
  * Change the default hash policy to SHA3
  * Performance optimizations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590580800">- fossil 2.11:
  * Support Markdown in the default ticket configuration
  * Timestamp strings in object names can now omit punctation
  * Enhance backlink processing so that it works with Markdown-
    formatted tickets and so that it works for wiki pages
    fossil rebuild is needed to take full advantage of this fix
  * Many improvements to the forum and especially email notification
    of forum posts
  * Minimum length of a self-registered user ID increased from 3 to 6
    characters
  * Rework the fossil grep command to be more useful
  * Expose the redirect-to-https setting to the settings command
  * Most commands now support the Unix-conventional "--" flag to
    treat all following arguments as filenames instead of flags
  * Add the mimetypes config setting
  * security harening against possibly tampered database schemas
  * Now sends the Content-Security-Policy header
  * Stop using the IP address as part of the login cookie
  * many web UI and CLI improvements, documentation updates</changelog>
</package>
<package pkgid="51186af58f127f4155e289860bd028c83a86774b898d285b3b3af97883de512c" name="fossil" arch="src">
  <version epoch="0" ver="2.12.1" rel="lp151.3.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1411387200">- fossil 1.29:
  * Add the ability to display content, diffs and annotations for
    UTF16 text files in the web interface.
  * Add the "SaveAs..." and "Invert" buttons to the graphical diff
    display that results from using the --tk option with the fossil
    diff command.
  * The /reports page now requires Read ("o") permissions. The
    "byweek" report now properly propagates the selected year
    through the event type filter links.
  * The info command now shows leaf status of the checkout.
  * Add support for tunneling https through a http proxy
  * Add option --empty to the "fossil open" command.
  * Enhanced the fileage page to support a glob parameter.
  * Add -w|--ignore-all-space and -Z|--ignore-trailing-space
    options to fossil annotate, fossil blame, fossil (g)diff,
    fossil stash diff.
  * Add --strip-trailing-cr option to fossil (g)diff and fossil
    stash diff.
  * Add button "Ignore Whitespace" to /annotate, /blame, /ci, /fdiff
    and /vdiff UI pages.
  * Enhance /reports with a "byweekday" view.
  * Enhance the fossil cat command so that it works outside of a
    checkout when using the -R command-line option.
  * Use full-length SHA1 hashes, not abbreviations, in most
    hyperlinks.
  * Correctly render the &lt;title&gt; markup on wiki pages in the
    /artifact webpage.
  * Enhance the fossil whatis command to report on attachments
    and cluster artifacts. Added the /help?cmd=test-whatis-all
    command for testing purposes.
  * Add support for HTTP Basic Authentication on clone and sync.
  * Fix the stash so that it remembers added files and re-adds them
    when the stash is applied.
  * Fix the server so that it avoids writing to the database (and
    thus avoids database locking issues) on a pull or clone.
  * Add support for server load management using both a cache of
    expensive pages (the fossil cache command) and by rejecting
    expensive page requests when the server load average is too
    high.
  * Add the fossil praise command as an alias for fossil blame for
    subversion compatibility.
  * Enhance the fossil test-diff command with -y or --tk options so
    that it shows both filenames above their respective columns in
    the side-by-side diff output.
  * Issue a warning if a fossil add command tries to add a file that
    matches the ignore-glob.
  * Add option -W|--width to "fossil stash ls" and "fossil leaves"
    commands.
  * Enhance support for running as the root user
  * Added the -empty option to fossil new, which causes it to not
    create an initial empty commit. The first commit after
    checking out a repo created this way will become the initial
    commit.
  * Enhance sync operations by committing each round-trip to
    minimize number of retransmits when autosync fails. Include
    option for fossil update and fossil merge to continue even if
    missing content.
  * Minor portability fixes for platforms where the char type is
    unsigned by default.
- use source URLs
- verify source signatures
- add fossil-1.29-remove_date_time.patch to fix packaging warning</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
  <changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
  <changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
  <changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
  <changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
  <changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
  <changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
  <changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>
  <changelog author="max@suse.com" date="1512648000">- Use bcond for deciding between system and builtin sqlite.
- Update to version 2.4:
  * New feature: URL Aliases. URL Aliases allow an administrator to
    define their own URLs on the web interface that are rewritten to
    built-in URLs with specific parameters. Create and configure
    URL Aliases using the /Setup/URL_Aliases menu option in the
    web interface.
  * Add tech-note search capability.
  * Add the -r|--revision and -o|--origin options to the annotate
    command.
  * Add the origin= query parameter to the /annotate webpage.
  * The fossil annotate command and the /annotate web page go
    backwards in time as far as can be computed in 30 milliseconds
    by default, rather than stopping after 20 steps. The new
    limit= query parameter or the --limit command-line option can
    be used to alter this timeout.
  * Provide separate on-line help screens for each setting.
  * Back out support for the --no-dir-symlinks option
  * Remove support from the legacy configuration sync
    protocol. The only way now to do a configuration push or pull
    is to use the new protocol that was added in 2011.
  * Add the from= and to= query parameters to /fdiff in order to
    get a diff of two files in the same check-in.
  * CVE-2017-17459, bsc#1071709: Fix the "ssh://" protocol to
    prevent an attack whereby the attacker convinces a victim to
    run a "clone" with a dodgy URL and thereby gains access to
    their system
  * Provide a checkbox that will temporarily disable all ad-units.
  * Improvements to the /stat page
  * Various new hyperlinks to the /bloblist and /bigbloblist pages.
  * Correct the /doc page to support read-only repositories.
  * Correct /zip, /tarball, zip, and tarball pages and commands to
    honor the versioned manifest setting when outside of an open
    checkout directory.
  * The admin-log and access-log settings are now on by default
    for new repositories.
  * Update the built-in SQLite to version 3.21.0.</changelog>
  <changelog author="astieger@suse.com" date="1519646400">- update to 2.5:
  * UI updates
  * display ettings persist across pages
  * improve responsiveness fo server process
  * Support for SQL Archives as a download option</changelog>
  <changelog author="astieger@suse.com" date="1538049600">- update to 2.7:
  * New email alerts feature
  * New discussion forum feature
  * UI improvements for built-in skins on small screens
  * Use of Content Security Policy (CSP) in built-in skins
- includes changes from 2.6:
  * Add the new "Classic" timeline viewing mode
  * Add support HTTP cache control mechanisms
  * Improvements to various pages and functions
  * Additional defenses against web-based attacks
- requires SQLite &gt;= 3.25.0
- rebase fossil-1.37-remove_date_time.patch to
  fossil-2.7-remove_date_time.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.9:
  * Add the fossil git export command
  * Web UI layout and behavior improvements
  * Add the fossil touch command, and the --setmtime option on the
    fossil open and fossil update commands
  * Add the /secureraw page that requires the complete SHA1 or SHA3
    hash, not just a prefix, before it will deliver content
  * Improvement to clone and sync behavior
  * many other bug fixes and improvements
- includes changes from 2.8:
  * Show cherry-pick merges as dotted lines on the timeline graph.
    The "fossil rebuild" command must be run to create and populate
    the new "cherrypick" table in the repository in order for this
    feature to operate.
  * Web UI improvements
  * Wiki setup is now at /setup_wiki
  * Provide the ability to redirect all HTTP pages to HTTPS
  * Add the backoffice-disable setting to completely disable the
    backoffice feature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570276800">- fossil 2.10:
  * Add support for CGI-based Server Extensions
  * UI improvement and extensions
  * Change the default hash policy to SHA3
  * Performance optimizations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590580800">- fossil 2.11:
  * Support Markdown in the default ticket configuration
  * Timestamp strings in object names can now omit punctation
  * Enhance backlink processing so that it works with Markdown-
    formatted tickets and so that it works for wiki pages
    fossil rebuild is needed to take full advantage of this fix
  * Many improvements to the forum and especially email notification
    of forum posts
  * Minimum length of a self-registered user ID increased from 3 to 6
    characters
  * Rework the fossil grep command to be more useful
  * Expose the redirect-to-https setting to the settings command
  * Most commands now support the Unix-conventional "--" flag to
    treat all following arguments as filenames instead of flags
  * Add the mimetypes config setting
  * security harening against possibly tampered database schemas
  * Now sends the Content-Security-Policy header
  * Stop using the IP address as part of the login cookie
  * many web UI and CLI improvements, documentation updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1591876800">- Add fossil-2.11-reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593864000">- fossil 2.11.1:
  * Make the "fossil git export" command more restrictive about
    characters that it allows in the tag names</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1598443200">- fossil 2.12.1:
  * CVE-2020-24614: Remote authenticated users with check-in or
    administrative privileges could have executed arbitrary code
    [boo#1175760]
  * Security fix in the "fossil git export" command. New
    "safety-net" features were added to prevent similar problems
    in the future.
  * Enhancements to the graph display for cases when there are
    many cherry-pick merges into a single check-in. Example
  * Enhance the fossil open command with the new --workdir option
    and the ability to accept a URL as the repository name,
    causing the remote repository to be cloned automatically. Do
    not allow "fossil open" to open in a non-empty working
    directory unless the --keep option or the new --force option
    is used.
  * Enhance the markdown formatter to more closely follow the
    CommonMark specification with regard to text
    highlighting. Underscores in the middle of identifiers (ex:
    fossil_printf()) no longer need to be escaped.
  * The markdown-to-html translator can prevent unsafe HTML (for
    example: &lt;script&gt;) on user-contributed pages like forum and
    tickets and wiki. The admin can adjust this behavior using the
    safe-html setting on the Admin/Wiki page. The default is to
    disallow unsafe HTML everywhere.
  * Added the "collapse" and "expand" capability for long forum
    posts.
  * The "fossil remote" command now has options for specifying
    multiple persistent remotes with symbolic names. Currently
    only one remote can be used at a time, but that might change
    in the future.
  * Add the "Remember me?" checkbox on the login page. Use a
    session cookie for the login if it is not checked.
  * Added the experimental "fossil hook" command for managing
    "hook scripts" that run before checkin or after a push.
  * Enhance the fossil revert command so that it is able to revert
    all files beneath a directory.
  * Add the fossil bisect skip command.
  * Add the fossil backup command.
  * Enhance fossil bisect ui so that it shows all unchecked
    check-ins in between the innermost "good" and "bad" check-ins.
  * Added the --reset flag to the "fossil add", "fossil rm", and
    "fossil addremove" commands.
  * Added the "--min N" and "--logfile FILENAME" flags to the
    backoffice command, as well as other enhancements to make the
    backoffice command a viable replacement for automatic
    backoffice. Other incremental backoffice improvements.
  * Added the /fileedit page, which allows editing of text files
    online. Requires explicit activation by a setup user.
  * Translate built-in help text into HTML for display on web
    pages.
  * On the /timeline webpage, the combination of query parameters
    "p=CHECKIN" and "bt=ANCESTOR" draws all ancestors of CHECKIN
    going back to ANCESTOR.
  * Update the built-in SQLite so that the "fossil sql" command
    supports new output modes ".mode box" and ".mode json".
  * Add the "obscure()" SQL function to the "fossil sql" command.
  * Added virtual tables "helptext" and "builtin" to the "fossil
    sql" command, providing access to the dispatch table including
    all help text, and the builtin data files, respectively.
  * Delta compression is now applied to forum edits.
  * The wiki editor has been modernized and is now Ajax-based.
- Remove fossil-2.11-reproducible.patch: Upstream integrated the
  patch and improved it to also recognize SOURCE_DATE_EPOCH.
- Remove fossil-2.7-remove_date_time.patch: OBS now sets
  SOURCE_DATE_EPOCH and gcc recognizes it, so the removal of
  __DATE__ and __TIME__ is not needed anymore.
- Package the fossil.1 manual page.</changelog>
</package>
<package pkgid="459ff477f67bc5da79ade0f9ad1966dc7fd0e5c8e0f8291ab7d6248f9f11d3e6" name="fossil" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="lp151.3.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
  <changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
  <changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
  <changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
  <changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
  <changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
  <changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
  <changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>
  <changelog author="max@suse.com" date="1512648000">- Use bcond for deciding between system and builtin sqlite.
- Update to version 2.4:
  * New feature: URL Aliases. URL Aliases allow an administrator to
    define their own URLs on the web interface that are rewritten to
    built-in URLs with specific parameters. Create and configure
    URL Aliases using the /Setup/URL_Aliases menu option in the
    web interface.
  * Add tech-note search capability.
  * Add the -r|--revision and -o|--origin options to the annotate
    command.
  * Add the origin= query parameter to the /annotate webpage.
  * The fossil annotate command and the /annotate web page go
    backwards in time as far as can be computed in 30 milliseconds
    by default, rather than stopping after 20 steps. The new
    limit= query parameter or the --limit command-line option can
    be used to alter this timeout.
  * Provide separate on-line help screens for each setting.
  * Back out support for the --no-dir-symlinks option
  * Remove support from the legacy configuration sync
    protocol. The only way now to do a configuration push or pull
    is to use the new protocol that was added in 2011.
  * Add the from= and to= query parameters to /fdiff in order to
    get a diff of two files in the same check-in.
  * CVE-2017-17459, bsc#1071709: Fix the "ssh://" protocol to
    prevent an attack whereby the attacker convinces a victim to
    run a "clone" with a dodgy URL and thereby gains access to
    their system
  * Provide a checkbox that will temporarily disable all ad-units.
  * Improvements to the /stat page
  * Various new hyperlinks to the /bloblist and /bigbloblist pages.
  * Correct the /doc page to support read-only repositories.
  * Correct /zip, /tarball, zip, and tarball pages and commands to
    honor the versioned manifest setting when outside of an open
    checkout directory.
  * The admin-log and access-log settings are now on by default
    for new repositories.
  * Update the built-in SQLite to version 3.21.0.</changelog>
  <changelog author="astieger@suse.com" date="1519646400">- update to 2.5:
  * UI updates
  * display ettings persist across pages
  * improve responsiveness fo server process
  * Support for SQL Archives as a download option</changelog>
  <changelog author="astieger@suse.com" date="1538049600">- update to 2.7:
  * New email alerts feature
  * New discussion forum feature
  * UI improvements for built-in skins on small screens
  * Use of Content Security Policy (CSP) in built-in skins
- includes changes from 2.6:
  * Add the new "Classic" timeline viewing mode
  * Add support HTTP cache control mechanisms
  * Improvements to various pages and functions
  * Additional defenses against web-based attacks
- requires SQLite &gt;= 3.25.0
- rebase fossil-1.37-remove_date_time.patch to
  fossil-2.7-remove_date_time.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.9:
  * Add the fossil git export command
  * Web UI layout and behavior improvements
  * Add the fossil touch command, and the --setmtime option on the
    fossil open and fossil update commands
  * Add the /secureraw page that requires the complete SHA1 or SHA3
    hash, not just a prefix, before it will deliver content
  * Improvement to clone and sync behavior
  * many other bug fixes and improvements
- includes changes from 2.8:
  * Show cherry-pick merges as dotted lines on the timeline graph.
    The "fossil rebuild" command must be run to create and populate
    the new "cherrypick" table in the repository in order for this
    feature to operate.
  * Web UI improvements
  * Wiki setup is now at /setup_wiki
  * Provide the ability to redirect all HTTP pages to HTTPS
  * Add the backoffice-disable setting to completely disable the
    backoffice feature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570276800">- fossil 2.10:
  * Add support for CGI-based Server Extensions
  * UI improvement and extensions
  * Change the default hash policy to SHA3
  * Performance optimizations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590580800">- fossil 2.11:
  * Support Markdown in the default ticket configuration
  * Timestamp strings in object names can now omit punctation
  * Enhance backlink processing so that it works with Markdown-
    formatted tickets and so that it works for wiki pages
    fossil rebuild is needed to take full advantage of this fix
  * Many improvements to the forum and especially email notification
    of forum posts
  * Minimum length of a self-registered user ID increased from 3 to 6
    characters
  * Rework the fossil grep command to be more useful
  * Expose the redirect-to-https setting to the settings command
  * Most commands now support the Unix-conventional "--" flag to
    treat all following arguments as filenames instead of flags
  * Add the mimetypes config setting
  * security harening against possibly tampered database schemas
  * Now sends the Content-Security-Policy header
  * Stop using the IP address as part of the login cookie
  * many web UI and CLI improvements, documentation updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1591876800">- Add fossil-2.11-reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593864000">- fossil 2.11.1:
  * Make the "fossil git export" command more restrictive about
    characters that it allows in the tag names</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1598443200">- fossil 2.12.1:
  * CVE-2020-24614: Remote authenticated users with check-in or
    administrative privileges could have executed arbitrary code
    [boo#1175760]
  * Security fix in the "fossil git export" command. New
    "safety-net" features were added to prevent similar problems
    in the future.
  * Enhancements to the graph display for cases when there are
    many cherry-pick merges into a single check-in. Example
  * Enhance the fossil open command with the new --workdir option
    and the ability to accept a URL as the repository name,
    causing the remote repository to be cloned automatically. Do
    not allow "fossil open" to open in a non-empty working
    directory unless the --keep option or the new --force option
    is used.
  * Enhance the markdown formatter to more closely follow the
    CommonMark specification with regard to text
    highlighting. Underscores in the middle of identifiers (ex:
    fossil_printf()) no longer need to be escaped.
  * The markdown-to-html translator can prevent unsafe HTML (for
    example: &lt;script&gt;) on user-contributed pages like forum and
    tickets and wiki. The admin can adjust this behavior using the
    safe-html setting on the Admin/Wiki page. The default is to
    disallow unsafe HTML everywhere.
  * Added the "collapse" and "expand" capability for long forum
    posts.
  * The "fossil remote" command now has options for specifying
    multiple persistent remotes with symbolic names. Currently
    only one remote can be used at a time, but that might change
    in the future.
  * Add the "Remember me?" checkbox on the login page. Use a
    session cookie for the login if it is not checked.
  * Added the experimental "fossil hook" command for managing
    "hook scripts" that run before checkin or after a push.
  * Enhance the fossil revert command so that it is able to revert
    all files beneath a directory.
  * Add the fossil bisect skip command.
  * Add the fossil backup command.
  * Enhance fossil bisect ui so that it shows all unchecked
    check-ins in between the innermost "good" and "bad" check-ins.
  * Added the --reset flag to the "fossil add", "fossil rm", and
    "fossil addremove" commands.
  * Added the "--min N" and "--logfile FILENAME" flags to the
    backoffice command, as well as other enhancements to make the
    backoffice command a viable replacement for automatic
    backoffice. Other incremental backoffice improvements.
  * Added the /fileedit page, which allows editing of text files
    online. Requires explicit activation by a setup user.
  * Translate built-in help text into HTML for display on web
    pages.
  * On the /timeline webpage, the combination of query parameters
    "p=CHECKIN" and "bt=ANCESTOR" draws all ancestors of CHECKIN
    going back to ANCESTOR.
  * Update the built-in SQLite so that the "fossil sql" command
    supports new output modes ".mode box" and ".mode json".
  * Add the "obscure()" SQL function to the "fossil sql" command.
  * Added virtual tables "helptext" and "builtin" to the "fossil
    sql" command, providing access to the dispatch table including
    all help text, and the builtin data files, respectively.
  * Delta compression is now applied to forum edits.
  * The wiki editor has been modernized and is now Ajax-based.
- Remove fossil-2.11-reproducible.patch: Upstream integrated the
  patch and improved it to also recognize SOURCE_DATE_EPOCH.
- Remove fossil-2.7-remove_date_time.patch: OBS now sets
  SOURCE_DATE_EPOCH and gcc recognizes it, so the removal of
  __DATE__ and __TIME__ is not needed anymore.
- Package the fossil.1 manual page.</changelog>
</package>
<package pkgid="97fc50bb695e881b26d785394ffa77ac2c8b425ab9d41f03641eff02c0562340" name="fping" arch="src">
  <version epoch="0" ver="4.0" rel="lp151.4.3.1"/>
  <changelog author="lrupp@suse.de" date="1202472000">- convert the Changelog to Unix
- add COPYING, remove INSTALL from docudir
- use macros
- build parallel</changelog>
  <changelog author="puzel@novell.com" date="1258545600">- add ipv6 support (bnc#555691)</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- update to fping-3.0
  * rewritten main loop for improved performance
  * -T parameter (select timeout) now obsolete
  * Maintenance taken over from unresponsive previous maintainer
  * New homepage: www.fping.org
- drop fping-2.4b2-fixwarnings.patch (obsolete)</changelog>
  <changelog author="zaitor@opensuse.org" date="1337515200">- Update to version 3.1:
  + -g option (generate): exclude network and broadcast address
    for cidr ranges.
  + do not explicitely check if running as root, to make it
    possible to install fping with linux capabilities instead of
    making it setuid (setcap cap_net_raw+ep fping).
  + ANSI C (C89) compiler now a requirement.
  + Portability fixes.
  + Reorganized source directory.
  + Bugfix: fix timeout issue on Solaris.
  + Man-page fixes.
  + Added -H option to specify number of hops.
  + Output usage information to stdout when called with -h</changelog>
  <changelog author="wojtek@suse.cz" date="1339156800">-Update to 3.2
  * Improve documentation for -g option (G.W. Haywood)
  * Performance optimization for big select timeouts (#10, Andrey
  * Bondarenko)
  * Fix restart of select call after interrupt signal (#8, Boian
  * Bonev)
  * Fix infinite loop caused by linked list corruption (#11,
  * Boian Bonev)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1345464000">- update to 3.3:
  * Do not output icmp errors with -q (#1)
  * Add --enable-ipv4 and --enable-ipv6 options to configure
  * Fix removing of unreachable hosts when doing loop (#13 #23)
  * Fix -A for fping6 (#14)
  * Fix "options inet6" breaking IPv4 name resolution (#17)
  * Output statistics to stdout instead of stderr (#9)
  * Set default data size to 56 bytes on all architectures (#18)
  * Convert man-page source to POD for easier maintenance
  * Fix error message on DNS error for IPv6 hosts (#27)
  * Fix -n flag in fping6 (#28)</changelog>
  <changelog author="puzel@suse.com" date="1350388800">- update to 3.4
  * Revert "Output statistics to stdout instead of stderr", because
    it breaks tools assuming the output goes to stderr</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359633600">- Enable missing ipv6 support
- tweak out CFLAGS.</changelog>
  <changelog author="zaitor@opensuse.org" date="1376827200">- Update to version 3.5:
  * Fix sprint_tm buffer size crash.
  * Addded -D flag to print timestamps.
  * Fix fping6 build on OS X 10.8.
  * Fix compatibility issue with FreeBSD (#39).
  * Fping.spec: fix setuid permissions and provides fping6.
  * Re-create configure script with autoconf 2.69 for aarch64
    support (#45).</changelog>
  <changelog author="zaitor@opensuse.org" date="1394280000">- Update to version 3.9:
  + Fix random output on socket error (#56).
  + Support ppc64le architecture by including alpha libtool
    version.
  + Fix compilation problem on FreeBSD (#57).
  + Initial test suite and continous intergration (with
    travis-ci.org / coveralls.io).
  + Don't output usage information on error.
- Changes from version 3.8:
  + Fix segmentation fault introduced in version 3.7 with loop mode
    (#55).
- Changes from version 3.7:
  + Allow running as non-root on Mac OS X by using non-privileged
    ICMP (#7).
  + Remove unnecessary IPv6 socket options.
  + Fix again compatibility issue with FreeBSD.
  + Fix fping hanging forever on permanent sendto failure.
  + Fix duplicate echo reply packets causing early stop in count
    mode (#53).
- Changes from version 3.6:
  + Fix loop issue after 65536 pings (#12).
  + Minimum ping data size is now 0.
  + Removed setsockopt IPV6_CHECKSUM, which shouldn't be set and
    breaks compiling on Solaris.
  + Fix wrong min RTT value with -Q option (#51).
- Drop export CFLAGS="%optflags -D_GNU_SOURCE -fwhole-program", it
  breaks the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1399204800">- Update to version 3.10:
  + Fix confusing error message with -g and IPv6 addresses (#58).
  + Allow option '-f' also for non-root (since setuid privileges
    are dropped).
  + Do not retry twice DNS lookup on DNS lookup problem.
  + Remove support for NIS groups.
  + Better document -B backoff-factor and when it can be used (#33)
  + More tests added.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444910400">- Update to version 3.12:
  + Bugfix: Fix fping6 -R (#84).
- Changes from version 3.11:
  + Feature:
  - New option -R to use random bytes instead of NULLs (#72).
  - Small documentation and performance improvements.
  + Bugfix: Fix double entries with fping -u and unreachable hosts.
  + Internal: Use sockaddr_storage and simplify code, so that we
    can one day support both IPv4 and IPv6 with the same binary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.13:
  + Bugfix: Fix ICMP errors sometimes causing crashes with
    fping &gt;= 3.11.</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1488283200">- Update to version 3.16:
  * (feature) Support kernel-timestamping of received packets (#46)
  * (feature) Simplify restrictions: only -i &gt;= 1 and -p &gt;= 10 are
    enforced now
  * (bugfix) Fix option -m to return all IPs of a hostname
  * (bugfix) Fix option -H (ttl) for IPv6
  * (bugfix) Fix option -M (don't fragment) for IPv6
  * (bugfix) Fix option -O (ToS) for IPv6
  * (bugfix) Fix compatibility issue with AIX (#69, @blentzgh)
  * (bugfix) Fix option -q not suppressing some ICMP error messages (#83)
  * (bugfix) Fix option -M expecting an argument, when it shouldn't
  * (bugfix) Fix minor issues found by Coverity Scan
- Update to version 3.15:
  * (bugfix) Fix compiler errors on platforms other than Linux (related
    to the new -M option, #109)
  * Test suite fixes for macOS
- Update to version 3.14:
  * (feature) Ignore network and broadcast for cidrs /31 and /32
    (#102, Martin Topholm)
  * (feature) New option '-M' to set the "Don't Fragment" flag
    (#91, Don Bowman)
  * (feature) New option '-N' to output statistics for netdata
    (see: http://my-netdata.io/, #105, Costa Tsaousis)
  * (feature) New option '-o' to calculate total outage time (#90, @jgerbeck)
  * (bugfix) Exit code should be 2 when the hostname can't be resolved
    (fixes #98, reported by @green-fox)
  * (bugfix)  Fix issue compliling on RHEL/Centos 7 (#95, @jbackman)
  * (bugfix) Lower -i limit to 1 instead of 10
  * (bugfix) Improve interval preciseness of -Q reporting
  * (bugfix) Fix occasional false positive in -Q reporting (#97)
  * (bugfix) Solaris 10 portability fix (#107, Peter Bray)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 4.0
  * feature: Auto-adjust timeout for -c/-C/-l mode to value of -p
  * feature: Enforce -t timeout on reply packets, by discarding late
    packets (#32)
  * feature: Option -d/--rdns now always does a rdns-lookup, even for
    names, as '-n' was doing until now
  * feature: Keep original name if a hostname is given with -n/--name
  * feature: New option -6 to force IPv6
  * feature: New option -4 to force IPv4
  * feature: IPv6 enabled by default
  * feature: Long option names for all options
  * feature: Unified 'fping' and 'fping6' into one binary (#80)
  * feature: fping and fping6 are now unified into one binary.
  * bugfix: -i/-p restrictions disabled by default
    (enable with --enable-safe-limits)
  * bugfix: Default interval -i changed from 25ms to 10ms
  * bugfix: Fix compatibility issue with GNU Hurd
  * bugfix: A C99 compiler is now required
  * bugfix: Option parsing with optparse
  * bugfix: New changelog file format</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Do away with %__ macro indirections.</changelog>
  <changelog author="tchvatal@suse.com" date="1498046400">- Cleanup a bit with spec-cleaner basically just to use new make_install
  macro</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- fping now has cap_net_raw, fix build in Factory (bsc#1047921)</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- add fping-4.0-fix_ipv6-disabled.patch to fix fping on servers
  with disabled IPv6 [bsc#1133988]</changelog>
</package>
<package pkgid="59863b4d31fcd729e47bfc15419c3542cb87f4df5f781d31f760b2cb4ce9b19b" name="fping" arch="x86_64">
  <version epoch="0" ver="4.0" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1394280000">- Update to version 3.9:
  + Fix random output on socket error (#56).
  + Support ppc64le architecture by including alpha libtool
    version.
  + Fix compilation problem on FreeBSD (#57).
  + Initial test suite and continous intergration (with
    travis-ci.org / coveralls.io).
  + Don't output usage information on error.
- Changes from version 3.8:
  + Fix segmentation fault introduced in version 3.7 with loop mode
    (#55).
- Changes from version 3.7:
  + Allow running as non-root on Mac OS X by using non-privileged
    ICMP (#7).
  + Remove unnecessary IPv6 socket options.
  + Fix again compatibility issue with FreeBSD.
  + Fix fping hanging forever on permanent sendto failure.
  + Fix duplicate echo reply packets causing early stop in count
    mode (#53).
- Changes from version 3.6:
  + Fix loop issue after 65536 pings (#12).
  + Minimum ping data size is now 0.
  + Removed setsockopt IPV6_CHECKSUM, which shouldn't be set and
    breaks compiling on Solaris.
  + Fix wrong min RTT value with -Q option (#51).
- Drop export CFLAGS="%optflags -D_GNU_SOURCE -fwhole-program", it
  breaks the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1399204800">- Update to version 3.10:
  + Fix confusing error message with -g and IPv6 addresses (#58).
  + Allow option '-f' also for non-root (since setuid privileges
    are dropped).
  + Do not retry twice DNS lookup on DNS lookup problem.
  + Remove support for NIS groups.
  + Better document -B backoff-factor and when it can be used (#33)
  + More tests added.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444910400">- Update to version 3.12:
  + Bugfix: Fix fping6 -R (#84).
- Changes from version 3.11:
  + Feature:
  - New option -R to use random bytes instead of NULLs (#72).
  - Small documentation and performance improvements.
  + Bugfix: Fix double entries with fping -u and unreachable hosts.
  + Internal: Use sockaddr_storage and simplify code, so that we
    can one day support both IPv4 and IPv6 with the same binary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.13:
  + Bugfix: Fix ICMP errors sometimes causing crashes with
    fping &gt;= 3.11.</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1488283200">- Update to version 3.16:
  * (feature) Support kernel-timestamping of received packets (#46)
  * (feature) Simplify restrictions: only -i &gt;= 1 and -p &gt;= 10 are
    enforced now
  * (bugfix) Fix option -m to return all IPs of a hostname
  * (bugfix) Fix option -H (ttl) for IPv6
  * (bugfix) Fix option -M (don't fragment) for IPv6
  * (bugfix) Fix option -O (ToS) for IPv6
  * (bugfix) Fix compatibility issue with AIX (#69, @blentzgh)
  * (bugfix) Fix option -q not suppressing some ICMP error messages (#83)
  * (bugfix) Fix option -M expecting an argument, when it shouldn't
  * (bugfix) Fix minor issues found by Coverity Scan
- Update to version 3.15:
  * (bugfix) Fix compiler errors on platforms other than Linux (related
    to the new -M option, #109)
  * Test suite fixes for macOS
- Update to version 3.14:
  * (feature) Ignore network and broadcast for cidrs /31 and /32
    (#102, Martin Topholm)
  * (feature) New option '-M' to set the "Don't Fragment" flag
    (#91, Don Bowman)
  * (feature) New option '-N' to output statistics for netdata
    (see: http://my-netdata.io/, #105, Costa Tsaousis)
  * (feature) New option '-o' to calculate total outage time (#90, @jgerbeck)
  * (bugfix) Exit code should be 2 when the hostname can't be resolved
    (fixes #98, reported by @green-fox)
  * (bugfix)  Fix issue compliling on RHEL/Centos 7 (#95, @jbackman)
  * (bugfix) Lower -i limit to 1 instead of 10
  * (bugfix) Improve interval preciseness of -Q reporting
  * (bugfix) Fix occasional false positive in -Q reporting (#97)
  * (bugfix) Solaris 10 portability fix (#107, Peter Bray)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 4.0
  * feature: Auto-adjust timeout for -c/-C/-l mode to value of -p
  * feature: Enforce -t timeout on reply packets, by discarding late
    packets (#32)
  * feature: Option -d/--rdns now always does a rdns-lookup, even for
    names, as '-n' was doing until now
  * feature: Keep original name if a hostname is given with -n/--name
  * feature: New option -6 to force IPv6
  * feature: New option -4 to force IPv4
  * feature: IPv6 enabled by default
  * feature: Long option names for all options
  * feature: Unified 'fping' and 'fping6' into one binary (#80)
  * feature: fping and fping6 are now unified into one binary.
  * bugfix: -i/-p restrictions disabled by default
    (enable with --enable-safe-limits)
  * bugfix: Default interval -i changed from 25ms to 10ms
  * bugfix: Fix compatibility issue with GNU Hurd
  * bugfix: A C99 compiler is now required
  * bugfix: Option parsing with optparse
  * bugfix: New changelog file format</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Do away with %__ macro indirections.</changelog>
  <changelog author="tchvatal@suse.com" date="1498046400">- Cleanup a bit with spec-cleaner basically just to use new make_install
  macro</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- fping now has cap_net_raw, fix build in Factory (bsc#1047921)</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- add fping-4.0-fix_ipv6-disabled.patch to fix fping on servers
  with disabled IPv6 [bsc#1133988]</changelog>
</package>
<package pkgid="9664f3d655ef5a36afaf2d37ff6c1f1980d2c57fbee78a43a952c9957836a653" name="freeradius-server" arch="src">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="ffa2659e8eb426c33acf0f8f6f5dfdcd1384c12a6bf9f6360ad3b736df20f284" name="freeradius-server" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="6ad668e338fe1c6acfdffce8a3f8b0ba941fa755e43f94e80c45ce44e959e459" name="freeradius-server" arch="src">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="269a3e563259726ad9300421d9be843b5929b17fecc71ea84535aa1989ade9f6" name="freeradius-server" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="b27be3e43cdb49f401a3cf2934386e722f660835bc5634a4796f7010cb13487a" name="freeradius-server-devel" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="e4f31b2cb7138df15841139eac12f5e8cbefaff802a3058bb3c571db19f96f69" name="freeradius-server-devel" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="a551788396c4fd21409c8fcc5b7e1e145be681c93ca7a40e11dc84c7ad84848d" name="freeradius-server-doc" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="d59b99aa088288cb0f5a1ea246b62086b5fb11db128437b2ce025f42bac69a4c" name="freeradius-server-doc" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="291d3a6ddbb7b47ac35509f6816708d22643b8826edc7286ee5e7f6424ad03c0" name="freeradius-server-krb5" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="306a5eb998adc3734fa89638f8dfcea1626f6765affd8f88a2f1688601684e6e" name="freeradius-server-krb5" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="a2c7318c63f933f92ae788b82c5bcdc830da5ea7e286325188c10d5a1469a348" name="freeradius-server-ldap" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="91ebce4b127f468d5daad82fdb5662a2215fd18e930a4746896028ab98abe603" name="freeradius-server-ldap" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="d0b4db86686aba8987f5754e79f39b49e33c2dd66d41a41af3788331675e2408" name="freeradius-server-libs" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="876ab7c97db50395ed3a227874ce7bcbc0857ed04d8366d310e1c46d956a2a43" name="freeradius-server-libs" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="e0a2780a38d5b60edd99557a5d03e303528026cb806f5386bb83b3b04b5905a4" name="freeradius-server-mysql" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="7e3906de6d2f9750afadf240e0554871627da4c409f26d687eccf29c52b8ac99" name="freeradius-server-mysql" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="98c01e860cbb76c90743d613501e05cc6b1c6f553f37f708d44e20839ff9487f" name="freeradius-server-perl" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="dd415bfaeb7cc8d19b073cc5aec10121a6f420fffd3868812779d130a0ccdeaf" name="freeradius-server-perl" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="64fef9707f5601b21849265fd5b73357e712dc47eb3c1971655373f4ed0b94be" name="freeradius-server-postgresql" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="f40bf3979b96fef104fb8f03d2b18f7034d1ec9047129a7d7eff32e76333635b" name="freeradius-server-postgresql" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="d266a3595ce85a5cdfb9e9e4c2227477daae1be5b0aecd3e44bcaac8cfac63de" name="freeradius-server-python" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="995852ec5f05e126bbae4ad00b87ae7e3cf04c42189e44e9716177c6e78487dc" name="freeradius-server-python" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="772adb41df269871a884ff2049db3162528f4ce21889b2ffad7ce6da4c3acc6b" name="freeradius-server-sqlite" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="ff06245d98dc22f18e2b758a0d8c6ffec421c0dc303d8415160af672a930bf6c" name="freeradius-server-sqlite" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="605de8ebd63f69f7d9517cc96c579bfa1ebea0445cd63678fad040b1f7fa319e" name="freeradius-server-utils" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="9ec7edc88e684d4317ddfbd56c6c206a266285219ea31984d669887d32435243" name="freeradius-server-utils" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp151.4.4.1"/>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566820800">- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass
  OCSP verification when an intermediate client certificate was not
  explicitly trusted. (bsc#1146848)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585137600">- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd
  (bsc#1144524, CVE-2019-13456)
- CVE-2019-17185.patch: fixes DoS issues due to multithreaded
  BN_CTX access (bsc#1166847, CVE-2019-17185)</changelog>
</package>
<package pkgid="5010c05809f89867cb320763aa7caf478ea0b274e242f61baf75ea747b2b0a2e" name="freerdp" arch="src">
  <version epoch="0" ver="2.0.0~rc4" rel="lp151.5.3.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
</package>
<package pkgid="1b792d4b3eddeb9d218641f2d883b0e164a7b18ec3e6cbb35cc8831bc581f02d" name="freerdp" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp151.5.3.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
</package>
<package pkgid="02f6f547e959b99a488bf07e89f39f3fe2bd86f1d9ca8625cf2791acbf19a2d3" name="freerdp" arch="src">
  <version epoch="0" ver="2.1.2" rel="lp151.5.6.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1584705600">- Disable LTO on aarch64 and %arm to fix build</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Removed patch freerdp-Fix-realloc-return-handling.patch
- Added pkgconfig(libusb-1.0) for building
- Added new package for freerdp-proxy
- Cleaned up spec file
- Updated to release 2.0.0
  * Fixed CVEs:
  - CVE-2020-11521
  - CVE-2020-11522
  - CVE-2020-11523
  - CVE-2020-11524
  - CVE-2020-11525
  - CVE-2020-11526
  * Fixed security related issues:
  - gh#FreeRDP/FreeRDP#6005
  - gh#FreeRDP/FreeRDP#6006
  - gh#FreeRDP/FreeRDP#6007
  - gh#FreeRDP/FreeRDP#6008
  - gh#FreeRDP/FreeRDP#6009
  - gh#FreeRDP/FreeRDP#6010
  - gh#FreeRDP/FreeRDP#6011
  - gh#FreeRDP/FreeRDP#6012
  - gh#FreeRDP/FreeRDP#6013
  * sha256 is now used instead of sha1 to fingerprint certificates. This will
    invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a
    new connection is established after the update
  * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372)
    thanks to @kubistika
  * Smartcard received some refactoring. Missing functions were added and input
    validation was improved (gh#FreeRDP/FreeRDP#5884)
  * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880)
    The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still
    available but marked as deprecated
  * Support for Remote Assistance Protocol Version 2 [MS-RA]
  * The DirectFB client was removed because it was unmaintained
  * Unified initialization of OrderSupport
  * Fix for licensing against Windows Server 2003
  * Font smoothing is now enabled per default
  * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215)
  * Unified update-&gt;BeginPaint and update-&gt;EndPaint
  * An image scaling API for software drawing was added
  * Rail was updated to the latest spec version 28.0
  * Support for H.264 in the shadow server is now detected at runtime
  * Add mask=&lt;value&gt; option for /gfx and /gfx-h264  (gh#FreeRDP/FreeRDP#5771)
  * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586779200">- Added cairo support for scaling
- Cleaned up spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1587124800">- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order
  to fix boo#1169748.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1587124801">- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch
  to fix boo#1169679 and make USB working again
- Fixed build for SLE_12
- Cleaned up spec file</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588939200">- Updated to release 2.1.0 (boo#1171441)
  * Fixed CVEs:
  - CVE-2020-11039
  - CVE-2020-11038
  - CVE-2020-11043
  - CVE-2020-11040
  - CVE-2020-11041
  - CVE-2020-11019
  - CVE-2020-11017
  - CVE-2020-11018
  * Fixed leak and crashing issues:
  - gh#FreeRDP/FreeRDP#6129
  - gh#FreeRDP/FreeRDP#6128
  - gh#FreeRDP/FreeRDP#6127
  - gh#FreeRDP/FreeRDP#6110
  - gh#FreeRDP/FreeRDP#6081
  - gh#FreeRDP/FreeRDP#6077
  * Noteworthy features and improvements:
  - Fixed sound issues (gh#FreeRDP/FreeRDP#6043)
  - New expert command line options /tune and /tune-list to modify all client
    settings in a generic way.
  - Fixes for smartcard cache, this improves compatibility of smartcard devices
    with newer smartcard channel.
  - Shadow server can now be instructed to listen to multiple interfaces.
  - Improved server certificate support (gh#FreeRDP/FreeRDP#6052)
  - Various fixes for wayland client (fullscreen, mouse wheel, ...)
  - Fixed large mouse pointer support, now mouse pointers &gt; 96x96 pixel are visible.
  - USB redirection command line improvements (filter options)
  - Various translation improvements for android and ios clients
- Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch
  and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976000">- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205
- Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148
- Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976001">- Updated to release 2.1.1 (boo#1171441)
  * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage
  * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value
  * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common
  * Enforce synchronous legacy RDP encryption count (#6156)
  * Fixed some leaks and crashes missed in 2.1.0
  * Removed dynamic channel listener limits
  * Lots of resource cleanup fixes (clang sanitizers)
  * A couple of performance improvements
  * Various small annoyances eliminated (typos, prefilled username for windows client, ...)
- Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1592827200">- Updated to release 2.1.2 (boo#1173247)
  * CVE-2020-4033 Out of bound read in RLEDECOMPRESS
  * CVE-2020-4031 Use-After-Free in gdi_SelectObject
  * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order`
  * CVE-2020-4030 OOB read in `TrioParse`
  * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet
  * CVE-2020-11098 Out-of-bound read in glyph_cache_put
  * CVE-2020-11097 OOB read in ntlm_av_pair_get
  * CVE-2020-11095 Global OOB read in update_recv_primary_order
  * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order
  * Gateway RPC fixes for windows
  * Fixed resource fee race resulting in double free in USB redirection
  * Fixed wayland client crashes
  * Fixed X11 client mouse mapping issues (X11 mapping on/off)
  * Some proxy related improvements (capture module)
  * Code cleanup (use getlogin_r, ...)
- Removed obsolete upstream patch freerdp-bug-6205.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593691200">- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch
  which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1594987200">- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)
- Cleaned up spec file</changelog>
</package>
<package pkgid="25243e7c477a7bb34e71274b102337074beaac67168a8bf2b4c84be5f0df0fc8" name="freerdp" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp151.5.6.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1584705600">- Disable LTO on aarch64 and %arm to fix build</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Removed patch freerdp-Fix-realloc-return-handling.patch
- Added pkgconfig(libusb-1.0) for building
- Added new package for freerdp-proxy
- Cleaned up spec file
- Updated to release 2.0.0
  * Fixed CVEs:
  - CVE-2020-11521
  - CVE-2020-11522
  - CVE-2020-11523
  - CVE-2020-11524
  - CVE-2020-11525
  - CVE-2020-11526
  * Fixed security related issues:
  - gh#FreeRDP/FreeRDP#6005
  - gh#FreeRDP/FreeRDP#6006
  - gh#FreeRDP/FreeRDP#6007
  - gh#FreeRDP/FreeRDP#6008
  - gh#FreeRDP/FreeRDP#6009
  - gh#FreeRDP/FreeRDP#6010
  - gh#FreeRDP/FreeRDP#6011
  - gh#FreeRDP/FreeRDP#6012
  - gh#FreeRDP/FreeRDP#6013
  * sha256 is now used instead of sha1 to fingerprint certificates. This will
    invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a
    new connection is established after the update
  * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372)
    thanks to @kubistika
  * Smartcard received some refactoring. Missing functions were added and input
    validation was improved (gh#FreeRDP/FreeRDP#5884)
  * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880)
    The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still
    available but marked as deprecated
  * Support for Remote Assistance Protocol Version 2 [MS-RA]
  * The DirectFB client was removed because it was unmaintained
  * Unified initialization of OrderSupport
  * Fix for licensing against Windows Server 2003
  * Font smoothing is now enabled per default
  * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215)
  * Unified update-&gt;BeginPaint and update-&gt;EndPaint
  * An image scaling API for software drawing was added
  * Rail was updated to the latest spec version 28.0
  * Support for H.264 in the shadow server is now detected at runtime
  * Add mask=&lt;value&gt; option for /gfx and /gfx-h264  (gh#FreeRDP/FreeRDP#5771)
  * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586779200">- Added cairo support for scaling
- Cleaned up spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1587124800">- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order
  to fix boo#1169748.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1587124801">- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch
  to fix boo#1169679 and make USB working again
- Fixed build for SLE_12
- Cleaned up spec file</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588939200">- Updated to release 2.1.0 (boo#1171441)
  * Fixed CVEs:
  - CVE-2020-11039
  - CVE-2020-11038
  - CVE-2020-11043
  - CVE-2020-11040
  - CVE-2020-11041
  - CVE-2020-11019
  - CVE-2020-11017
  - CVE-2020-11018
  * Fixed leak and crashing issues:
  - gh#FreeRDP/FreeRDP#6129
  - gh#FreeRDP/FreeRDP#6128
  - gh#FreeRDP/FreeRDP#6127
  - gh#FreeRDP/FreeRDP#6110
  - gh#FreeRDP/FreeRDP#6081
  - gh#FreeRDP/FreeRDP#6077
  * Noteworthy features and improvements:
  - Fixed sound issues (gh#FreeRDP/FreeRDP#6043)
  - New expert command line options /tune and /tune-list to modify all client
    settings in a generic way.
  - Fixes for smartcard cache, this improves compatibility of smartcard devices
    with newer smartcard channel.
  - Shadow server can now be instructed to listen to multiple interfaces.
  - Improved server certificate support (gh#FreeRDP/FreeRDP#6052)
  - Various fixes for wayland client (fullscreen, mouse wheel, ...)
  - Fixed large mouse pointer support, now mouse pointers &gt; 96x96 pixel are visible.
  - USB redirection command line improvements (filter options)
  - Various translation improvements for android and ios clients
- Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch
  and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976000">- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205
- Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148
- Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976001">- Updated to release 2.1.1 (boo#1171441)
  * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage
  * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value
  * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common
  * Enforce synchronous legacy RDP encryption count (#6156)
  * Fixed some leaks and crashes missed in 2.1.0
  * Removed dynamic channel listener limits
  * Lots of resource cleanup fixes (clang sanitizers)
  * A couple of performance improvements
  * Various small annoyances eliminated (typos, prefilled username for windows client, ...)
- Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1592827200">- Updated to release 2.1.2 (boo#1173247)
  * CVE-2020-4033 Out of bound read in RLEDECOMPRESS
  * CVE-2020-4031 Use-After-Free in gdi_SelectObject
  * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order`
  * CVE-2020-4030 OOB read in `TrioParse`
  * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet
  * CVE-2020-11098 Out-of-bound read in glyph_cache_put
  * CVE-2020-11097 OOB read in ntlm_av_pair_get
  * CVE-2020-11095 Global OOB read in update_recv_primary_order
  * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order
  * Gateway RPC fixes for windows
  * Fixed resource fee race resulting in double free in USB redirection
  * Fixed wayland client crashes
  * Fixed X11 client mouse mapping issues (X11 mapping on/off)
  * Some proxy related improvements (capture module)
  * Code cleanup (use getlogin_r, ...)
- Removed obsolete upstream patch freerdp-bug-6205.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593691200">- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch
  which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1594987200">- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)
- Cleaned up spec file</changelog>
</package>
<package pkgid="e137d301b896012a1211989b12501ed013dbdd13044575acca45d14c6f7750df" name="freerdp" arch="src">
  <version epoch="0" ver="2.1.2" rel="lp151.5.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1584705600">- Disable LTO on aarch64 and %arm to fix build</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Removed patch freerdp-Fix-realloc-return-handling.patch
- Added pkgconfig(libusb-1.0) for building
- Added new package for freerdp-proxy
- Cleaned up spec file
- Updated to release 2.0.0
  * Fixed CVEs:
  - CVE-2020-11521
  - CVE-2020-11522
  - CVE-2020-11523
  - CVE-2020-11524
  - CVE-2020-11525
  - CVE-2020-11526
  * Fixed security related issues:
  - gh#FreeRDP/FreeRDP#6005
  - gh#FreeRDP/FreeRDP#6006
  - gh#FreeRDP/FreeRDP#6007
  - gh#FreeRDP/FreeRDP#6008
  - gh#FreeRDP/FreeRDP#6009
  - gh#FreeRDP/FreeRDP#6010
  - gh#FreeRDP/FreeRDP#6011
  - gh#FreeRDP/FreeRDP#6012
  - gh#FreeRDP/FreeRDP#6013
  * sha256 is now used instead of sha1 to fingerprint certificates. This will
    invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a
    new connection is established after the update
  * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372)
    thanks to @kubistika
  * Smartcard received some refactoring. Missing functions were added and input
    validation was improved (gh#FreeRDP/FreeRDP#5884)
  * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880)
    The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still
    available but marked as deprecated
  * Support for Remote Assistance Protocol Version 2 [MS-RA]
  * The DirectFB client was removed because it was unmaintained
  * Unified initialization of OrderSupport
  * Fix for licensing against Windows Server 2003
  * Font smoothing is now enabled per default
  * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215)
  * Unified update-&gt;BeginPaint and update-&gt;EndPaint
  * An image scaling API for software drawing was added
  * Rail was updated to the latest spec version 28.0
  * Support for H.264 in the shadow server is now detected at runtime
  * Add mask=&lt;value&gt; option for /gfx and /gfx-h264  (gh#FreeRDP/FreeRDP#5771)
  * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586779200">- Added cairo support for scaling
- Cleaned up spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1587124800">- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order
  to fix boo#1169748.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1587124801">- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch
  to fix boo#1169679 and make USB working again
- Fixed build for SLE_12
- Cleaned up spec file</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588939200">- Updated to release 2.1.0 (boo#1171441)
  * Fixed CVEs:
  - CVE-2020-11039
  - CVE-2020-11038
  - CVE-2020-11043
  - CVE-2020-11040
  - CVE-2020-11041
  - CVE-2020-11019
  - CVE-2020-11017
  - CVE-2020-11018
  * Fixed leak and crashing issues:
  - gh#FreeRDP/FreeRDP#6129
  - gh#FreeRDP/FreeRDP#6128
  - gh#FreeRDP/FreeRDP#6127
  - gh#FreeRDP/FreeRDP#6110
  - gh#FreeRDP/FreeRDP#6081
  - gh#FreeRDP/FreeRDP#6077
  * Noteworthy features and improvements:
  - Fixed sound issues (gh#FreeRDP/FreeRDP#6043)
  - New expert command line options /tune and /tune-list to modify all client
    settings in a generic way.
  - Fixes for smartcard cache, this improves compatibility of smartcard devices
    with newer smartcard channel.
  - Shadow server can now be instructed to listen to multiple interfaces.
  - Improved server certificate support (gh#FreeRDP/FreeRDP#6052)
  - Various fixes for wayland client (fullscreen, mouse wheel, ...)
  - Fixed large mouse pointer support, now mouse pointers &gt; 96x96 pixel are visible.
  - USB redirection command line improvements (filter options)
  - Various translation improvements for android and ios clients
- Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch
  and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976000">- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205
- Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148
- Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976001">- Updated to release 2.1.1 (boo#1171441)
  * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage
  * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value
  * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common
  * Enforce synchronous legacy RDP encryption count (#6156)
  * Fixed some leaks and crashes missed in 2.1.0
  * Removed dynamic channel listener limits
  * Lots of resource cleanup fixes (clang sanitizers)
  * A couple of performance improvements
  * Various small annoyances eliminated (typos, prefilled username for windows client, ...)
- Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1592827200">- Updated to release 2.1.2 (boo#1173247)
  * CVE-2020-4033 Out of bound read in RLEDECOMPRESS
  * CVE-2020-4031 Use-After-Free in gdi_SelectObject
  * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order`
  * CVE-2020-4030 OOB read in `TrioParse`
  * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet
  * CVE-2020-11098 Out-of-bound read in glyph_cache_put
  * CVE-2020-11097 OOB read in ntlm_av_pair_get
  * CVE-2020-11095 Global OOB read in update_recv_primary_order
  * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order
  * Gateway RPC fixes for windows
  * Fixed resource fee race resulting in double free in USB redirection
  * Fixed wayland client crashes
  * Fixed X11 client mouse mapping issues (X11 mapping on/off)
  * Some proxy related improvements (capture module)
  * Code cleanup (use getlogin_r, ...)
- Removed obsolete upstream patch freerdp-bug-6205.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593691200">- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch
  which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1594987200">- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)
- Cleaned up spec file</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1597060800">- Add freerdp-CVE-2020-15103.patch: Fix integer overflow due to
  missing input sanitation in rdpegfx channel (bsc#1174321,
  gh#FreeRDP/FreeRDP#6381, CVE-2020-15103).</changelog>
</package>
<package pkgid="305b06d9d7af5f7dc9763b183d3a536621e2b132078d27845ecdcb847749cbff" name="freerdp" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp151.5.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1584705600">- Disable LTO on aarch64 and %arm to fix build</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Removed patch freerdp-Fix-realloc-return-handling.patch
- Added pkgconfig(libusb-1.0) for building
- Added new package for freerdp-proxy
- Cleaned up spec file
- Updated to release 2.0.0
  * Fixed CVEs:
  - CVE-2020-11521
  - CVE-2020-11522
  - CVE-2020-11523
  - CVE-2020-11524
  - CVE-2020-11525
  - CVE-2020-11526
  * Fixed security related issues:
  - gh#FreeRDP/FreeRDP#6005
  - gh#FreeRDP/FreeRDP#6006
  - gh#FreeRDP/FreeRDP#6007
  - gh#FreeRDP/FreeRDP#6008
  - gh#FreeRDP/FreeRDP#6009
  - gh#FreeRDP/FreeRDP#6010
  - gh#FreeRDP/FreeRDP#6011
  - gh#FreeRDP/FreeRDP#6012
  - gh#FreeRDP/FreeRDP#6013
  * sha256 is now used instead of sha1 to fingerprint certificates. This will
    invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a
    new connection is established after the update
  * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372)
    thanks to @kubistika
  * Smartcard received some refactoring. Missing functions were added and input
    validation was improved (gh#FreeRDP/FreeRDP#5884)
  * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880)
    The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still
    available but marked as deprecated
  * Support for Remote Assistance Protocol Version 2 [MS-RA]
  * The DirectFB client was removed because it was unmaintained
  * Unified initialization of OrderSupport
  * Fix for licensing against Windows Server 2003
  * Font smoothing is now enabled per default
  * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215)
  * Unified update-&gt;BeginPaint and update-&gt;EndPaint
  * An image scaling API for software drawing was added
  * Rail was updated to the latest spec version 28.0
  * Support for H.264 in the shadow server is now detected at runtime
  * Add mask=&lt;value&gt; option for /gfx and /gfx-h264  (gh#FreeRDP/FreeRDP#5771)
  * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586779200">- Added cairo support for scaling
- Cleaned up spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1587124800">- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order
  to fix boo#1169748.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1587124801">- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch
  to fix boo#1169679 and make USB working again
- Fixed build for SLE_12
- Cleaned up spec file</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588939200">- Updated to release 2.1.0 (boo#1171441)
  * Fixed CVEs:
  - CVE-2020-11039
  - CVE-2020-11038
  - CVE-2020-11043
  - CVE-2020-11040
  - CVE-2020-11041
  - CVE-2020-11019
  - CVE-2020-11017
  - CVE-2020-11018
  * Fixed leak and crashing issues:
  - gh#FreeRDP/FreeRDP#6129
  - gh#FreeRDP/FreeRDP#6128
  - gh#FreeRDP/FreeRDP#6127
  - gh#FreeRDP/FreeRDP#6110
  - gh#FreeRDP/FreeRDP#6081
  - gh#FreeRDP/FreeRDP#6077
  * Noteworthy features and improvements:
  - Fixed sound issues (gh#FreeRDP/FreeRDP#6043)
  - New expert command line options /tune and /tune-list to modify all client
    settings in a generic way.
  - Fixes for smartcard cache, this improves compatibility of smartcard devices
    with newer smartcard channel.
  - Shadow server can now be instructed to listen to multiple interfaces.
  - Improved server certificate support (gh#FreeRDP/FreeRDP#6052)
  - Various fixes for wayland client (fullscreen, mouse wheel, ...)
  - Fixed large mouse pointer support, now mouse pointers &gt; 96x96 pixel are visible.
  - USB redirection command line improvements (filter options)
  - Various translation improvements for android and ios clients
- Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch
  and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976000">- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205
- Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148
- Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976001">- Updated to release 2.1.1 (boo#1171441)
  * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage
  * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value
  * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common
  * Enforce synchronous legacy RDP encryption count (#6156)
  * Fixed some leaks and crashes missed in 2.1.0
  * Removed dynamic channel listener limits
  * Lots of resource cleanup fixes (clang sanitizers)
  * A couple of performance improvements
  * Various small annoyances eliminated (typos, prefilled username for windows client, ...)
- Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1592827200">- Updated to release 2.1.2 (boo#1173247)
  * CVE-2020-4033 Out of bound read in RLEDECOMPRESS
  * CVE-2020-4031 Use-After-Free in gdi_SelectObject
  * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order`
  * CVE-2020-4030 OOB read in `TrioParse`
  * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet
  * CVE-2020-11098 Out-of-bound read in glyph_cache_put
  * CVE-2020-11097 OOB read in ntlm_av_pair_get
  * CVE-2020-11095 Global OOB read in update_recv_primary_order
  * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order
  * Gateway RPC fixes for windows
  * Fixed resource fee race resulting in double free in USB redirection
  * Fixed wayland client crashes
  * Fixed X11 client mouse mapping issues (X11 mapping on/off)
  * Some proxy related improvements (capture module)
  * Code cleanup (use getlogin_r, ...)
- Removed obsolete upstream patch freerdp-bug-6205.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593691200">- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch
  which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1594987200">- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)
- Cleaned up spec file</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1597060800">- Add freerdp-CVE-2020-15103.patch: Fix integer overflow due to
  missing input sanitation in rdpegfx channel (bsc#1174321,
  gh#FreeRDP/FreeRDP#6381, CVE-2020-15103).</changelog>
</package>
<package pkgid="8fa37f0875c3d690a148a4ba34e704435acedda4bb2f72bb9896edf66cb66b72" name="freerdp-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp151.5.3.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
</package>
<package pkgid="dd611f3b42c77f62060f6a75a6bc58ae4d045c1600a297a3fe448e6d9141c2b4" name="freerdp-devel" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp151.5.6.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1584705600">- Disable LTO on aarch64 and %arm to fix build</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Removed patch freerdp-Fix-realloc-return-handling.patch
- Added pkgconfig(libusb-1.0) for building
- Added new package for freerdp-proxy
- Cleaned up spec file
- Updated to release 2.0.0
  * Fixed CVEs:
  - CVE-2020-11521
  - CVE-2020-11522
  - CVE-2020-11523
  - CVE-2020-11524
  - CVE-2020-11525
  - CVE-2020-11526
  * Fixed security related issues:
  - gh#FreeRDP/FreeRDP#6005
  - gh#FreeRDP/FreeRDP#6006
  - gh#FreeRDP/FreeRDP#6007
  - gh#FreeRDP/FreeRDP#6008
  - gh#FreeRDP/FreeRDP#6009
  - gh#FreeRDP/FreeRDP#6010
  - gh#FreeRDP/FreeRDP#6011
  - gh#FreeRDP/FreeRDP#6012
  - gh#FreeRDP/FreeRDP#6013
  * sha256 is now used instead of sha1 to fingerprint certificates. This will
    invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a
    new connection is established after the update
  * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372)
    thanks to @kubistika
  * Smartcard received some refactoring. Missing functions were added and input
    validation was improved (gh#FreeRDP/FreeRDP#5884)
  * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880)
    The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still
    available but marked as deprecated
  * Support for Remote Assistance Protocol Version 2 [MS-RA]
  * The DirectFB client was removed because it was unmaintained
  * Unified initialization of OrderSupport
  * Fix for licensing against Windows Server 2003
  * Font smoothing is now enabled per default
  * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215)
  * Unified update-&gt;BeginPaint and update-&gt;EndPaint
  * An image scaling API for software drawing was added
  * Rail was updated to the latest spec version 28.0
  * Support for H.264 in the shadow server is now detected at runtime
  * Add mask=&lt;value&gt; option for /gfx and /gfx-h264  (gh#FreeRDP/FreeRDP#5771)
  * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586779200">- Added cairo support for scaling
- Cleaned up spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1587124800">- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order
  to fix boo#1169748.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1587124801">- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch
  to fix boo#1169679 and make USB working again
- Fixed build for SLE_12
- Cleaned up spec file</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588939200">- Updated to release 2.1.0 (boo#1171441)
  * Fixed CVEs:
  - CVE-2020-11039
  - CVE-2020-11038
  - CVE-2020-11043
  - CVE-2020-11040
  - CVE-2020-11041
  - CVE-2020-11019
  - CVE-2020-11017
  - CVE-2020-11018
  * Fixed leak and crashing issues:
  - gh#FreeRDP/FreeRDP#6129
  - gh#FreeRDP/FreeRDP#6128
  - gh#FreeRDP/FreeRDP#6127
  - gh#FreeRDP/FreeRDP#6110
  - gh#FreeRDP/FreeRDP#6081
  - gh#FreeRDP/FreeRDP#6077
  * Noteworthy features and improvements:
  - Fixed sound issues (gh#FreeRDP/FreeRDP#6043)
  - New expert command line options /tune and /tune-list to modify all client
    settings in a generic way.
  - Fixes for smartcard cache, this improves compatibility of smartcard devices
    with newer smartcard channel.
  - Shadow server can now be instructed to listen to multiple interfaces.
  - Improved server certificate support (gh#FreeRDP/FreeRDP#6052)
  - Various fixes for wayland client (fullscreen, mouse wheel, ...)
  - Fixed large mouse pointer support, now mouse pointers &gt; 96x96 pixel are visible.
  - USB redirection command line improvements (filter options)
  - Various translation improvements for android and ios clients
- Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch
  and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976000">- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205
- Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148
- Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976001">- Updated to release 2.1.1 (boo#1171441)
  * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage
  * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value
  * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common
  * Enforce synchronous legacy RDP encryption count (#6156)
  * Fixed some leaks and crashes missed in 2.1.0
  * Removed dynamic channel listener limits
  * Lots of resource cleanup fixes (clang sanitizers)
  * A couple of performance improvements
  * Various small annoyances eliminated (typos, prefilled username for windows client, ...)
- Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1592827200">- Updated to release 2.1.2 (boo#1173247)
  * CVE-2020-4033 Out of bound read in RLEDECOMPRESS
  * CVE-2020-4031 Use-After-Free in gdi_SelectObject
  * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order`
  * CVE-2020-4030 OOB read in `TrioParse`
  * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet
  * CVE-2020-11098 Out-of-bound read in glyph_cache_put
  * CVE-2020-11097 OOB read in ntlm_av_pair_get
  * CVE-2020-11095 Global OOB read in update_recv_primary_order
  * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order
  * Gateway RPC fixes for windows
  * Fixed resource fee race resulting in double free in USB redirection
  * Fixed wayland client crashes
  * Fixed X11 client mouse mapping issues (X11 mapping on/off)
  * Some proxy related improvements (capture module)
  * Code cleanup (use getlogin_r, ...)
- Removed obsolete upstream patch freerdp-bug-6205.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593691200">- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch
  which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1594987200">- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)
- Cleaned up spec file</changelog>
</package>
<package pkgid="16e1d2875ac1e559c2cabe21e36af6d6379c0c0834660156a6d90f38427c1bee" name="freerdp-devel" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp151.5.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1584705600">- Disable LTO on aarch64 and %arm to fix build</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Removed patch freerdp-Fix-realloc-return-handling.patch
- Added pkgconfig(libusb-1.0) for building
- Added new package for freerdp-proxy
- Cleaned up spec file
- Updated to release 2.0.0
  * Fixed CVEs:
  - CVE-2020-11521
  - CVE-2020-11522
  - CVE-2020-11523
  - CVE-2020-11524
  - CVE-2020-11525
  - CVE-2020-11526
  * Fixed security related issues:
  - gh#FreeRDP/FreeRDP#6005
  - gh#FreeRDP/FreeRDP#6006
  - gh#FreeRDP/FreeRDP#6007
  - gh#FreeRDP/FreeRDP#6008
  - gh#FreeRDP/FreeRDP#6009
  - gh#FreeRDP/FreeRDP#6010
  - gh#FreeRDP/FreeRDP#6011
  - gh#FreeRDP/FreeRDP#6012
  - gh#FreeRDP/FreeRDP#6013
  * sha256 is now used instead of sha1 to fingerprint certificates. This will
    invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a
    new connection is established after the update
  * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372)
    thanks to @kubistika
  * Smartcard received some refactoring. Missing functions were added and input
    validation was improved (gh#FreeRDP/FreeRDP#5884)
  * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880)
    The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still
    available but marked as deprecated
  * Support for Remote Assistance Protocol Version 2 [MS-RA]
  * The DirectFB client was removed because it was unmaintained
  * Unified initialization of OrderSupport
  * Fix for licensing against Windows Server 2003
  * Font smoothing is now enabled per default
  * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215)
  * Unified update-&gt;BeginPaint and update-&gt;EndPaint
  * An image scaling API for software drawing was added
  * Rail was updated to the latest spec version 28.0
  * Support for H.264 in the shadow server is now detected at runtime
  * Add mask=&lt;value&gt; option for /gfx and /gfx-h264  (gh#FreeRDP/FreeRDP#5771)
  * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586779200">- Added cairo support for scaling
- Cleaned up spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1587124800">- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order
  to fix boo#1169748.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1587124801">- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch
  to fix boo#1169679 and make USB working again
- Fixed build for SLE_12
- Cleaned up spec file</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588939200">- Updated to release 2.1.0 (boo#1171441)
  * Fixed CVEs:
  - CVE-2020-11039
  - CVE-2020-11038
  - CVE-2020-11043
  - CVE-2020-11040
  - CVE-2020-11041
  - CVE-2020-11019
  - CVE-2020-11017
  - CVE-2020-11018
  * Fixed leak and crashing issues:
  - gh#FreeRDP/FreeRDP#6129
  - gh#FreeRDP/FreeRDP#6128
  - gh#FreeRDP/FreeRDP#6127
  - gh#FreeRDP/FreeRDP#6110
  - gh#FreeRDP/FreeRDP#6081
  - gh#FreeRDP/FreeRDP#6077
  * Noteworthy features and improvements:
  - Fixed sound issues (gh#FreeRDP/FreeRDP#6043)
  - New expert command line options /tune and /tune-list to modify all client
    settings in a generic way.
  - Fixes for smartcard cache, this improves compatibility of smartcard devices
    with newer smartcard channel.
  - Shadow server can now be instructed to listen to multiple interfaces.
  - Improved server certificate support (gh#FreeRDP/FreeRDP#6052)
  - Various fixes for wayland client (fullscreen, mouse wheel, ...)
  - Fixed large mouse pointer support, now mouse pointers &gt; 96x96 pixel are visible.
  - USB redirection command line improvements (filter options)
  - Various translation improvements for android and ios clients
- Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch
  and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976000">- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205
- Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148
- Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976001">- Updated to release 2.1.1 (boo#1171441)
  * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage
  * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value
  * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common
  * Enforce synchronous legacy RDP encryption count (#6156)
  * Fixed some leaks and crashes missed in 2.1.0
  * Removed dynamic channel listener limits
  * Lots of resource cleanup fixes (clang sanitizers)
  * A couple of performance improvements
  * Various small annoyances eliminated (typos, prefilled username for windows client, ...)
- Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1592827200">- Updated to release 2.1.2 (boo#1173247)
  * CVE-2020-4033 Out of bound read in RLEDECOMPRESS
  * CVE-2020-4031 Use-After-Free in gdi_SelectObject
  * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order`
  * CVE-2020-4030 OOB read in `TrioParse`
  * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet
  * CVE-2020-11098 Out-of-bound read in glyph_cache_put
  * CVE-2020-11097 OOB read in ntlm_av_pair_get
  * CVE-2020-11095 Global OOB read in update_recv_primary_order
  * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order
  * Gateway RPC fixes for windows
  * Fixed resource fee race resulting in double free in USB redirection
  * Fixed wayland client crashes
  * Fixed X11 client mouse mapping issues (X11 mapping on/off)
  * Some proxy related improvements (capture module)
  * Code cleanup (use getlogin_r, ...)
- Removed obsolete upstream patch freerdp-bug-6205.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593691200">- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch
  which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1594987200">- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)
- Cleaned up spec file</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1597060800">- Add freerdp-CVE-2020-15103.patch: Fix integer overflow due to
  missing input sanitation in rdpegfx channel (bsc#1174321,
  gh#FreeRDP/FreeRDP#6381, CVE-2020-15103).</changelog>
</package>
<package pkgid="8f698aff5223dbb3bb0c2018d46c0c5e038bc4a149e2173ca1ba7e505cbea533" name="freerdp-proxy" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp151.5.6.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1584705600">- Disable LTO on aarch64 and %arm to fix build</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Removed patch freerdp-Fix-realloc-return-handling.patch
- Added pkgconfig(libusb-1.0) for building
- Added new package for freerdp-proxy
- Cleaned up spec file
- Updated to release 2.0.0
  * Fixed CVEs:
  - CVE-2020-11521
  - CVE-2020-11522
  - CVE-2020-11523
  - CVE-2020-11524
  - CVE-2020-11525
  - CVE-2020-11526
  * Fixed security related issues:
  - gh#FreeRDP/FreeRDP#6005
  - gh#FreeRDP/FreeRDP#6006
  - gh#FreeRDP/FreeRDP#6007
  - gh#FreeRDP/FreeRDP#6008
  - gh#FreeRDP/FreeRDP#6009
  - gh#FreeRDP/FreeRDP#6010
  - gh#FreeRDP/FreeRDP#6011
  - gh#FreeRDP/FreeRDP#6012
  - gh#FreeRDP/FreeRDP#6013
  * sha256 is now used instead of sha1 to fingerprint certificates. This will
    invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a
    new connection is established after the update
  * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372)
    thanks to @kubistika
  * Smartcard received some refactoring. Missing functions were added and input
    validation was improved (gh#FreeRDP/FreeRDP#5884)
  * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880)
    The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still
    available but marked as deprecated
  * Support for Remote Assistance Protocol Version 2 [MS-RA]
  * The DirectFB client was removed because it was unmaintained
  * Unified initialization of OrderSupport
  * Fix for licensing against Windows Server 2003
  * Font smoothing is now enabled per default
  * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215)
  * Unified update-&gt;BeginPaint and update-&gt;EndPaint
  * An image scaling API for software drawing was added
  * Rail was updated to the latest spec version 28.0
  * Support for H.264 in the shadow server is now detected at runtime
  * Add mask=&lt;value&gt; option for /gfx and /gfx-h264  (gh#FreeRDP/FreeRDP#5771)
  * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586779200">- Added cairo support for scaling
- Cleaned up spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1587124800">- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order
  to fix boo#1169748.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1587124801">- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch
  to fix boo#1169679 and make USB working again
- Fixed build for SLE_12
- Cleaned up spec file</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588939200">- Updated to release 2.1.0 (boo#1171441)
  * Fixed CVEs:
  - CVE-2020-11039
  - CVE-2020-11038
  - CVE-2020-11043
  - CVE-2020-11040
  - CVE-2020-11041
  - CVE-2020-11019
  - CVE-2020-11017
  - CVE-2020-11018
  * Fixed leak and crashing issues:
  - gh#FreeRDP/FreeRDP#6129
  - gh#FreeRDP/FreeRDP#6128
  - gh#FreeRDP/FreeRDP#6127
  - gh#FreeRDP/FreeRDP#6110
  - gh#FreeRDP/FreeRDP#6081
  - gh#FreeRDP/FreeRDP#6077
  * Noteworthy features and improvements:
  - Fixed sound issues (gh#FreeRDP/FreeRDP#6043)
  - New expert command line options /tune and /tune-list to modify all client
    settings in a generic way.
  - Fixes for smartcard cache, this improves compatibility of smartcard devices
    with newer smartcard channel.
  - Shadow server can now be instructed to listen to multiple interfaces.
  - Improved server certificate support (gh#FreeRDP/FreeRDP#6052)
  - Various fixes for wayland client (fullscreen, mouse wheel, ...)
  - Fixed large mouse pointer support, now mouse pointers &gt; 96x96 pixel are visible.
  - USB redirection command line improvements (filter options)
  - Various translation improvements for android and ios clients
- Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch
  and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976000">- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205
- Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148
- Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976001">- Updated to release 2.1.1 (boo#1171441)
  * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage
  * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value
  * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common
  * Enforce synchronous legacy RDP encryption count (#6156)
  * Fixed some leaks and crashes missed in 2.1.0
  * Removed dynamic channel listener limits
  * Lots of resource cleanup fixes (clang sanitizers)
  * A couple of performance improvements
  * Various small annoyances eliminated (typos, prefilled username for windows client, ...)
- Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1592827200">- Updated to release 2.1.2 (boo#1173247)
  * CVE-2020-4033 Out of bound read in RLEDECOMPRESS
  * CVE-2020-4031 Use-After-Free in gdi_SelectObject
  * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order`
  * CVE-2020-4030 OOB read in `TrioParse`
  * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet
  * CVE-2020-11098 Out-of-bound read in glyph_cache_put
  * CVE-2020-11097 OOB read in ntlm_av_pair_get
  * CVE-2020-11095 Global OOB read in update_recv_primary_order
  * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order
  * Gateway RPC fixes for windows
  * Fixed resource fee race resulting in double free in USB redirection
  * Fixed wayland client crashes
  * Fixed X11 client mouse mapping issues (X11 mapping on/off)
  * Some proxy related improvements (capture module)
  * Code cleanup (use getlogin_r, ...)
- Removed obsolete upstream patch freerdp-bug-6205.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593691200">- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch
  which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1594987200">- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)
- Cleaned up spec file</changelog>
</package>
<package pkgid="995e8f7c9aa57c7351e041e0625fdb04d0c4029e6ede49afd2524983b99c9fbd" name="freerdp-proxy" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp151.5.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1584705600">- Disable LTO on aarch64 and %arm to fix build</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Removed patch freerdp-Fix-realloc-return-handling.patch
- Added pkgconfig(libusb-1.0) for building
- Added new package for freerdp-proxy
- Cleaned up spec file
- Updated to release 2.0.0
  * Fixed CVEs:
  - CVE-2020-11521
  - CVE-2020-11522
  - CVE-2020-11523
  - CVE-2020-11524
  - CVE-2020-11525
  - CVE-2020-11526
  * Fixed security related issues:
  - gh#FreeRDP/FreeRDP#6005
  - gh#FreeRDP/FreeRDP#6006
  - gh#FreeRDP/FreeRDP#6007
  - gh#FreeRDP/FreeRDP#6008
  - gh#FreeRDP/FreeRDP#6009
  - gh#FreeRDP/FreeRDP#6010
  - gh#FreeRDP/FreeRDP#6011
  - gh#FreeRDP/FreeRDP#6012
  - gh#FreeRDP/FreeRDP#6013
  * sha256 is now used instead of sha1 to fingerprint certificates. This will
    invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a
    new connection is established after the update
  * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372)
    thanks to @kubistika
  * Smartcard received some refactoring. Missing functions were added and input
    validation was improved (gh#FreeRDP/FreeRDP#5884)
  * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880)
    The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still
    available but marked as deprecated
  * Support for Remote Assistance Protocol Version 2 [MS-RA]
  * The DirectFB client was removed because it was unmaintained
  * Unified initialization of OrderSupport
  * Fix for licensing against Windows Server 2003
  * Font smoothing is now enabled per default
  * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215)
  * Unified update-&gt;BeginPaint and update-&gt;EndPaint
  * An image scaling API for software drawing was added
  * Rail was updated to the latest spec version 28.0
  * Support for H.264 in the shadow server is now detected at runtime
  * Add mask=&lt;value&gt; option for /gfx and /gfx-h264  (gh#FreeRDP/FreeRDP#5771)
  * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586779200">- Added cairo support for scaling
- Cleaned up spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1587124800">- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order
  to fix boo#1169748.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1587124801">- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch
  to fix boo#1169679 and make USB working again
- Fixed build for SLE_12
- Cleaned up spec file</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588939200">- Updated to release 2.1.0 (boo#1171441)
  * Fixed CVEs:
  - CVE-2020-11039
  - CVE-2020-11038
  - CVE-2020-11043
  - CVE-2020-11040
  - CVE-2020-11041
  - CVE-2020-11019
  - CVE-2020-11017
  - CVE-2020-11018
  * Fixed leak and crashing issues:
  - gh#FreeRDP/FreeRDP#6129
  - gh#FreeRDP/FreeRDP#6128
  - gh#FreeRDP/FreeRDP#6127
  - gh#FreeRDP/FreeRDP#6110
  - gh#FreeRDP/FreeRDP#6081
  - gh#FreeRDP/FreeRDP#6077
  * Noteworthy features and improvements:
  - Fixed sound issues (gh#FreeRDP/FreeRDP#6043)
  - New expert command line options /tune and /tune-list to modify all client
    settings in a generic way.
  - Fixes for smartcard cache, this improves compatibility of smartcard devices
    with newer smartcard channel.
  - Shadow server can now be instructed to listen to multiple interfaces.
  - Improved server certificate support (gh#FreeRDP/FreeRDP#6052)
  - Various fixes for wayland client (fullscreen, mouse wheel, ...)
  - Fixed large mouse pointer support, now mouse pointers &gt; 96x96 pixel are visible.
  - USB redirection command line improvements (filter options)
  - Various translation improvements for android and ios clients
- Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch
  and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976000">- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205
- Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148
- Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976001">- Updated to release 2.1.1 (boo#1171441)
  * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage
  * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value
  * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common
  * Enforce synchronous legacy RDP encryption count (#6156)
  * Fixed some leaks and crashes missed in 2.1.0
  * Removed dynamic channel listener limits
  * Lots of resource cleanup fixes (clang sanitizers)
  * A couple of performance improvements
  * Various small annoyances eliminated (typos, prefilled username for windows client, ...)
- Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1592827200">- Updated to release 2.1.2 (boo#1173247)
  * CVE-2020-4033 Out of bound read in RLEDECOMPRESS
  * CVE-2020-4031 Use-After-Free in gdi_SelectObject
  * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order`
  * CVE-2020-4030 OOB read in `TrioParse`
  * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet
  * CVE-2020-11098 Out-of-bound read in glyph_cache_put
  * CVE-2020-11097 OOB read in ntlm_av_pair_get
  * CVE-2020-11095 Global OOB read in update_recv_primary_order
  * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order
  * Gateway RPC fixes for windows
  * Fixed resource fee race resulting in double free in USB redirection
  * Fixed wayland client crashes
  * Fixed X11 client mouse mapping issues (X11 mapping on/off)
  * Some proxy related improvements (capture module)
  * Code cleanup (use getlogin_r, ...)
- Removed obsolete upstream patch freerdp-bug-6205.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593691200">- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch
  which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1594987200">- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)
- Cleaned up spec file</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1597060800">- Add freerdp-CVE-2020-15103.patch: Fix integer overflow due to
  missing input sanitation in rdpegfx channel (bsc#1174321,
  gh#FreeRDP/FreeRDP#6381, CVE-2020-15103).</changelog>
</package>
<package pkgid="835f3cfa9b5ab15075105b3fdb537e838074f0bc0e50bdbe880b2a642cd48f92" name="freerdp-server" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp151.5.3.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
</package>
<package pkgid="672ff59a0b72036382016764727873e386ecca502da80b4bae3e64c4fb3fa2db" name="freerdp-server" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp151.5.6.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1584705600">- Disable LTO on aarch64 and %arm to fix build</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Removed patch freerdp-Fix-realloc-return-handling.patch
- Added pkgconfig(libusb-1.0) for building
- Added new package for freerdp-proxy
- Cleaned up spec file
- Updated to release 2.0.0
  * Fixed CVEs:
  - CVE-2020-11521
  - CVE-2020-11522
  - CVE-2020-11523
  - CVE-2020-11524
  - CVE-2020-11525
  - CVE-2020-11526
  * Fixed security related issues:
  - gh#FreeRDP/FreeRDP#6005
  - gh#FreeRDP/FreeRDP#6006
  - gh#FreeRDP/FreeRDP#6007
  - gh#FreeRDP/FreeRDP#6008
  - gh#FreeRDP/FreeRDP#6009
  - gh#FreeRDP/FreeRDP#6010
  - gh#FreeRDP/FreeRDP#6011
  - gh#FreeRDP/FreeRDP#6012
  - gh#FreeRDP/FreeRDP#6013
  * sha256 is now used instead of sha1 to fingerprint certificates. This will
    invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a
    new connection is established after the update
  * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372)
    thanks to @kubistika
  * Smartcard received some refactoring. Missing functions were added and input
    validation was improved (gh#FreeRDP/FreeRDP#5884)
  * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880)
    The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still
    available but marked as deprecated
  * Support for Remote Assistance Protocol Version 2 [MS-RA]
  * The DirectFB client was removed because it was unmaintained
  * Unified initialization of OrderSupport
  * Fix for licensing against Windows Server 2003
  * Font smoothing is now enabled per default
  * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215)
  * Unified update-&gt;BeginPaint and update-&gt;EndPaint
  * An image scaling API for software drawing was added
  * Rail was updated to the latest spec version 28.0
  * Support for H.264 in the shadow server is now detected at runtime
  * Add mask=&lt;value&gt; option for /gfx and /gfx-h264  (gh#FreeRDP/FreeRDP#5771)
  * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586779200">- Added cairo support for scaling
- Cleaned up spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1587124800">- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order
  to fix boo#1169748.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1587124801">- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch
  to fix boo#1169679 and make USB working again
- Fixed build for SLE_12
- Cleaned up spec file</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588939200">- Updated to release 2.1.0 (boo#1171441)
  * Fixed CVEs:
  - CVE-2020-11039
  - CVE-2020-11038
  - CVE-2020-11043
  - CVE-2020-11040
  - CVE-2020-11041
  - CVE-2020-11019
  - CVE-2020-11017
  - CVE-2020-11018
  * Fixed leak and crashing issues:
  - gh#FreeRDP/FreeRDP#6129
  - gh#FreeRDP/FreeRDP#6128
  - gh#FreeRDP/FreeRDP#6127
  - gh#FreeRDP/FreeRDP#6110
  - gh#FreeRDP/FreeRDP#6081
  - gh#FreeRDP/FreeRDP#6077
  * Noteworthy features and improvements:
  - Fixed sound issues (gh#FreeRDP/FreeRDP#6043)
  - New expert command line options /tune and /tune-list to modify all client
    settings in a generic way.
  - Fixes for smartcard cache, this improves compatibility of smartcard devices
    with newer smartcard channel.
  - Shadow server can now be instructed to listen to multiple interfaces.
  - Improved server certificate support (gh#FreeRDP/FreeRDP#6052)
  - Various fixes for wayland client (fullscreen, mouse wheel, ...)
  - Fixed large mouse pointer support, now mouse pointers &gt; 96x96 pixel are visible.
  - USB redirection command line improvements (filter options)
  - Various translation improvements for android and ios clients
- Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch
  and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976000">- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205
- Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148
- Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976001">- Updated to release 2.1.1 (boo#1171441)
  * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage
  * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value
  * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common
  * Enforce synchronous legacy RDP encryption count (#6156)
  * Fixed some leaks and crashes missed in 2.1.0
  * Removed dynamic channel listener limits
  * Lots of resource cleanup fixes (clang sanitizers)
  * A couple of performance improvements
  * Various small annoyances eliminated (typos, prefilled username for windows client, ...)
- Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1592827200">- Updated to release 2.1.2 (boo#1173247)
  * CVE-2020-4033 Out of bound read in RLEDECOMPRESS
  * CVE-2020-4031 Use-After-Free in gdi_SelectObject
  * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order`
  * CVE-2020-4030 OOB read in `TrioParse`
  * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet
  * CVE-2020-11098 Out-of-bound read in glyph_cache_put
  * CVE-2020-11097 OOB read in ntlm_av_pair_get
  * CVE-2020-11095 Global OOB read in update_recv_primary_order
  * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order
  * Gateway RPC fixes for windows
  * Fixed resource fee race resulting in double free in USB redirection
  * Fixed wayland client crashes
  * Fixed X11 client mouse mapping issues (X11 mapping on/off)
  * Some proxy related improvements (capture module)
  * Code cleanup (use getlogin_r, ...)
- Removed obsolete upstream patch freerdp-bug-6205.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593691200">- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch
  which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1594987200">- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)
- Cleaned up spec file</changelog>
</package>
<package pkgid="e592a61d89b96a8b28ad95dfad5c8909b2ce80a3546cad45144a3b12063ccdbf" name="freerdp-server" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp151.5.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1584705600">- Disable LTO on aarch64 and %arm to fix build</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Removed patch freerdp-Fix-realloc-return-handling.patch
- Added pkgconfig(libusb-1.0) for building
- Added new package for freerdp-proxy
- Cleaned up spec file
- Updated to release 2.0.0
  * Fixed CVEs:
  - CVE-2020-11521
  - CVE-2020-11522
  - CVE-2020-11523
  - CVE-2020-11524
  - CVE-2020-11525
  - CVE-2020-11526
  * Fixed security related issues:
  - gh#FreeRDP/FreeRDP#6005
  - gh#FreeRDP/FreeRDP#6006
  - gh#FreeRDP/FreeRDP#6007
  - gh#FreeRDP/FreeRDP#6008
  - gh#FreeRDP/FreeRDP#6009
  - gh#FreeRDP/FreeRDP#6010
  - gh#FreeRDP/FreeRDP#6011
  - gh#FreeRDP/FreeRDP#6012
  - gh#FreeRDP/FreeRDP#6013
  * sha256 is now used instead of sha1 to fingerprint certificates. This will
    invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a
    new connection is established after the update
  * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372)
    thanks to @kubistika
  * Smartcard received some refactoring. Missing functions were added and input
    validation was improved (gh#FreeRDP/FreeRDP#5884)
  * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880)
    The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still
    available but marked as deprecated
  * Support for Remote Assistance Protocol Version 2 [MS-RA]
  * The DirectFB client was removed because it was unmaintained
  * Unified initialization of OrderSupport
  * Fix for licensing against Windows Server 2003
  * Font smoothing is now enabled per default
  * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215)
  * Unified update-&gt;BeginPaint and update-&gt;EndPaint
  * An image scaling API for software drawing was added
  * Rail was updated to the latest spec version 28.0
  * Support for H.264 in the shadow server is now detected at runtime
  * Add mask=&lt;value&gt; option for /gfx and /gfx-h264  (gh#FreeRDP/FreeRDP#5771)
  * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586779200">- Added cairo support for scaling
- Cleaned up spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1587124800">- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order
  to fix boo#1169748.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1587124801">- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch
  to fix boo#1169679 and make USB working again
- Fixed build for SLE_12
- Cleaned up spec file</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588939200">- Updated to release 2.1.0 (boo#1171441)
  * Fixed CVEs:
  - CVE-2020-11039
  - CVE-2020-11038
  - CVE-2020-11043
  - CVE-2020-11040
  - CVE-2020-11041
  - CVE-2020-11019
  - CVE-2020-11017
  - CVE-2020-11018
  * Fixed leak and crashing issues:
  - gh#FreeRDP/FreeRDP#6129
  - gh#FreeRDP/FreeRDP#6128
  - gh#FreeRDP/FreeRDP#6127
  - gh#FreeRDP/FreeRDP#6110
  - gh#FreeRDP/FreeRDP#6081
  - gh#FreeRDP/FreeRDP#6077
  * Noteworthy features and improvements:
  - Fixed sound issues (gh#FreeRDP/FreeRDP#6043)
  - New expert command line options /tune and /tune-list to modify all client
    settings in a generic way.
  - Fixes for smartcard cache, this improves compatibility of smartcard devices
    with newer smartcard channel.
  - Shadow server can now be instructed to listen to multiple interfaces.
  - Improved server certificate support (gh#FreeRDP/FreeRDP#6052)
  - Various fixes for wayland client (fullscreen, mouse wheel, ...)
  - Fixed large mouse pointer support, now mouse pointers &gt; 96x96 pixel are visible.
  - USB redirection command line improvements (filter options)
  - Various translation improvements for android and ios clients
- Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch
  and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976000">- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205
- Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148
- Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976001">- Updated to release 2.1.1 (boo#1171441)
  * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage
  * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value
  * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common
  * Enforce synchronous legacy RDP encryption count (#6156)
  * Fixed some leaks and crashes missed in 2.1.0
  * Removed dynamic channel listener limits
  * Lots of resource cleanup fixes (clang sanitizers)
  * A couple of performance improvements
  * Various small annoyances eliminated (typos, prefilled username for windows client, ...)
- Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1592827200">- Updated to release 2.1.2 (boo#1173247)
  * CVE-2020-4033 Out of bound read in RLEDECOMPRESS
  * CVE-2020-4031 Use-After-Free in gdi_SelectObject
  * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order`
  * CVE-2020-4030 OOB read in `TrioParse`
  * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet
  * CVE-2020-11098 Out-of-bound read in glyph_cache_put
  * CVE-2020-11097 OOB read in ntlm_av_pair_get
  * CVE-2020-11095 Global OOB read in update_recv_primary_order
  * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order
  * Gateway RPC fixes for windows
  * Fixed resource fee race resulting in double free in USB redirection
  * Fixed wayland client crashes
  * Fixed X11 client mouse mapping issues (X11 mapping on/off)
  * Some proxy related improvements (capture module)
  * Code cleanup (use getlogin_r, ...)
- Removed obsolete upstream patch freerdp-bug-6205.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593691200">- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch
  which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1594987200">- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)
- Cleaned up spec file</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1597060800">- Add freerdp-CVE-2020-15103.patch: Fix integer overflow due to
  missing input sanitation in rdpegfx channel (bsc#1174321,
  gh#FreeRDP/FreeRDP#6381, CVE-2020-15103).</changelog>
</package>
<package pkgid="395f4c99da2285a76c23348045518467b8fe848eb35c5bd04fd5d763b30b78b9" name="freerdp-wayland" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp151.5.3.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
</package>
<package pkgid="aaa32fa197dd61bd66a3e04f39e5dac734394219756c31b0a29a8b072cc9e0f4" name="freerdp-wayland" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp151.5.6.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1584705600">- Disable LTO on aarch64 and %arm to fix build</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Removed patch freerdp-Fix-realloc-return-handling.patch
- Added pkgconfig(libusb-1.0) for building
- Added new package for freerdp-proxy
- Cleaned up spec file
- Updated to release 2.0.0
  * Fixed CVEs:
  - CVE-2020-11521
  - CVE-2020-11522
  - CVE-2020-11523
  - CVE-2020-11524
  - CVE-2020-11525
  - CVE-2020-11526
  * Fixed security related issues:
  - gh#FreeRDP/FreeRDP#6005
  - gh#FreeRDP/FreeRDP#6006
  - gh#FreeRDP/FreeRDP#6007
  - gh#FreeRDP/FreeRDP#6008
  - gh#FreeRDP/FreeRDP#6009
  - gh#FreeRDP/FreeRDP#6010
  - gh#FreeRDP/FreeRDP#6011
  - gh#FreeRDP/FreeRDP#6012
  - gh#FreeRDP/FreeRDP#6013
  * sha256 is now used instead of sha1 to fingerprint certificates. This will
    invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a
    new connection is established after the update
  * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372)
    thanks to @kubistika
  * Smartcard received some refactoring. Missing functions were added and input
    validation was improved (gh#FreeRDP/FreeRDP#5884)
  * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880)
    The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still
    available but marked as deprecated
  * Support for Remote Assistance Protocol Version 2 [MS-RA]
  * The DirectFB client was removed because it was unmaintained
  * Unified initialization of OrderSupport
  * Fix for licensing against Windows Server 2003
  * Font smoothing is now enabled per default
  * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215)
  * Unified update-&gt;BeginPaint and update-&gt;EndPaint
  * An image scaling API for software drawing was added
  * Rail was updated to the latest spec version 28.0
  * Support for H.264 in the shadow server is now detected at runtime
  * Add mask=&lt;value&gt; option for /gfx and /gfx-h264  (gh#FreeRDP/FreeRDP#5771)
  * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586779200">- Added cairo support for scaling
- Cleaned up spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1587124800">- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order
  to fix boo#1169748.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1587124801">- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch
  to fix boo#1169679 and make USB working again
- Fixed build for SLE_12
- Cleaned up spec file</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588939200">- Updated to release 2.1.0 (boo#1171441)
  * Fixed CVEs:
  - CVE-2020-11039
  - CVE-2020-11038
  - CVE-2020-11043
  - CVE-2020-11040
  - CVE-2020-11041
  - CVE-2020-11019
  - CVE-2020-11017
  - CVE-2020-11018
  * Fixed leak and crashing issues:
  - gh#FreeRDP/FreeRDP#6129
  - gh#FreeRDP/FreeRDP#6128
  - gh#FreeRDP/FreeRDP#6127
  - gh#FreeRDP/FreeRDP#6110
  - gh#FreeRDP/FreeRDP#6081
  - gh#FreeRDP/FreeRDP#6077
  * Noteworthy features and improvements:
  - Fixed sound issues (gh#FreeRDP/FreeRDP#6043)
  - New expert command line options /tune and /tune-list to modify all client
    settings in a generic way.
  - Fixes for smartcard cache, this improves compatibility of smartcard devices
    with newer smartcard channel.
  - Shadow server can now be instructed to listen to multiple interfaces.
  - Improved server certificate support (gh#FreeRDP/FreeRDP#6052)
  - Various fixes for wayland client (fullscreen, mouse wheel, ...)
  - Fixed large mouse pointer support, now mouse pointers &gt; 96x96 pixel are visible.
  - USB redirection command line improvements (filter options)
  - Various translation improvements for android and ios clients
- Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch
  and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976000">- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205
- Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148
- Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976001">- Updated to release 2.1.1 (boo#1171441)
  * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage
  * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value
  * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common
  * Enforce synchronous legacy RDP encryption count (#6156)
  * Fixed some leaks and crashes missed in 2.1.0
  * Removed dynamic channel listener limits
  * Lots of resource cleanup fixes (clang sanitizers)
  * A couple of performance improvements
  * Various small annoyances eliminated (typos, prefilled username for windows client, ...)
- Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1592827200">- Updated to release 2.1.2 (boo#1173247)
  * CVE-2020-4033 Out of bound read in RLEDECOMPRESS
  * CVE-2020-4031 Use-After-Free in gdi_SelectObject
  * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order`
  * CVE-2020-4030 OOB read in `TrioParse`
  * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet
  * CVE-2020-11098 Out-of-bound read in glyph_cache_put
  * CVE-2020-11097 OOB read in ntlm_av_pair_get
  * CVE-2020-11095 Global OOB read in update_recv_primary_order
  * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order
  * Gateway RPC fixes for windows
  * Fixed resource fee race resulting in double free in USB redirection
  * Fixed wayland client crashes
  * Fixed X11 client mouse mapping issues (X11 mapping on/off)
  * Some proxy related improvements (capture module)
  * Code cleanup (use getlogin_r, ...)
- Removed obsolete upstream patch freerdp-bug-6205.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593691200">- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch
  which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1594987200">- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)
- Cleaned up spec file</changelog>
</package>
<package pkgid="73e0ecf39dc6011651e8ac5312680230e1f68b145fc8e4b2f89222882eb39de0" name="freerdp-wayland" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp151.5.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1584705600">- Disable LTO on aarch64 and %arm to fix build</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Removed patch freerdp-Fix-realloc-return-handling.patch
- Added pkgconfig(libusb-1.0) for building
- Added new package for freerdp-proxy
- Cleaned up spec file
- Updated to release 2.0.0
  * Fixed CVEs:
  - CVE-2020-11521
  - CVE-2020-11522
  - CVE-2020-11523
  - CVE-2020-11524
  - CVE-2020-11525
  - CVE-2020-11526
  * Fixed security related issues:
  - gh#FreeRDP/FreeRDP#6005
  - gh#FreeRDP/FreeRDP#6006
  - gh#FreeRDP/FreeRDP#6007
  - gh#FreeRDP/FreeRDP#6008
  - gh#FreeRDP/FreeRDP#6009
  - gh#FreeRDP/FreeRDP#6010
  - gh#FreeRDP/FreeRDP#6011
  - gh#FreeRDP/FreeRDP#6012
  - gh#FreeRDP/FreeRDP#6013
  * sha256 is now used instead of sha1 to fingerprint certificates. This will
    invalidate all hosts in FreeRDP known_hosts2 file and causes a prompt if a
    new connection is established after the update
  * First version of the RDP proxy was added (gh#FreeRDP/FreeRDP#5372)
    thanks to @kubistika
  * Smartcard received some refactoring. Missing functions were added and input
    validation was improved (gh#FreeRDP/FreeRDP#5884)
  * A new option /cert that unifies all certificate related options (gh#FreeRDP/FreeRDP#5880)
    The old options (cert-ignore, cert-deny, cert-name, cert-tofu) are still
    available but marked as deprecated
  * Support for Remote Assistance Protocol Version 2 [MS-RA]
  * The DirectFB client was removed because it was unmaintained
  * Unified initialization of OrderSupport
  * Fix for licensing against Windows Server 2003
  * Font smoothing is now enabled per default
  * Smart scaling for Wayland using libcairo was added (gh#FreeRDP/FreeRDP#5215)
  * Unified update-&gt;BeginPaint and update-&gt;EndPaint
  * An image scaling API for software drawing was added
  * Rail was updated to the latest spec version 28.0
  * Support for H.264 in the shadow server is now detected at runtime
  * Add mask=&lt;value&gt; option for /gfx and /gfx-h264  (gh#FreeRDP/FreeRDP#5771)
  * A new option /timeout was added to adjust the TCP ACK timeout (gh#FreeRDP/FreeRDP#5987)</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586779200">- Added cairo support for scaling
- Cleaned up spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1587124800">- Add fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch in order
  to fix boo#1169748.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1587124801">- Updated and reviewed make command and added fix-freerdp-2.0.0-usbdk-build.patch
  to fix boo#1169679 and make USB working again
- Fixed build for SLE_12
- Cleaned up spec file</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588939200">- Updated to release 2.1.0 (boo#1171441)
  * Fixed CVEs:
  - CVE-2020-11039
  - CVE-2020-11038
  - CVE-2020-11043
  - CVE-2020-11040
  - CVE-2020-11041
  - CVE-2020-11019
  - CVE-2020-11017
  - CVE-2020-11018
  * Fixed leak and crashing issues:
  - gh#FreeRDP/FreeRDP#6129
  - gh#FreeRDP/FreeRDP#6128
  - gh#FreeRDP/FreeRDP#6127
  - gh#FreeRDP/FreeRDP#6110
  - gh#FreeRDP/FreeRDP#6081
  - gh#FreeRDP/FreeRDP#6077
  * Noteworthy features and improvements:
  - Fixed sound issues (gh#FreeRDP/FreeRDP#6043)
  - New expert command line options /tune and /tune-list to modify all client
    settings in a generic way.
  - Fixes for smartcard cache, this improves compatibility of smartcard devices
    with newer smartcard channel.
  - Shadow server can now be instructed to listen to multiple interfaces.
  - Improved server certificate support (gh#FreeRDP/FreeRDP#6052)
  - Various fixes for wayland client (fullscreen, mouse wheel, ...)
  - Fixed large mouse pointer support, now mouse pointers &gt; 96x96 pixel are visible.
  - USB redirection command line improvements (filter options)
  - Various translation improvements for android and ios clients
- Removed upstream patches fix-freerdp-2.0.0-usbdk-build.patch
  and fix-URBDRC_DEVICE_ADD_FLAG-definitions.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976000">- Added freerdp-bug-6205.patch to fix reading newline on certificate accept gh#FreeRDP/FreeRDP#6205
- Added freerdp-bug-6175.patch to fix Certificate Checking Recently Broke gh#FreeRDP/FreeRDP#6148
- Added freerdp-bug-6207.patch to fix Abort on first possible certificate validation error gh#FreeRDP/FreeRDP#6207</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1589976001">- Updated to release 2.1.1 (boo#1171441)
  * CVE-2020-13396: GHSL-2020-100 OOB Read in ntlm_read_ChallengeMessage
  * CVE-2020-13397: GHSL-2020-101 OOB Read in security_fips_decrypt due to uninitialized value
  * CVE-2020-13398: GHSL-2020-102 OOB Write in crypto_rsa_common
  * Enforce synchronous legacy RDP encryption count (#6156)
  * Fixed some leaks and crashes missed in 2.1.0
  * Removed dynamic channel listener limits
  * Lots of resource cleanup fixes (clang sanitizers)
  * A couple of performance improvements
  * Various small annoyances eliminated (typos, prefilled username for windows client, ...)
- Removed freerdp-bug-6175.patch and freerdp-bug-6207.patch because included in upstream</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1592827200">- Updated to release 2.1.2 (boo#1173247)
  * CVE-2020-4033 Out of bound read in RLEDECOMPRESS
  * CVE-2020-4031 Use-After-Free in gdi_SelectObject
  * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order`
  * CVE-2020-4030 OOB read in `TrioParse`
  * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet
  * CVE-2020-11098 Out-of-bound read in glyph_cache_put
  * CVE-2020-11097 OOB read in ntlm_av_pair_get
  * CVE-2020-11095 Global OOB read in update_recv_primary_order
  * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order
  * Gateway RPC fixes for windows
  * Fixed resource fee race resulting in double free in USB redirection
  * Fixed wayland client crashes
  * Fixed X11 client mouse mapping issues (X11 mapping on/off)
  * Some proxy related improvements (capture module)
  * Code cleanup (use getlogin_r, ...)
- Removed obsolete upstream patch freerdp-bug-6205.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593691200">- Added freerdp_Mask_CACHED_BRUSH_when_checking_brush_style.patch
  which fixed frequent crashes described in boo#1173605 and gh#FreeRDP/FreeRDP#6298</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1594987200">- Drop BuildRequires of libavcodec for Leap/SLE (bsc#1174200)
- Cleaned up spec file</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1597060800">- Add freerdp-CVE-2020-15103.patch: Fix integer overflow due to
  missing input sanitation in rdpegfx channel (bsc#1174321,
  gh#FreeRDP/FreeRDP#6381, CVE-2020-15103).</changelog>
</package>
<package pkgid="614a8d801b5ca7130c0bad1b108126aece819a2600683620c0dccbb7e34bda13" name="freetds" arch="src">
  <version epoch="0" ver="1.1.36" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.00.24
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1490443200">- Update to version 1.0.27
  * See NEWS for a complete list of changes</changelog>
  <changelog author="vsistek@suse.com" date="1495108800">- Update to version 1.0.39
  * See NEWS for a complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1521806400">- Version update to 1.0.83:
  * See NEWS for a complete list of changes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563192000">- Add configure-return-void-fix.patch in order to fix wrong
  configure with -Werror=return-type.</changelog>
  <changelog author="Linnaea Lavia &lt;obs@lavia.moe&gt;" date="1572955200">- Enable Kerberos support
- Version update to 1.1.20:
  * Default TDS protocol version is now "auto"
  * Improved UTF-8 performances
  * TDS Pool Server is enabled
  * MARS support is enabled
  * NTLMv2 is enabled
  * See NEWS and ChangeLog for a complete list of changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589544000">- Update to 1.1.36:
  * Various bugfixes
  * bsc#1141132 CVE-2019-13508</changelog>
</package>
<package pkgid="b8a28cf5bf7bd344cdcd6e58b25a9775771d7c1b49018e6796357a1812177057" name="freetds-config" arch="i586">
  <version epoch="0" ver="1.1.36" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.00.24
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1490443200">- Update to version 1.0.27
  * See NEWS for a complete list of changes</changelog>
  <changelog author="vsistek@suse.com" date="1495108800">- Update to version 1.0.39
  * See NEWS for a complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1521806400">- Version update to 1.0.83:
  * See NEWS for a complete list of changes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563192000">- Add configure-return-void-fix.patch in order to fix wrong
  configure with -Werror=return-type.</changelog>
  <changelog author="Linnaea Lavia &lt;obs@lavia.moe&gt;" date="1572955200">- Enable Kerberos support
- Version update to 1.1.20:
  * Default TDS protocol version is now "auto"
  * Improved UTF-8 performances
  * TDS Pool Server is enabled
  * MARS support is enabled
  * NTLMv2 is enabled
  * See NEWS and ChangeLog for a complete list of changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589544000">- Update to 1.1.36:
  * Various bugfixes
  * bsc#1141132 CVE-2019-13508</changelog>
</package>
<package pkgid="144afa0b6f0a8e7667261a90c75b44219f302b09363b5377733498e1cc2d1623" name="freetds-config" arch="x86_64">
  <version epoch="0" ver="1.1.36" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.00.24
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1490443200">- Update to version 1.0.27
  * See NEWS for a complete list of changes</changelog>
  <changelog author="vsistek@suse.com" date="1495108800">- Update to version 1.0.39
  * See NEWS for a complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1521806400">- Version update to 1.0.83:
  * See NEWS for a complete list of changes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563192000">- Add configure-return-void-fix.patch in order to fix wrong
  configure with -Werror=return-type.</changelog>
  <changelog author="Linnaea Lavia &lt;obs@lavia.moe&gt;" date="1572955200">- Enable Kerberos support
- Version update to 1.1.20:
  * Default TDS protocol version is now "auto"
  * Improved UTF-8 performances
  * TDS Pool Server is enabled
  * MARS support is enabled
  * NTLMv2 is enabled
  * See NEWS and ChangeLog for a complete list of changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589544000">- Update to 1.1.36:
  * Various bugfixes
  * bsc#1141132 CVE-2019-13508</changelog>
</package>
<package pkgid="546cfc6d3cced7ce3834779fdb95dbc7436bd7a2fc27945d0024345400f29654" name="freetds-devel" arch="i586">
  <version epoch="0" ver="1.1.36" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.00.24
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1490443200">- Update to version 1.0.27
  * See NEWS for a complete list of changes</changelog>
  <changelog author="vsistek@suse.com" date="1495108800">- Update to version 1.0.39
  * See NEWS for a complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1521806400">- Version update to 1.0.83:
  * See NEWS for a complete list of changes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563192000">- Add configure-return-void-fix.patch in order to fix wrong
  configure with -Werror=return-type.</changelog>
  <changelog author="Linnaea Lavia &lt;obs@lavia.moe&gt;" date="1572955200">- Enable Kerberos support
- Version update to 1.1.20:
  * Default TDS protocol version is now "auto"
  * Improved UTF-8 performances
  * TDS Pool Server is enabled
  * MARS support is enabled
  * NTLMv2 is enabled
  * See NEWS and ChangeLog for a complete list of changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589544000">- Update to 1.1.36:
  * Various bugfixes
  * bsc#1141132 CVE-2019-13508</changelog>
</package>
<package pkgid="abb9a98cf437d916baf8d7ad79a183f49aa5a222bd9ded96b4cb1eedcd956f13" name="freetds-devel" arch="x86_64">
  <version epoch="0" ver="1.1.36" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.00.24
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1490443200">- Update to version 1.0.27
  * See NEWS for a complete list of changes</changelog>
  <changelog author="vsistek@suse.com" date="1495108800">- Update to version 1.0.39
  * See NEWS for a complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1521806400">- Version update to 1.0.83:
  * See NEWS for a complete list of changes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563192000">- Add configure-return-void-fix.patch in order to fix wrong
  configure with -Werror=return-type.</changelog>
  <changelog author="Linnaea Lavia &lt;obs@lavia.moe&gt;" date="1572955200">- Enable Kerberos support
- Version update to 1.1.20:
  * Default TDS protocol version is now "auto"
  * Improved UTF-8 performances
  * TDS Pool Server is enabled
  * MARS support is enabled
  * NTLMv2 is enabled
  * See NEWS and ChangeLog for a complete list of changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589544000">- Update to 1.1.36:
  * Various bugfixes
  * bsc#1141132 CVE-2019-13508</changelog>
</package>
<package pkgid="b4de2d83e76d1f107c7872421900517507cea1f76948f313ceb45b3fd545dea2" name="freetds-doc" arch="i586">
  <version epoch="0" ver="1.1.36" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.00.24
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1490443200">- Update to version 1.0.27
  * See NEWS for a complete list of changes</changelog>
  <changelog author="vsistek@suse.com" date="1495108800">- Update to version 1.0.39
  * See NEWS for a complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1521806400">- Version update to 1.0.83:
  * See NEWS for a complete list of changes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563192000">- Add configure-return-void-fix.patch in order to fix wrong
  configure with -Werror=return-type.</changelog>
  <changelog author="Linnaea Lavia &lt;obs@lavia.moe&gt;" date="1572955200">- Enable Kerberos support
- Version update to 1.1.20:
  * Default TDS protocol version is now "auto"
  * Improved UTF-8 performances
  * TDS Pool Server is enabled
  * MARS support is enabled
  * NTLMv2 is enabled
  * See NEWS and ChangeLog for a complete list of changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589544000">- Update to 1.1.36:
  * Various bugfixes
  * bsc#1141132 CVE-2019-13508</changelog>
</package>
<package pkgid="7239d098f221f6bd8fe30f64cb7a013f1c62299e8feb590786b643f8fff38aaf" name="freetds-doc" arch="x86_64">
  <version epoch="0" ver="1.1.36" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.00.24
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1490443200">- Update to version 1.0.27
  * See NEWS for a complete list of changes</changelog>
  <changelog author="vsistek@suse.com" date="1495108800">- Update to version 1.0.39
  * See NEWS for a complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1521806400">- Version update to 1.0.83:
  * See NEWS for a complete list of changes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563192000">- Add configure-return-void-fix.patch in order to fix wrong
  configure with -Werror=return-type.</changelog>
  <changelog author="Linnaea Lavia &lt;obs@lavia.moe&gt;" date="1572955200">- Enable Kerberos support
- Version update to 1.1.20:
  * Default TDS protocol version is now "auto"
  * Improved UTF-8 performances
  * TDS Pool Server is enabled
  * MARS support is enabled
  * NTLMv2 is enabled
  * See NEWS and ChangeLog for a complete list of changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589544000">- Update to 1.1.36:
  * Various bugfixes
  * bsc#1141132 CVE-2019-13508</changelog>
</package>
<package pkgid="26fad3f2ad5691a5ce021459c8c6bbf1b13ccca74870bd375470d9e386c0752e" name="freetds-tools" arch="i586">
  <version epoch="0" ver="1.1.36" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.00.24
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1490443200">- Update to version 1.0.27
  * See NEWS for a complete list of changes</changelog>
  <changelog author="vsistek@suse.com" date="1495108800">- Update to version 1.0.39
  * See NEWS for a complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1521806400">- Version update to 1.0.83:
  * See NEWS for a complete list of changes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563192000">- Add configure-return-void-fix.patch in order to fix wrong
  configure with -Werror=return-type.</changelog>
  <changelog author="Linnaea Lavia &lt;obs@lavia.moe&gt;" date="1572955200">- Enable Kerberos support
- Version update to 1.1.20:
  * Default TDS protocol version is now "auto"
  * Improved UTF-8 performances
  * TDS Pool Server is enabled
  * MARS support is enabled
  * NTLMv2 is enabled
  * See NEWS and ChangeLog for a complete list of changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589544000">- Update to 1.1.36:
  * Various bugfixes
  * bsc#1141132 CVE-2019-13508</changelog>
</package>
<package pkgid="26f2feec06d8d249fb141e97f39b2990ee75652a6d1ae8b9c673eaf3aa48ca04" name="freetds-tools" arch="x86_64">
  <version epoch="0" ver="1.1.36" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417867200">- Update to new upstream release 0.91.103
  * fix memleak when using REALM option in freetds.conf
  * ODBC driver did not return parameters as rows
- freetds-devel had a dangling symlink due to lack of Require on
  libtdsodbc0
- Shlib packaging guideline: put libct and libsybdb in separate
  subpackages.
- Improve description for the different API libraries.
- Do not ignore output from odbcinst or ldconfig.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 0.91.112:
  * No obvious changelog
- Various spec-cleaner sorting</changelog>
  <changelog author="tchvatal@suse.com" date="1428753600">- Drop autoreconf call which was pointless. Seems to build without
  and thus fixes build on sle11.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Update to 0.95.8
  - See NEWS for complete list of changes
- Update dependencies
- Enable gnutls support</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 0.95.65
  - See NEWS for complete list of changes
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1447675200">- Update to 0.95.67
  - See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.95.76
  - See NEWS for complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 0.95.79:
  * See NEWS file for in-depth changes list</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.95.80
  * See NEWS for complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.95.82
  * See NEWS for complete list of changes</changelog>
  <changelog author="tabraham@suse.com" date="1456920000">- Update to 0.95.87
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 0.95.94
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 0.95.95
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.00.24
  * See NEWS for a complete list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1490443200">- Update to version 1.0.27
  * See NEWS for a complete list of changes</changelog>
  <changelog author="vsistek@suse.com" date="1495108800">- Update to version 1.0.39
  * See NEWS for a complete list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1521806400">- Version update to 1.0.83:
  * See NEWS for a complete list of changes</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563192000">- Add configure-return-void-fix.patch in order to fix wrong
  configure with -Werror=return-type.</changelog>
  <changelog author="Linnaea Lavia &lt;obs@lavia.moe&gt;" date="1572955200">- Enable Kerberos support
- Version update to 1.1.20:
  * Default TDS protocol version is now "auto"
  * Improved UTF-8 performances
  * TDS Pool Server is enabled
  * MARS support is enabled
  * NTLMv2 is enabled
  * See NEWS and ChangeLog for a complete list of changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1589544000">- Update to 1.1.36:
  * Various bugfixes
  * bsc#1141132 CVE-2019-13508</changelog>
</package>
<package pkgid="047f46ffca547b81e2ccf711416aaabb1df7257f04163761e08225da741be7d3" name="freetype2" arch="src">
  <version epoch="0" ver="2.10.1" rel="lp151.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * IMPORTANT CHANGES
  - The auto-hinter now supports stem darkening, to be controlled by
    the    new   `no-stem-darkening'    and   `darkening-parameters'
    properties.   This is  an  experimental  feature contributed  by
    Nikolaus Waxweiler, and  the interface might change  in a future
    release.
  - By default, stem darkening is now switched off (for both the CFF
    engine and the  auto-hinter).  The main reason is  that you need
    linear  alpha  blending  and  gamma correction  to  get  correct
    rendering results, and  the latter is not yet  available in most
    freely  available  rendering  stacks like  X11.   Applying  stem
    darkening without proper gamma correction  leads to far too dark
    rendering results.
  - The   meaning  of   `FT_RENDER_MODE_LIGHT'  has   been  slightly
    modified.   It  now  essentially  means `no  hinting  along  the
    horizontal  axis'; in  particular,  no change  of glyph  advance
    widths.  Consequently, the auto-hinter  is used for all scalable
    font  formats  except  for  CFF.    It  is  planned  that  other
    font-specific rendering engines (TrueType, Type 1) will follow.
  * MISCELLANEOUS
  - The default  LCD filter  has been changed  to be  normalized and
    color-balanced.
  - For    better    compatibility   with    FontConfig,    function
    `FT_Library_SetLcdFilter'  accepts   a  new   enumeration  value
    `FT_LCD_FILTER_LEGACY1'   (which  has   the   same  meaning   as
    `FT_LCD_FILTER_LEGACY').
  - A large number of bugs have been detected by using the libFuzzer
    framework,  which should  further  improve  handling of  invalid
    fonts.  Thanks again to Kostya Serebryany and Bungeman!
  - `TT_CONFIG_OPTION_MAX_RUNNABLE_OPCODES',  a   new  configuration
    option, controls the maximum number of executed opcodes within a
    bytecode program.  You don't want to change this except for very
    special  situations (e.g.,  making a  library fuzzer  spend less
    time to handle broken fonts).
  - The smooth renderer has been made faster.</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
</package>
<package pkgid="2b3d856244614c36726b8d8139044764e0d9ca23fff99dc185700c22d07534df" name="freetype2" arch="src">
  <version epoch="0" ver="2.10.1" rel="lp151.4.6.1"/>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="181f60469ccd69a34b40183ea2b9b8e54577f2edc21966c367bb125264c14da5" name="freetype2-devel" arch="i586">
  <version epoch="0" ver="2.10.1" rel="lp151.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * IMPORTANT CHANGES
  - The auto-hinter now supports stem darkening, to be controlled by
    the    new   `no-stem-darkening'    and   `darkening-parameters'
    properties.   This is  an  experimental  feature contributed  by
    Nikolaus Waxweiler, and  the interface might change  in a future
    release.
  - By default, stem darkening is now switched off (for both the CFF
    engine and the  auto-hinter).  The main reason is  that you need
    linear  alpha  blending  and  gamma correction  to  get  correct
    rendering results, and  the latter is not yet  available in most
    freely  available  rendering  stacks like  X11.   Applying  stem
    darkening without proper gamma correction  leads to far too dark
    rendering results.
  - The   meaning  of   `FT_RENDER_MODE_LIGHT'  has   been  slightly
    modified.   It  now  essentially  means `no  hinting  along  the
    horizontal  axis'; in  particular,  no change  of glyph  advance
    widths.  Consequently, the auto-hinter  is used for all scalable
    font  formats  except  for  CFF.    It  is  planned  that  other
    font-specific rendering engines (TrueType, Type 1) will follow.
  * MISCELLANEOUS
  - The default  LCD filter  has been changed  to be  normalized and
    color-balanced.
  - For    better    compatibility   with    FontConfig,    function
    `FT_Library_SetLcdFilter'  accepts   a  new   enumeration  value
    `FT_LCD_FILTER_LEGACY1'   (which  has   the   same  meaning   as
    `FT_LCD_FILTER_LEGACY').
  - A large number of bugs have been detected by using the libFuzzer
    framework,  which should  further  improve  handling of  invalid
    fonts.  Thanks again to Kostya Serebryany and Bungeman!
  - `TT_CONFIG_OPTION_MAX_RUNNABLE_OPCODES',  a   new  configuration
    option, controls the maximum number of executed opcodes within a
    bytecode program.  You don't want to change this except for very
    special  situations (e.g.,  making a  library fuzzer  spend less
    time to handle broken fonts).
  - The smooth renderer has been made faster.</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
</package>
<package pkgid="85f68042859ad256058817c0f1927aeac1ebccc20302f9217f8f77a64ff3f488" name="freetype2-devel" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="lp151.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * IMPORTANT CHANGES
  - The auto-hinter now supports stem darkening, to be controlled by
    the    new   `no-stem-darkening'    and   `darkening-parameters'
    properties.   This is  an  experimental  feature contributed  by
    Nikolaus Waxweiler, and  the interface might change  in a future
    release.
  - By default, stem darkening is now switched off (for both the CFF
    engine and the  auto-hinter).  The main reason is  that you need
    linear  alpha  blending  and  gamma correction  to  get  correct
    rendering results, and  the latter is not yet  available in most
    freely  available  rendering  stacks like  X11.   Applying  stem
    darkening without proper gamma correction  leads to far too dark
    rendering results.
  - The   meaning  of   `FT_RENDER_MODE_LIGHT'  has   been  slightly
    modified.   It  now  essentially  means `no  hinting  along  the
    horizontal  axis'; in  particular,  no change  of glyph  advance
    widths.  Consequently, the auto-hinter  is used for all scalable
    font  formats  except  for  CFF.    It  is  planned  that  other
    font-specific rendering engines (TrueType, Type 1) will follow.
  * MISCELLANEOUS
  - The default  LCD filter  has been changed  to be  normalized and
    color-balanced.
  - For    better    compatibility   with    FontConfig,    function
    `FT_Library_SetLcdFilter'  accepts   a  new   enumeration  value
    `FT_LCD_FILTER_LEGACY1'   (which  has   the   same  meaning   as
    `FT_LCD_FILTER_LEGACY').
  - A large number of bugs have been detected by using the libFuzzer
    framework,  which should  further  improve  handling of  invalid
    fonts.  Thanks again to Kostya Serebryany and Bungeman!
  - `TT_CONFIG_OPTION_MAX_RUNNABLE_OPCODES',  a   new  configuration
    option, controls the maximum number of executed opcodes within a
    bytecode program.  You don't want to change this except for very
    special  situations (e.g.,  making a  library fuzzer  spend less
    time to handle broken fonts).
  - The smooth renderer has been made faster.</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
</package>
<package pkgid="aa519c4bd21bb915e19dc58d3fdf79d41c210041796dfcde3145d5b596c50912" name="freetype2-devel" arch="i586">
  <version epoch="0" ver="2.10.1" rel="lp151.4.6.1"/>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="5ccf6494089f728eae4db79d638c516800fcd2646785bc7596411fb5471328dd" name="freetype2-devel" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="lp151.4.6.1"/>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="baf05f47598f8862d4aa666b16ed3963a8c6ac6a1738a76f9a6bbeb3e18e7e97" name="freetype2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="lp151.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * IMPORTANT CHANGES
  - The auto-hinter now supports stem darkening, to be controlled by
    the    new   `no-stem-darkening'    and   `darkening-parameters'
    properties.   This is  an  experimental  feature contributed  by
    Nikolaus Waxweiler, and  the interface might change  in a future
    release.
  - By default, stem darkening is now switched off (for both the CFF
    engine and the  auto-hinter).  The main reason is  that you need
    linear  alpha  blending  and  gamma correction  to  get  correct
    rendering results, and  the latter is not yet  available in most
    freely  available  rendering  stacks like  X11.   Applying  stem
    darkening without proper gamma correction  leads to far too dark
    rendering results.
  - The   meaning  of   `FT_RENDER_MODE_LIGHT'  has   been  slightly
    modified.   It  now  essentially  means `no  hinting  along  the
    horizontal  axis'; in  particular,  no change  of glyph  advance
    widths.  Consequently, the auto-hinter  is used for all scalable
    font  formats  except  for  CFF.    It  is  planned  that  other
    font-specific rendering engines (TrueType, Type 1) will follow.
  * MISCELLANEOUS
  - The default  LCD filter  has been changed  to be  normalized and
    color-balanced.
  - For    better    compatibility   with    FontConfig,    function
    `FT_Library_SetLcdFilter'  accepts   a  new   enumeration  value
    `FT_LCD_FILTER_LEGACY1'   (which  has   the   same  meaning   as
    `FT_LCD_FILTER_LEGACY').
  - A large number of bugs have been detected by using the libFuzzer
    framework,  which should  further  improve  handling of  invalid
    fonts.  Thanks again to Kostya Serebryany and Bungeman!
  - `TT_CONFIG_OPTION_MAX_RUNNABLE_OPCODES',  a   new  configuration
    option, controls the maximum number of executed opcodes within a
    bytecode program.  You don't want to change this except for very
    special  situations (e.g.,  making a  library fuzzer  spend less
    time to handle broken fonts).
  - The smooth renderer has been made faster.</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
</package>
<package pkgid="0ae5052b257cd5b5b5c1576cbd1dce2ecb3b26c332982454a083a5d03379ffe3" name="freetype2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="lp151.4.6.1"/>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="ebb30e0ea8595e04eda125c4e2df0e293c2de4cabea9fed8b076098249d23b8a" name="freetype2-profile-tti35" arch="noarch">
  <version epoch="0" ver="2.10.1" rel="lp151.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * IMPORTANT CHANGES
  - The auto-hinter now supports stem darkening, to be controlled by
    the    new   `no-stem-darkening'    and   `darkening-parameters'
    properties.   This is  an  experimental  feature contributed  by
    Nikolaus Waxweiler, and  the interface might change  in a future
    release.
  - By default, stem darkening is now switched off (for both the CFF
    engine and the  auto-hinter).  The main reason is  that you need
    linear  alpha  blending  and  gamma correction  to  get  correct
    rendering results, and  the latter is not yet  available in most
    freely  available  rendering  stacks like  X11.   Applying  stem
    darkening without proper gamma correction  leads to far too dark
    rendering results.
  - The   meaning  of   `FT_RENDER_MODE_LIGHT'  has   been  slightly
    modified.   It  now  essentially  means `no  hinting  along  the
    horizontal  axis'; in  particular,  no change  of glyph  advance
    widths.  Consequently, the auto-hinter  is used for all scalable
    font  formats  except  for  CFF.    It  is  planned  that  other
    font-specific rendering engines (TrueType, Type 1) will follow.
  * MISCELLANEOUS
  - The default  LCD filter  has been changed  to be  normalized and
    color-balanced.
  - For    better    compatibility   with    FontConfig,    function
    `FT_Library_SetLcdFilter'  accepts   a  new   enumeration  value
    `FT_LCD_FILTER_LEGACY1'   (which  has   the   same  meaning   as
    `FT_LCD_FILTER_LEGACY').
  - A large number of bugs have been detected by using the libFuzzer
    framework,  which should  further  improve  handling of  invalid
    fonts.  Thanks again to Kostya Serebryany and Bungeman!
  - `TT_CONFIG_OPTION_MAX_RUNNABLE_OPCODES',  a   new  configuration
    option, controls the maximum number of executed opcodes within a
    bytecode program.  You don't want to change this except for very
    special  situations (e.g.,  making a  library fuzzer  spend less
    time to handle broken fonts).
  - The smooth renderer has been made faster.</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
</package>
<package pkgid="a75e024f57aa51b68a562ae7d01412941c2b98f73a0212fcef0788f765598311" name="freetype2-profile-tti35" arch="noarch">
  <version epoch="0" ver="2.10.1" rel="lp151.4.6.1"/>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="d37a029b2c4747145b7b6961248cde03b1a46cb9f262e0df0142501e330e2d2a" name="fstrcmp" arch="src">
  <version epoch="0" ver="0.7.D001" rel="lp151.2.1"/>
  <changelog author="olaf@aepfle.de" date="1553083200">- Initial version 0.7.D001</changelog>
</package>
<package pkgid="2f7dd7bea258297d225797dd3a2f5b3eee8eb2c70debde29ed61214c489f7a5b" name="fstrcmp" arch="x86_64">
  <version epoch="0" ver="0.7.D001" rel="lp151.2.1"/>
  <changelog author="olaf@aepfle.de" date="1553083200">- Initial version 0.7.D001</changelog>
</package>
<package pkgid="bb73f38a2a956d568be90c51895dc3cf39dd5f1c90d66d88ff91eb8a8eff1e90" name="fstrcmp-devel" arch="x86_64">
  <version epoch="0" ver="0.7.D001" rel="lp151.2.1"/>
  <changelog author="olaf@aepfle.de" date="1553083200">- Initial version 0.7.D001</changelog>
</package>
<package pkgid="5e2614c62582822b272480f66c7acbf5ade4b579777033dbc7b9ec378f831997" name="ft2demos" arch="src">
  <version epoch="0" ver="2.10.1" rel="lp151.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="e2e0c37149f90d549e4685eabde85b452f17d39958c17f46ea5d97ea98cf6749" name="ft2demos" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="lp151.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="8a77372fb1b6015958f436b1ea780696259c24a1cf0014ca8ab85c447da99769" name="ft2demos" arch="src">
  <version epoch="0" ver="2.10.1" rel="lp151.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="30d0d75920e0b26f924bc7ba7f7e78baed18e07051e56a5de5423c4accf8b2af" name="ft2demos" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="lp151.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="b7ce6a4f50bb74869e0493c8d9cb71770a8c1e1b6bcf72725157b34d697cd800" name="ftbench" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="lp151.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="d5f5f503ad0bba8c182ce0f84ed20a196ca0c3844a0878dffd65d957e2187789" name="ftbench" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="lp151.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="62d95bb5afdfa40d84853dca43d5c16a7b71440ae0f3c5f4a372c369bff35730" name="ftdiff" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="lp151.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="2130fe5548e1000c2a3fd794c737935f27295d34e362fdc416b411d96e2bf2db" name="ftdiff" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="lp151.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to co